Confirming that your EMS is ready for certification
Once your Environmental Management System has been implemented and is operating in practice, the next step is independent ISO 14001 certification.
An external certification body assesses whether the EMS meets the requirements of ISO 14001 and has been effectively implemented within the agreed certification scope.
The process typically includes certification readiness, selection of the certification body, Stage 1 and Stage 2 audits, closure of applicable nonconformities and the formal certification decision.
Certification should not be the first time your organisation discovers whether the EMS works.
Before the external auditor arrives, the system should already have been implemented, internally audited and reviewed by management.
Confirming that your EMS is ready for certification
Selecting an independent certification body
Applying for certification and confirming the certification scope
Once your Environmental Management System has been implemented and is working in practice, the next step is independent ISO 14001 certification.
Certification is where an external certification body assesses whether your Environmental Management System (EMS) meets the requirements of ISO 14001:2026 and has been effectively implemented within your organisation.
The certification audit should not be the point where your organisation first discovers whether its EMS works.
The exact arrangements depend on the certification body, organisation and scope.
ISO 14001 certification is independent confirmation that an organisation has established and implemented an Environmental Management System that meets the applicable requirements of ISO 14001.
The current edition is ISO 14001:2026.
Certification is voluntary unless a customer, tender, contract or other commercial requirement makes it necessary in practice.
Organisations commonly pursue certification because they want to:
Certification does not mean that an organisation has no environmental risks or will never experience an incident.
It means an independent certification body has assessed the organisation's management system against ISO 14001 and determined that it meets the applicable certification requirements.
An independent certification body issues the ISO 14001 certificate.
ISO itself does not certify individual organisations.
An ISO consultant also does not issue the certificate.
These roles should remain separate.
Helps your organisation understand the requirements, develop the EMS, implement controls, conduct preparation activities and become certification-ready.
Independently audits the Environmental Management System and makes the certification decision.
That distinction protects the impartiality and credibility of the certification process.
In South Africa, the South African National Accreditation System (SANAS) is the national accreditation body.
SANAS does not directly certify organisations against ISO 14001.
It accredits conformity-assessment bodies for defined scopes.
When selecting a certification body, organisations should therefore verify the body's current accreditation and applicable scope rather than assuming that every certificate provider has the same standing.
Where customers, tenders or international partners require accredited certification, this becomes particularly important.
Do not book the external certification audit simply because the target date has arrived.
Once the EMS is ready, the organisation selects an independent certification body.
The certification body will need information about your organisation before it can plan and quote for the audit.
The first formal certification assessment is normally the Stage 1 audit.
Stage 1 may identify areas that require attention before Stage 2.
Stage 2 is the main certification audit.
If findings are raised, address them systematically.
The auditor conducting the assessment does not simply hand over a certificate at the closing meeting.
Following a positive certification decision, the certification body issues the ISO 14001 certificate.
After initial certification, the certification body conducts surveillance audits to confirm that the Environmental Management System continues to operate effectively.
Towards the end of the certification cycle, the organisation undergoes recertification.
Do not book the external certification audit simply because the target date has arrived.
First establish whether the Environmental Management System is genuinely ready.
Before certification, the organisation should normally have:
The system should also have been operating long enough to generate meaningful evidence.
A certification auditor needs to see what the organisation actually does.
Policies and procedures alone are not sufficient.
Before the certification audit, ask:
Can we demonstrate that the EMS is being followed?
Do employees understand their responsibilities?
Are environmental controls working?
Have we evaluated compliance?
Have we completed internal audit and management review?
Have we addressed the problems we already know about?
If the answer to several of these is no, the organisation may benefit from addressing those issues before proceeding.
Once the EMS is ready, the organisation selects an independent certification body.
Do not choose purely on price.
Consider factors such as:
The commercial value of a certificate depends partly on whether customers and other stakeholders recognise the certification arrangement.
A very cheap certificate may provide little value if a tender evaluator or major customer does not accept it.
If accredited certification is required, verify the certification body's current accreditation and scope.
Do not assume.
The certification body will need information about your organisation before it can plan and quote for the audit.
This may include information such as:
This information helps the certification body determine the appropriate audit programme and audit duration.
It also influences the certification quotation.
The certificate needs to clearly state what is certified.
For example, certification may cover:
The scope should reflect the Environmental Management System that has actually been implemented.
Do not wait until the auditor arrives to discover that your intended certificate scope and implemented EMS scope are different.
The first formal certification assessment is normally the Stage 1 audit.
Stage 1 focuses on readiness.
The certification body is determining whether your organisation appears sufficiently prepared to proceed to the full Stage 2 assessment.
The auditor may review areas such as:
The exact audit approach depends on the certification body and your organisation.
Stage 1 gives both the certification body and your organisation an opportunity to identify significant readiness problems before the more detailed Stage 2 audit.
This makes Stage 1 useful.
It should not be treated as a formality.
