Management system guidance

7.0 Support

ISO Navigator Pro™ is a free tool that provides practical, expert guidance for businesses wishing to interpret and better implement the requirements of ISO 9001:2026, ISO 14001:2026 and ISO 45001:2018.

Our range of ISO templates cover the requirements of ISO 9001:2026, ISO 14001:2026 and ISO 45001:2018, and offer an easy way to implement your next management system.

7.5 Documented information

|

Clause 7.5 sets out what documented information your environmental management system (EMS) must contain and how it must be created and controlled. “Documented information” covers both what used to be called documents (policies, procedures, work instructions, registers) and records (evidence of what was done). It can be held in any format or medium – paper, electronic files, databases, photographs, video or signage.

7.5.1 General

Your EMS must include the documented information that ISO 14001 specifically requires, plus whatever your organization decides is necessary for the EMS to be effective. The amount will vary between organizations depending on their size and type of activities, processes, products and services, the need to demonstrate that compliance obligations are met, the complexity of processes and how they interact, and the competence of the people doing the work. A small office with competent staff may need very little; a complex permitted manufacturing site will need much more.

Annex A stresses that the focus should be on implementing the EMS and improving environmental performance, not on building a complicated document control system. Documents created for other purposes (for example a quality or safety system, or permit applications) can be used, the EMS documentation can be integrated with other management systems, and there is no requirement for an environmental manual.

7.5.2 Creating and updating documented information

When documented information is created or updated, your organization must make sure it has suitable:

  1. Identification and description – such as a title, date, author or reference number;
  2. Format and media – such as language, software version and graphics, on paper or electronically;
  3. Review and approval – confirming that it is suitable and adequate before use.

7.5.3 Control of documented information

Documented information required by the EMS and by ISO 14001 must be controlled so that it is available and fit for use where and when it is needed, and properly protected, for example against loss of confidentiality, misuse or loss of integrity. As applicable, your organization needs to address:

  • Distribution, access, retrieval and use (access may mean permission to view only, or to view and change);
  • Storage and preservation, including keeping it legible;
  • Control of changes, e.g. version control;
  • Retention and disposition.

Documents of external origin that your organization needs for planning and operating the EMS – for example environmental permits and regulatory approvals, equipment manufacturers’ manuals, applicable standards and external environmental databases – must be identified as appropriate and controlled, so that the correct version reaches the people who need it.

What changed in ISO 14001:2026

The requirements of 7.5 are substantively the same as in ISO 14001:2015; 7.5.2 is now titled “Creating and updating documented information”. The main change is terminology used throughout the standard: “maintain documented information” has been replaced by “shall be available as documented information”, and “retain documented information as evidence” by “documented information shall be available as evidence of”. In practice the old document/record distinction still applies – the first kind is kept current, the second is kept unchanged as evidence – but you may wish to update your procedures and document lists to the new wording. Note also that the planning process(es) now cover 6.1.2 to 6.1.5 and that risks and opportunities are now in 6.1.4.

Documented information required by ISO 14001:2026

The table below lists the documented information that ISO 14001:2026 requires to be available, by clause. Use it as a checklist when building or reviewing your document and record register.

Clause Topic Documented information to be available
4.3 Scope of the EMS The scope, also available to interested parties
5.2 Environmental policy The environmental policy
6.1.1 Planning process(es) The process(es) for 6.1.2 to 6.1.5, to the extent needed for confidence that they are carried out as planned
6.1.2 Environmental aspects Environmental aspects and associated impacts; the criteria used to determine significance; the significant environmental aspects
6.1.3 Compliance obligations The compliance obligations (e.g. a legal and other requirements register)
6.1.4 Risks and opportunities The risks and opportunities that need to be addressed
6.2.1 Environmental objectives The environmental objectives
7.2 Competence Appropriate evidence of competence (e.g. training records, qualifications)
7.4.1 Communication Appropriate evidence of the organization’s communications
7.5.1 Documented information – general Documented information the organization itself determines is needed for an effective EMS
7.5.3 External origin documents Externally originated documents needed for planning and operation of the EMS, identified and controlled
8.1 Operational planning and control The process(es) for 8.1, to the extent needed for confidence that they are carried out as planned
8.2 Emergency preparedness and response The process(es) for 8.2, to the extent needed for confidence that they are carried out as planned
9.1.1 Monitoring, measurement, analysis and evaluation Appropriate evidence of the monitoring, measurement, analysis and evaluation results
9.1.2 Evaluation of compliance Appropriate evidence of the compliance evaluation result(s)
9.2.2 Internal audit programme The audit program(s); evidence of their implementation; evidence of the audit results
9.3.3 Management review results Evidence of the results of management reviews
10.2 Nonconformity and corrective action Evidence of the nature of nonconformities and actions taken; the results of any corrective action

