Why Clause 6.1.1 Is the Engine Room of EMS Planning
When you audit an environmental management system, the planning clauses are where you find out whether the organisation actually thinks about environmental risk or just documents it. Clause 6.1.1 of ISO 14001:2026 sets the general requirements for planning, asking the organisation to consider its context, its interested parties, its environmental aspects, compliance obligations, and risks and opportunities together, then determine what needs to be addressed.
On this page
This is not a standalone exercise. The standard is explicit that the outputs from Clause 4 feed directly into Clause 6. If the context analysis is shallow, the planning will be shallow too. As an auditor, that connection is exactly where you should focus your attention.
The 2026 revision of ISO 14001 brought some important structural changes to Clause 6. Understanding what changed, and why it matters for how you audit, is essential before you walk into the room. If you have not yet reviewed those changes, the ISO 14001:2026 transition guide is a good starting point.
What Clause 6.1.1 Actually Requires
The clause requires the organisation to determine the risks and opportunities that need to be addressed in order to give assurance that the EMS can achieve its intended outcomes, prevent or reduce undesired effects, and achieve continual improvement. It also requires the organisation to consider potential emergency situations.
In the 2026 edition, the structure of Clause 6.1 has been reorganised. Risks and opportunities now have their own dedicated subclause (Clause 6.1.4), which separates them from aspects, compliance obligations, and emergency situations. The general planning requirements in Clause 6.1.1 set the scene for all of those subclauses. What this means for auditors is that Clause 6.1.1 is the entry point, the place where you verify that the organisation has a coherent planning approach rather than a collection of disconnected documents.
The Link to Context and Interested Parties
Clause 6.1.1 explicitly references the outputs of Clause 4.1 (context) and Clause 4.2 (interested parties). The organisation must consider these when determining what risks and opportunities are relevant. In practice, this means you need to check whether the planning process is genuinely informed by what the organisation identified in Clause 4, or whether those Clause 4 outputs are sitting in a separate document that nobody looks at.
A common finding in EMS audits is that the context analysis and the planning process are treated as separate activities completed at different times by different people. The context register lists issues and interested party needs. The risk register lists something else entirely. There is no visible connection between them. That disconnection is a nonconformity, or at the very least a significant observation worth raising.
Exemplar Global Recognised Training ProviderRTP No. 310970
How to Structure Your Audit Approach
Before you start interviewing people, spend time with the documents. You want to understand the organisation's planning framework before you test it. Pull together the context analysis, interested parties register, environmental aspects and impacts register, compliance obligations register, and whatever document the organisation uses to capture risks and opportunities. Lay them side by side, notionally or literally.
Your first question is whether these documents are connected. Do the significant environmental aspects flow from the aspects and impacts assessment? Do the risks and opportunities reflect the issues identified in Clause 4.1? Do the compliance obligations link to the legal requirements identified through the interested parties process? If the answer to any of these is unclear, you have found your first line of inquiry.
Starting the Audit Conversation
When you sit down with the environmental manager or the person responsible for EMS planning, open with broad questions before narrowing down. Ask them to walk you through how the organisation determines what needs to be addressed in its environmental planning. Let them talk. Listen for whether they describe a process or just point to documents.
A person who understands the planning process will explain how they moved from context to risks and opportunities. They will describe how significant aspects were determined. They will mention compliance obligations and how they feed into planning. If they immediately reach for a folder and start reading from a register, that is a signal to probe further. Documents are evidence of outputs. They do not tell you whether the process is understood or functional.
Questions That Reveal Whether the Process Is Genuine
Here are specific questions worth asking during a Clause 6.1.1 audit:
- How did you determine which risks and opportunities are relevant to your EMS?
- Can you show me how the issues identified in your context analysis informed your planning decisions?
- When did you last review your planning outputs, and what triggered that review?
- Who is involved in the planning process, and how does top management contribute?
- How do you account for potential emergency situations in your planning?
- If something significant changed in your operating environment, how would that feed back into your planning?
The last question is particularly useful. It tests whether the planning process is dynamic or static. An organisation that can only describe what they did when they first implemented the EMS has not embedded planning as an ongoing activity. That is a gap worth documenting.
Common Nonconformities Against Clause 6.1.1
After conducting environmental audits across a wide range of industries, certain patterns come up repeatedly. Knowing what to look for saves time and helps you focus your sampling.
Planning Outputs That Do Not Reflect the Context
The organisation has a detailed context analysis covering issues like regulatory changes, community expectations, and supply chain risks. But the risks and opportunities register addresses only generic environmental topics like energy use and waste. There is no evidence that the specific issues from Clause 4.1 were considered when the planning was done. This is one of the most frequent findings under Clause 6.1.1.
Emergency Situations Not Considered
The clause requires the organisation to consider potential emergency situations as part of its planning. Many organisations treat emergency preparedness as a purely operational matter under Clause 8.2 and do not include it in their Clause 6.1.1 planning outputs. If the planning documentation makes no reference to emergency situations, ask how they were considered. If the answer is that they were not, you have a clear gap.
No Evidence of Review or Update
Planning under Clause 6.1.1 is not a one-time activity. The standard requires the organisation to maintain this information. If the planning documents have not been reviewed since initial certification, or if they were last updated several years ago with no record of a review decision, that is worth raising. Ask for evidence of the last review and what prompted it.