If the system is not sufficiently implemented, the certification body may determine that additional work is required before progressing.
The auditor is effectively trying to determine:
Is the scope clear?
Has the organisation understood the standard sufficiently?
Are the key EMS processes established?
Has the system been implemented far enough to assess it properly?
Have internal audit and management review taken place?
Is the organisation realistically ready for Stage 2?
Stage 1 may identify areas that require attention before Stage 2.
Do not treat these findings as bad news.
Finding a weakness before the main certification audit gives your organisation an opportunity to correct it.
Possible issues could include:
Your organisation should understand what needs to be addressed and complete appropriate action before Stage 2.
It is to demonstrate that the management system can identify and correct them.
Stage 2 is the main certification audit.
Where Stage 1 asks:
“Are you ready to be fully assessed?”
Stage 2 asks:
The auditor evaluates implementation across the certification scope.
This normally involves considerably more than reviewing documents.
The auditor may:
The auditor will be looking for evidence that the organisation has translated the standard into practical environmental management.
That includes whether:
This is why trying to “prepare employees for the auditor” at the last minute is the wrong approach.
Employees should already be working according to the EMS.
The audit should confirm normal practice rather than create a temporary version of the business for audit day.
If findings are raised, address them systematically.
Avoid simply rewriting a procedure to make the finding disappear.
Ask:
What actually went wrong?
Why did it happen?
Does the problem exist elsewhere?
What needs to change so it does not recur?
How will we know the corrective action worked?
This is where a functioning management system becomes visible.
Good corrective action strengthens the business.
Poor corrective action creates recurring audit findings.
The auditor conducting the assessment does not simply hand over a certificate at the closing meeting.
Following the audit and closure of applicable issues, the certification process includes an independent review and certification decision according to the certification body's procedures.
This separation supports impartiality.
If the certification requirements have been satisfactorily met, certification can be granted.
Following a positive certification decision, the certification body issues the ISO 14001 certificate.
The certificate typically identifies information such as:
For organisations certified against the current standard, certification should refer to ISO 14001:2026.
When you receive the certificate, confirm that:
This matters because customers and tender evaluators may examine the certificate scope rather than merely ask whether your company is “ISO certified”.
After initial certification, the certification body conducts surveillance audits to confirm that the Environmental Management System continues to operate effectively.
Surveillance is usually narrower than the initial certification audit, but the certification body will continue evaluating important elements of the management system over the certification cycle.
Areas examined may include:
The purpose is to confirm that certification remains justified.
A weak management system often follows this pattern:
Audit approaching → frantic document updates → audit completed → system ignored → repeat next year.
That defeats the purpose of ISO 14001.
The EMS should operate throughout the year.
Surveillance should confirm normal environmental management rather than trigger emergency preparation.
Towards the end of the certification cycle, the organisation undergoes recertification.
The purpose is to determine whether the Environmental Management System remains suitable, effective and capable of supporting continued certification.
Recertification considers the system more broadly than routine surveillance.
Following successful recertification, a new certification cycle begins.
The organisation therefore moves through a continual pattern:
Certification → Surveillance → Surveillance → Recertification → New certification cycle
The exact scheduling should always be confirmed with your certification body.
The exact audit schedule depends on the organisation, but a certification audit may include:
The auditor explains the audit plan, objectives, scope and process.
Leadership may be asked about:
The auditor follows relevant activities through the organisation.
For example, in a manufacturing facility the auditor might follow a waste stream from generation through storage and disposal.
In a construction environment, the auditor may examine site controls, fuel or chemical storage, contractor activities and environmental emergency arrangements.
Employees may be asked about environmental responsibilities relevant to their work.
They do not need to memorise ISO clauses.
They should understand what they are expected to do.
The auditor may review evidence such as:
At the end of the audit, the auditor normally explains the findings and next steps.
A nonconformity occurs when a requirement has not been fulfilled.
Certification audits may identify nonconformities where the organisation cannot demonstrate that a relevant requirement is adequately addressed.
Examples could include:
The exact grading and terminology applied to findings depends on the certification body's procedures.
Not automatically.
Certification is not normally based on the expectation that auditors will never identify an issue.
What matters is the nature of the finding and how the organisation responds.
Where corrective action is required, the organisation needs to address the issue according to the certification body's requirements.
This can involve:
Significant unresolved issues can prevent certification from being granted until they have been satisfactorily dealt with.
ISO management-system certification normally operates on a three-year certification cycle.
That does not mean the certification body disappears for three years.
The organisation is subject to surveillance during the certification cycle.
ISO indicates that certified organisations typically undergo surveillance annually, followed by recertification every three years.
Certification therefore needs to be maintained.
There is no single duration that applies to every organisation.
The certification process depends on factors including:
This is different from the implementation timeline.
An organisation may spend several months implementing ISO 14001 before beginning the formal certification process.
These two timeframes should not be confused.
The time required to build and implement the EMS.
