What Auditors Look For When Reviewing the EMS Under Clause 4.4

Why Clause 4.4 Is More Than a Tick Box

Clause 4.4 of ISO 14001 is deceptively short. In the 2015 edition, it reads as a single requirement: the organisation shall establish, implement, maintain, and continually improve an environmental management system, including the processes needed and their interactions, in accordance with the requirements of the standard. In the 2026 edition, that core obligation remains, but with additional expectations around climate change and lifecycle thinking woven through the broader clause structure.

Because the clause itself is brief, some auditors skim over it. That is a mistake. Clause 4.4 is the architectural clause. It is where you verify that the EMS actually exists as a functioning system, not just a folder of documents. When you audit it well, you are testing whether everything else in the standard connects and operates as intended.

This article walks through what experienced auditors look for when reviewing the EMS under Clause 4.4, including the evidence to gather, the questions to ask, and the common gaps that lead to nonconformities.

Understanding What Clause 4.4 Actually Requires

Before you can audit it, you need to understand what the clause is asking for. The requirement has four verbs: establish, implement, maintain, and continually improve. Each one matters, and each one requires different evidence.

• Establish means the system has been designed and documented in a way that reflects the organisation's context, aspects, impacts, compliance obligations, and objectives.
• Implement means the system is actually in use. Procedures exist, people follow them, and the processes interact as described.
• Maintain means the system stays current. It is reviewed, updated, and not left to gather dust.
• Continually improve means the organisation is actively seeking to enhance environmental performance, not just sustaining the status quo.

Auditors who only check for documented procedures are only testing the first verb. The real audit work comes from testing the other three.

The 2026 edition also added explicit consideration of climate change as an issue under Clause 4.1, and this flows into how the EMS is established and maintained under Clause 4.4. If you are auditing against ISO 14001:2026, you need to verify that climate related risks and opportunities have been factored into the system design. For a detailed breakdown of what changed in the 2026 edition, the article on Clause 4.4 of ISO 14001:2026: Building the Environmental Management System covers the structural requirements in depth.

Starting the Audit: Document Review Before You Arrive on Site

A Clause 4.4 audit does not begin when you walk through the door. It begins during document review. Before the site visit, request and review the following:

• The EMS scope document
• The environmental policy
• The aspects and impacts register
• The compliance obligations register
• The environmental objectives and targets
• The process map or system overview showing how EMS processes interact
• Recent internal audit records and management review minutes

What you are looking for at this stage is coherence. Do the documents reference each other? Does the scope reflect what the organisation actually does? Are the aspects linked to real activities, not generic categories copied from a template? Are the objectives connected to significant aspects?

A common red flag at document review stage is an EMS that looks like it was built by copying a generic template without adapting it to the organisation. You will see generic environmental aspects like use of resources with no specifics, objectives that say reduce waste with no targets, and a scope that does not match the site visit you are about to conduct.

Auditing the System Structure: Processes and Their Interactions

One of the most important things Clause 4.4 requires is that the organisation identifies the processes needed for the EMS and understands how they interact. This is the process approach applied to environmental management.

During the audit, ask the environmental manager or management representative to walk you through the EMS processes. You want to understand:

• What are the key processes in the EMS?
• How do they connect? For example, how does the aspects and impacts assessment feed into operational controls?
• Who owns each process?
• How does the organisation know each process is performing as intended?

If the person responsible for the EMS cannot explain how the processes connect, that is a significant finding. It suggests the system exists on paper but has not been genuinely implemented.

What a Well Functioning System Looks Like

In a well functioning EMS, the process interactions are visible and logical. The aspects and impacts register identifies significant aspects. Those significant aspects drive the compliance obligations check. They also inform the operational controls, the objectives, and the monitoring programme. When something changes in one process, there is a mechanism to update the others.

For example, if a manufacturing site adds a new chemical to its process, a well functioning EMS would trigger a review of aspects and impacts, an update to the compliance obligations register, a check against operational controls, and potentially a revision to training records. If the organisation cannot demonstrate that chain of activity, the system is not truly integrated.

Testing Implementation: Getting Off the Paper Trail

The most important shift in auditing Clause 4.4 is moving from document review to implementation verification. This is where you leave the meeting room and go to the floor.

Interviews with Operational Staff

Ask workers in areas with significant environmental aspects whether they know what those aspects are and what controls apply to their work. You do not need them to recite the register. You need them to demonstrate awareness of what they should and should not do, and why.

A common finding at this stage is that workers in high risk areas, such as chemical storage, waste management, or stormwater management, have had no environmental training and cannot describe any environmental controls relevant to their tasks. That is a direct gap against Clause 4.4 read in conjunction with Clause 7.2 and 7.3.

Observation of Operational Controls

Walk the site and observe whether the operational controls documented in the EMS are actually in place. If the aspects register says the organisation controls stormwater runoff through bunded storage areas, check whether the bunds exist, are maintained, and are free of damage. If the register says waste is segregated at source, check the waste storage area.

Physical observation is one of the most powerful audit techniques available, and it is often underused. Documents can be written to say anything. The site tells you what is actually happening.

