How to Audit Change Management Under Clause 6.3 of ISO 14001:2026

Why Clause 6.3 Deserves More Audit Time Than It Gets

Change management is one of those areas that looks straightforward on paper but reveals serious gaps when you actually dig into it during an audit. Clause 6.3 of ISO 14001:2026 requires organisations to plan changes to their environmental management system in a controlled way, considering the purpose of the changes, potential consequences, the integrity of the EMS, and the availability of resources. That is four distinct considerations, and most organisations only think about one of them.

In practice, auditors often find that organisations treat change management as an administrative task. Someone fills in a change request form, a manager signs it, and the process moves on. What is missing is genuine consideration of environmental consequences, updated aspect and impact assessments, and communication to the people who need to know. If you are auditing an EMS under ISO 14001:2026, this article will walk you through what to look for, what questions to ask, and where the real nonconformities tend to hide.

If you want to understand what the clause itself requires before approaching it from an audit perspective, the article on Planning of Changes: Inside the New Clause 6.3 of ISO 14001:2026 covers the requirements in detail.

What ISO 14001:2026 Clause 6.3 Actually Requires

Before you can audit a clause effectively, you need to be clear on what it demands. Clause 6.3 applies when an organisation determines the need to make changes to its EMS. It does not apply to every operational change in the business. The trigger is a change that affects the EMS itself, meaning changes to processes, procedures, responsibilities, objectives, or the scope of the system.

The clause requires the organisation to consider:

• The purpose of the changes and their potential consequences
• The integrity of the EMS during and after the change
• The availability of resources to implement the change
• The allocation or reallocation of responsibilities and authorities

ISO 14001:2026 brought some refinements to how this clause sits within the broader planning structure. Changes to the EMS now need to be considered alongside the organisation's risks, opportunities, and compliance obligations. That means a change in one area of the system should trigger a review of whether it creates new environmental aspects or affects existing compliance obligations. This is a more connected view of change than some organisations have been applying.

Common Triggers for EMS Changes

One of the first things to establish during an audit is what kinds of changes the organisation has experienced in the audit period. If you ask a general question about changes to the EMS, you will often get a blank look. It helps to prompt with specific examples of what typically triggers EMS changes.

Common triggers include:

• New or modified plant, equipment, or production processes
• Changes in raw materials or chemicals used on site
• Expansion or contraction of the site boundary or operational scope
• New legislative or regulatory requirements affecting environmental obligations
• Organisational restructuring that affects who owns EMS responsibilities
• Changes to environmental objectives or targets
• Significant incidents or near misses that prompt process revision
• New contractors or outsourced activities with environmental implications

In construction and infrastructure environments, changes happen constantly. A company might introduce a new concrete batching process, start using a different fuel type for plant, or take on a project in a sensitive ecological zone. Each of these should trigger a review under Clause 6.3. For more on how EMS requirements apply in construction contexts, the article on ISO 14001 for Construction Companies: Managing Environmental Impacts on Site is worth reading alongside this one.

Where to Start Your Audit of Clause 6.3

Review the Change Register or Change Log

Most organisations that have a functioning change management process will maintain some kind of register. Ask to see it. Look at what has been recorded over the past twelve months and assess whether the entries reflect the reality of what has happened in the business. If the register is sparse but the organisation has clearly been through significant operational changes, that is a red flag.

Check whether the register distinguishes between changes that affect the EMS and those that do not. A mature system will have a triage step where someone with environmental knowledge determines whether a proposed change needs to go through the full EMS change process.

Sample Individual Change Records

Select three to five changes from the register and trace each one through the process. For each change, you want to see evidence that the four considerations in Clause 6.3 were addressed. Ask yourself:

• Was the purpose of the change documented?
• Was there a documented assessment of potential environmental consequences?
• Was the aspect and impact register reviewed or updated?
• Were compliance obligations checked against the change?
• Were the resources needed for the change identified and confirmed as available?
• Were responsibilities and authorities updated if needed?
• Was the change communicated to relevant personnel?

You will rarely find all of these addressed in a single document. Evidence can be spread across a change form, a meeting record, an updated procedure, and an email. That is fine. What you are looking for is evidence that the thinking happened, not evidence that it was captured in one tidy place.

Interview the People Who Own the Process

Ask the environmental manager or the person responsible for EMS changes to walk you through a recent change. Ask them to explain how they decided whether a change needed to go through the formal process. Ask what they considered when assessing consequences. Ask who they consulted. The answers will tell you far more than the paperwork.

A common pattern in organisations that are going through the motions is that the person doing the interview cannot explain the reasoning behind the change assessment. They can show you the signed form, but they cannot tell you what environmental consequences were considered or why certain aspects were not flagged as significant. That disconnect between the documented process and the actual thinking is worth noting.

Specific Audit Scenarios and What to Look For

Scenario 1: A New Chemical Introduced to the Process

Imagine you are auditing a manufacturing facility that introduced a new cleaning solvent six months ago. You find the change in the register. The change form shows approval from the production manager. But when you check the aspect and impact register, the new solvent is not listed. The safety data sheet is on file, but no one has assessed the environmental consequence of a spill, the disposal pathway for contaminated waste, or whether the new substance triggers any additional compliance obligations under state environmental legislation.