The time required for the independent certification assessment and decision.
A business planning around a tender deadline should account for both.
Waiting until the tender submission date is close before beginning implementation creates unnecessary risk.
Certification-body fees depend on the organisation and required audit programme.
Factors can include:
The certification-body cost is separate from implementation consultancy unless a quotation explicitly states otherwise.
When budgeting, consider the full certification cycle rather than only the initial Stage 1 and Stage 2 audits.
This includes:
For a deeper breakdown, see our ISO 14001 Certification Cost South Africa guide.
Some South African organisations pursue ISO 14001 because certification is requested in procurement or supplier qualification.
Where certification is connected to a tender, read the requirement carefully.
Do not assume that every reference to ISO 14001 means the same thing.
Check:
If a certificate is commercially critical, clarify the requirement before beginning the project.
Building the wrong scope or using a certification arrangement that the customer does not accept can waste time and money.
Potentially, yes.
Organisations operating an Integrated Management System may be able to coordinate certification across:
Because these standards share aligned management-system structures, an integrated certification approach can reduce unnecessary duplication.
For example, the auditor may be able to evaluate common system processes such as:
as part of an integrated audit programme.
The exact audit arrangement and any resulting efficiencies are determined by the certification body.
Commercial pressure can make businesses rush.
But an EMS needs enough implementation evidence for an auditor to assess whether it works.
The organisation that helps implement your system should not be presented as the organisation making the independent certification decision.
A certificate only creates commercial value if customers and other stakeholders recognise the certification arrangement.
If the certificate does not cover the activities or sites your customer expects, certification may not solve the commercial problem you intended it to solve.
Stage 1 can identify significant readiness gaps.
Use it.
Auditors want to understand how work actually happens.
Employees should understand their responsibilities, not memorise rehearsed answers.
ISO management systems are built around identifying and correcting problems.
An organisation that can demonstrate mature corrective action is stronger than one pretending problems never occur.
Certification requires ongoing surveillance.
More importantly, an inactive EMS stops delivering environmental and business value.
Before beginning the external certification process, confirm that:
If several of these items remain incomplete, additional implementation work may be required before Stage 1.
The EMS scope is defined.
Environmental context and interested parties have been addressed.
Environmental aspects and impacts have been identified.
Significant aspects have been determined.
Applicable compliance obligations are understood.
Environmental risks and opportunities have been addressed.
Environmental policy and objectives are in place.
Operational controls are implemented.
Employees understand relevant responsibilities.
Monitoring and measurement are operating.
Compliance has been evaluated.
Internal audit has been completed.
Management review has been completed.
Relevant nonconformities have been addressed.
There is sufficient evidence that the EMS operates in practice.
The intended certification scope is clear.
An appropriate certification body has been selected.
The typical process involves implementing the Environmental Management System, completing internal audit and management review, selecting an independent certification body, completing Stage 1 and Stage 2 audits, addressing applicable findings and receiving certification following a successful certification decision.
Independent certification bodies perform ISO 14001 certification audits and make certification decisions. SANAS is South Africa's national accreditation body and accredits conformity-assessment bodies for defined scopes; SANAS does not directly certify individual companies against ISO 14001.
Stage 1 is primarily a readiness assessment. The certification body reviews important EMS information and determines whether the organisation is sufficiently prepared to proceed to the more detailed Stage 2 certification audit.
Stage 2 is the main implementation assessment. The auditor evaluates whether the EMS meets applicable ISO 14001 requirements and is effectively implemented in practice across the agreed certification scope.
Significant unresolved nonconformities can prevent certification from being granted. However, an audit finding does not automatically mean permanent failure. Organisations are generally required to address applicable findings according to the certification body's procedures before certification can proceed.
Yes. Internal audit forms part of the ISO 14001 management-system requirements and should be implemented before the certification assessment.
Yes. Top management needs to review the EMS at planned intervals, and this process should be implemented before certification.
ISO management-system certification normally operates on a three-year certification cycle, with surveillance audits during that cycle and recertification towards its end.
Maintaining third-party certification involves ongoing surveillance according to the certification body's audit programme. These audits help confirm that the management system continues to meet certification requirements.
No. ISO develops and publishes the standard but does not certify organisations. Independent certification bodies perform certification.
ISO Specialist South Africa supports implementation and certification preparation. The independent certification body conducts the external certification assessment and makes the certification decision.
The current edition is ISO 14001:2026. Organisations transitioning from ISO 14001:2015 should confirm the applicable transition arrangements and timing directly with their certification body.
The certification audit should be the confirmation of work already done, not the first real test of your Environmental Management System.
Before Stage 1, you should know:
ISO Specialist South Africa can help you move from an implemented EMS to certification readiness.
That can include assessing your current position, helping close implementation gaps, supporting internal-audit preparation and making sure the management system is ready to be independently assessed.
The certificate is issued by the certification body.
Our job is to help make sure the system behind it works.