Disconnected Registers
As mentioned earlier, context outputs and planning outputs that do not reference each other are a red flag. If you cannot trace a line from the issues identified in Clause 4.1 to the risks and opportunities addressed in Clause 6.1, the integration requirement has not been met.
What Good Looks Like
It helps to know what you are looking for, not just what you are trying to rule out. A well-functioning Clause 6.1.1 process looks something like this.
The organisation has a clear methodology for identifying risks and opportunities. That methodology explicitly draws on the context analysis and interested parties assessment. The outputs are documented in a way that shows the connection, whether through a combined register, cross-references between documents, or meeting records that show the planning discussion considered Clause 4 outputs.
The planning outputs are reviewed at defined intervals and whenever something significant changes, such as a new regulatory requirement, a change in operations, or a significant environmental incident. There is evidence of those reviews in meeting minutes or revision histories. The people responsible for planning can explain the process without reading from a script.
Emergency situations are referenced in the planning documentation, even if the detailed response plans sit under Clause 8.2. The connection is visible.
Auditing the Integration With Other Subclauses
Clause 6.1.1 does not sit in isolation. It sets up the framework that the subsequent subclauses operate within. When you audit Clause 6.1.1, you are also setting the stage for your review of aspects and impacts under Clause 6.1.2, compliance obligations under Clause 6.1.3, and risks and opportunities under Clause 6.1.4.
A useful auditing technique is to follow a thread from Clause 6.1.1 through to one of the other subclauses. Pick a significant environmental aspect, such as fuel combustion or chemical storage, and trace how it was identified, how it was assessed as significant, how it connects to compliance obligations, and how it appears in the planning of actions. If you can follow that thread cleanly from identification to planned action, the system is working. If the thread breaks at any point, you have identified where the gap is.
For a deeper look at how aspects and impacts flow into planning, the article on environmental aspects and impacts assessment covers the methodology auditors should understand before sampling this area.
Documented Information Requirements
Clause 6.1.1 does not prescribe a specific format for how planning outputs must be documented. The standard requires that the organisation maintain documented information to the extent necessary to have confidence that the processes have been carried out as planned. This gives organisations flexibility, but it also means you need to exercise judgement about whether the documentation is sufficient.
Ask yourself whether someone picking up the documented information for the first time could understand what risks and opportunities were identified, why they were considered relevant, and what decisions were made as a result. If the answer is no, the documentation is not adequate, regardless of how many pages it runs to.
Be careful not to demand a specific format that the standard does not require. Your job is to assess whether the intent of the clause has been met, not to impose a template. That said, if the documentation is so sparse that you cannot verify conformity, that is a legitimate finding.
Sampling Strategy for Clause 6.1.1
Given that Clause 6.1.1 is a general planning clause, your sampling should be purposeful rather than exhaustive. Focus on the connections between elements rather than trying to review every risk and opportunity in detail.
Select two or three risks or opportunities from the register and trace them back to their source. Can you find the context issue or interested party need that prompted them? Then trace them forward. What actions were planned to address them? Did those actions make it into the environmental objectives or operational controls?
If you are auditing a larger organisation with multiple sites or business units, check whether the planning process accounts for site-specific conditions or whether it is purely corporate-level. Clause 6.1.1 applies to the EMS as a whole, but the risks and opportunities at a manufacturing site may be very different from those at a head office. A planning process that does not differentiate may be missing significant risks.
For guidance on how to approach sampling decisions more broadly, the article on audit sampling strategies provides a practical framework you can apply across clause-level auditing.
Exemplar Global Recognised Training ProviderRTP No. 310970Raising Findings Under Clause 6.1.1
When you write a finding against Clause 6.1.1, be specific about what the gap is. Avoid vague statements like
the planning process is not adequate.Instead, describe what you observed, what you expected to find, and the specific requirement that has not been met.
For example, a well-written finding might read:
The organisation's risks and opportunities register, last reviewed in 2021, does not reflect the significant changes to regulatory requirements identified in the 2024 context analysis. There is no evidence that the planning outputs were reviewed following the update to the context. This does not conform to the requirement in Clause 6.1.1 to maintain documented information to the extent necessary to have confidence that processes have been carried out as planned.
That kind of finding is specific, traceable, and gives the organisation a clear basis for corrective action. For more on writing findings that hold up, the guidance on how to write audit findings that stand up to challenge is worth reviewing before you finalise your report.
Practical Tips for Internal Auditors
If you are conducting this audit internally, you face an additional challenge. The people responsible for EMS planning may be your colleagues, and they may be defensive about gaps in a process they own. Keep your focus on the evidence and the requirements, not on the people.
It also helps to frame the audit as a check on whether the system is working as intended, not as a search for blame. Clause 6.1.1 gaps are often systemic rather than individual failures. The planning process may not have been reviewed because nobody was assigned responsibility for triggering that review. That is a system gap, and it is fixable.
If you are new to auditing EMS planning and want to build your confidence before conducting a live audit, structured training in ISO 14001 internal auditing will give you the clause-level knowledge and practical techniques to audit planning requirements effectively. Audit Workshop offers ISO 14001 Internal Auditor and Lead Auditor training that covers exactly these scenarios, with practical exercises built around real-world EMS situations.