This is a nonconformity against Clause 6.3. The change was recorded but the consequences were not properly considered. The EMS integrity was not maintained because the aspect register is now out of date.

Scenario 2: A Restructure That Moved Environmental Responsibilities

The organisation went through a restructure twelve months ago. The previous environmental coordinator left and their responsibilities were distributed across two other roles. When you ask who is responsible for maintaining the legal register, you get two different answers from two different people. When you check the documented responsibilities, they still reference the old role title.

This is another Clause 6.3 issue. The change to the organisational structure was not managed through the EMS change process. Responsibilities and authorities were not reallocated in a documented way, and the integrity of the system has been compromised as a result.

Scenario 3: A New Site Added to Scope

The organisation has expanded and a new warehouse facility has been added to the EMS scope. When you ask to see the change management records for this addition, you are told it was handled through the project management process, not the EMS change process. There is no evidence that environmental aspects at the new site were assessed before operations began, no evidence that compliance obligations for the new location were reviewed, and no evidence that the objectives and targets were updated to include the new site.

Again, this is a failure of Clause 6.3. The addition of a new site is a significant change to the EMS, and it required planned consideration of consequences, resources, and responsibilities.

Connecting Clause 6.3 to Other EMS Clauses

One of the most useful audit techniques for change management is to follow the thread from a change into other parts of the EMS. A change that is properly managed should leave traces across multiple clauses. If you find a change that only appears in the change register and nowhere else, that is usually a sign that the downstream implications were not followed through.

For example, a change that introduces a new significant environmental aspect should appear in:

• The aspect and impact register (Clause 6.1.2)
• The risks and opportunities assessment (Clause 6.1.4 in ISO 14001:2026)
• The compliance obligations review if new legal requirements apply (Clause 6.1.3)
• Operational controls if new procedures are needed (Clause 8.1)
• Monitoring and measurement if new parameters need tracking (Clause 9.1)
• Training records if people need new competencies (Clause 7.2)

If you trace a change and find that it only shows up at the point of initiation but not in any of these downstream areas, the change management process is not working as intended. The article on How to Audit Risks and Opportunities Under ISO 14001:2026 covers the Clause 6.1 side of this connection in more detail.

Gathering Audit Evidence for Clause 6.3

The evidence you need for a Clause 6.3 audit comes from multiple sources. Do not rely solely on the change register. Useful evidence sources include:

• Change request forms and approval records
• Updated aspect and impact registers with version history
• Meeting minutes where changes were discussed and assessed
• Updated procedures or work instructions
• Training records for personnel affected by the change
• Revised responsibility matrices or position descriptions
• Correspondence with regulators if compliance obligations were affected
• Management review records that reference changes considered during the period

When you are gathering this evidence, think about triangulation. A single document telling you a change was assessed is weaker than a change form, an updated register, and a training record that all point to the same change being properly managed. For a broader discussion of how to gather and use audit evidence effectively, the article on Audit Evidence Explained: What It Is, Where to Find It, and How to Use It is a practical reference.

Common Nonconformities Under Clause 6.3

Based on real audit experience, the most frequent issues found under Clause 6.3 of ISO 14001 include:

• Changes to operations that affected environmental aspects were not captured in the change management process at all
• The change process exists but only considers safety or quality implications, not environmental consequences
• Aspect and impact registers are not updated when changes occur, leaving the register out of date
• Responsibilities and authorities changed through restructuring but the EMS documentation was not updated
• Resources were not confirmed as available before changes were implemented, leading to gaps in operational controls
• Changes were identified and assessed but not communicated to the people responsible for implementing new controls
• The change management process does not have a defined trigger, so it relies on individuals to self identify when a change is significant enough to require EMS review

The last point is particularly common and particularly difficult to audit, because the absence of a trigger definition means you often cannot prove that a specific change should have gone through the process. The best approach is to identify changes that clearly had environmental implications and were not captured, then use those as the basis for your finding.

Writing Findings for Clause 6.3

When you write a nonconformity against Clause 6.3, be specific about which of the four considerations was not addressed. A finding that says simply that change management was inadequate is not useful. A finding that says the introduction of a new solvent was not assessed for environmental consequences, the aspect register was not updated, and no additional compliance obligations were reviewed is specific, traceable, and actionable.

Link your finding to objective evidence. Name the change, the date, the record you reviewed, and what was missing. If you are writing an observation rather than a nonconformity, be equally specific about what you noticed and why it could become a problem if not addressed. For guidance on writing findings that hold up under challenge, the article on How to Write Audit Findings That Stand Up to Challenge covers the structure and language in detail.

Practical Tips for Auditing Clause 6.3 Efficiently

A few things that make Clause 6.3 audits more productive:

• Ask for the change register before the audit begins so you can review it during your preparation and identify which changes to sample
• Cross reference the change register against the aspect register version history to check whether updates were made at the right times
• Ask the environmental manager what the biggest operational change in the past year was, then check whether it appears in the change register
• Look at the management review records to see whether changes to the EMS were discussed and whether the review noted any gaps
• If the organisation uses a project management process, ask how EMS change requirements are triggered from project decisions