Sampling Records

Pull a sample of monitoring records, inspection logs, and compliance check records. Verify that they are being completed at the required frequency, that they reflect real data rather than copied figures, and that any anomalies have been followed up. Gaps in monitoring records are a common finding under Clause 9.1.1, but they often point back to a system that was never properly implemented under Clause 4.4.

Checking the Link Between Context and System Design

Clause 4.4 does not sit in isolation. It is the output of Clauses 4.1, 4.2, and 4.3. The organisation's context, the needs and expectations of interested parties, and the scope of the EMS all feed into how the system is designed.

When auditing Clause 4.4, trace these connections. Ask:

• How did the context analysis under Clause 4.1 influence the design of the EMS?
• Are the compliance obligations identified under Clause 6.1.3 reflected in the operational controls?
• Does the EMS scope align with the physical and organisational boundaries described in Clause 4.3?

A gap here often looks like this: the context analysis identifies that the organisation operates near a sensitive waterway, but the EMS has no specific controls or monitoring related to water quality. The context has been documented but has not actually shaped the system.

For a practical guide to auditing the scope and lifecycle approach in ISO 14001, the article on How to Audit EMS Scope and the Lifecycle Approach Under ISO 14001:2026 provides useful complementary guidance.

Auditing Continual Improvement Under Clause 4.4

The fourth verb, continually improve, is the one most organisations struggle to demonstrate. Maintaining the system is not the same as improving it. Auditors need to look for evidence that the organisation is actively working to enhance its environmental performance over time.

Evidence of continual improvement can include:

• Environmental objectives that are progressively more ambitious over successive cycles
• Corrective actions that have been implemented and verified as effective
• Internal audit findings that have driven genuine changes to processes, not just paperwork updates
• Management review outputs that include decisions to improve the EMS, not just notes that everything is fine
• Trend data showing improving performance on key environmental indicators

A finding worth raising under Clause 4.4 is an organisation that has held the same environmental objectives for three years running, achieved them each year with no change to targets, and has no evidence of any improvement initiatives beyond what was already in place at the last certification audit. That is maintenance, not improvement.

Common Nonconformities Raised Against Clause 4.4

Based on real audit experience across a range of industries, the following are the most frequently raised nonconformities against Clause 4.4:

1. The EMS exists as documentation but is not implemented in operations. Procedures describe controls that are not followed on the floor. Workers are unaware of their environmental responsibilities.
2. Process interactions are not defined or understood. The organisation cannot explain how its EMS processes connect, and changes in one area do not trigger reviews in related areas.
3. The system has not been maintained. Aspects registers, compliance obligation registers, and procedures have not been reviewed or updated following changes to the organisation's activities, products, or services.
4. Continual improvement is not evident. Objectives have not progressed, corrective actions are closed without effectiveness verification, and management review outputs do not include improvement decisions.
5. The system design does not reflect the organisation's context. Significant environmental risks identified in the context analysis have no corresponding controls or monitoring in the EMS.

For a broader look at where organisations typically fall short across ISO 14001, the article on Common ISO 14001 Nonconformities is worth reading alongside this one.

Writing Up Findings Against Clause 4.4

When you raise a finding against Clause 4.4, be specific about which verb is not being met. A finding that says the EMS does not conform to Clause 4.4 is not useful. A finding that says the EMS has not been maintained to reflect the addition of a new paint spray booth, which represents a new significant aspect with no corresponding operational controls, monitoring, or training is actionable.

Link the evidence clearly. State what you observed, what you reviewed, and who you spoke to. Reference the requirement. Explain why the evidence demonstrates nonconformity. This approach makes the finding harder to dispute and easier for the organisation to act on.

If you want to sharpen your nonconformity writing skills more broadly, the article on How to Write Nonconformities That Hold Up covers the structure and language in practical detail.

Preparing for a Clause 4.4 Audit: Practical Tips

Whether you are preparing to conduct an internal audit or heading into a certification audit, the following practical tips will help you audit Clause 4.4 effectively:

• Build your checklist around the four verbs: establish, implement, maintain, and continually improve. Make sure you have questions and evidence points for each one.
• Do not spend all your time in the meeting room. Clause 4.4 cannot be fully audited from a desk. You need to see the operation.
• Follow the thread from context through to operational controls. If you cannot trace a clear line from a significant environmental aspect to a documented control to a trained worker to a monitoring record, something is missing.
• Ask for trend data, not just current data. Improvement requires a direction of travel.
• Talk to people outside the environmental team. Operations supervisors, maintenance staff, and procurement officers often have more honest answers about what actually happens than the person who built the system.

Developing Your EMS Auditing Skills

Auditing an environmental management system well requires more than knowing the clause structure. It requires understanding how environmental risks manifest in real workplaces, how operational controls are designed and monitored, and how to gather evidence that goes beyond what is written in a procedure.

At Audit Workshop, the ISO 14001 Internal Auditor and Lead Auditor courses are built around practical auditing skills, not just standard interpretation. Dilawar Laghari brings over 14 years of compliance experience and more than 500 external certification audits to the training, which means the examples, scenarios, and techniques you learn are drawn from real audit situations across a wide range of industries. If you are looking to build genuine competence in auditing environmental management systems, the courses at auditworkshop.com are a practical starting point.