In addition to the items above, many organizations choose to keep further documented information for transparency, consistency, training or ease of auditing – for example operating procedures and work instructions, waste and chemical inventories, emergency plans and drill records, monitoring and calibration records, supplier and contractor evaluations, and complaint logs. Records also help demonstrate that compliance obligations have been met, so set retention periods that are at least as long as those your compliance obligations require.

Practical tips

  • Maintain a master list or register of EMS documented information showing owner, current version, location, access rights and retention period;
  • Use your existing document management system or shared drive with controlled permissions rather than creating a separate system for environmental documents;
  • Back up electronic records and protect paper records from damage, fire and flood;
  • Withdraw or clearly mark obsolete documents, and keep superseded permits and procedures only where needed as evidence;
  • Keep a register of external documents and check periodically for new versions of permits, legislation and standards.

Our environmental manual templates include a document and record control procedure and supporting forms.

You should seek and record evidence that your organization’s EMS includes the documented information required by ISO 14001:2026 and the documented information it has determined to be necessary for effectiveness; that documents are suitably identified, formatted, reviewed and approved when created or updated; that documented information is available where needed and protected; that distribution, access, storage, preservation, changes, retention and disposition are controlled; and that necessary documents of external origin are identified and controlled. Sample several documents and records at the point of use to confirm that the current version is available and legible.

|

More information on PDCA

Planning

Context

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
4.1 Organizational Context 4.1 Organizational Context 4.1 Organizational Context
4.2 Relevant Interested Parties 4.2 Relevant Interested Parties 4.2 Workers & Interested Parties
4.3 Management System Scope 4.3 EMS Scope 4.3 OH&S Management System Scope
4.4 QMS Processes 4.4 Environmental Management System 4.4 OH&S Management System

Planning

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
5.1 Leadership & Commitment 5.1 Leadership & Commitment 5.1 Leadership & Commitment
5.2 Quality Policy 5.2 Environmental Policy 5.2 OH&S Policy
5.3 Roles, Responsibilities & Authorities 5.3 Roles, Responsibilities & Authorities 5.3 Roles, Responsibilities & Authorities
    5.4 Consultation & Participation

Support

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
6.1 Risks & Opportunities (6.1.1–6.1.3) 6.1.1 Risks & Opportunities - General 6.1.1 Risks & Opportunities - General
6.2.1 Quality Objectives 6.1.2 Environmental Aspects 6.1.2 Hazard Identification & Assessment
6.2.2 Planning to Achieve Objectives 6.1.3 Compliance Obligations 6.1.3 Legal & Other Requirements
6.3 Planning of Changes 6.1.4 Risks & Opportunities 6.1.4 Planning Action
  6.1.5 Planning Action 6.2.1 OH&S Objectives
  6.2.1 Environmental Objectives 6.2.2 Planning to Achieve Objectives
  6.2.2 Planning to Achieve Objectives  
  6.3 Planning of Changes  
 

Doing

Support

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
7.1 Resources 7.1 Resources 7.1 Resources
7.2 Competence 7.2 Competence 7.2 Competence
7.3 Awareness 7.3 Awareness 7.3 Awareness
7.4 Communication 7.4.1 Communication - General 7.4.1 Communication - General
7.5 Documented Information 7.4.2 Internal Communication 7.4.2 Internal Communication
  7.4.3 External Communication 7.4.3 External Communication
  7.5 Documented Information 7.5 Documented Information

Operations

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
8.1 Operational Planning & Control 8.1 Operational Planning & Control 8.1.1 General
8.2 Customer Requirements 8.2 Emergency Preparedness & Response 8.1.2 Eliminating Hazards
8.3 Design & Development   8.1.3 Management of Change
8.4 Purchasing   8.1.4 Procurement
8.5 Product & Service Provision   8.2 Emergency Preparedness
8.6 Release of Products & Services    
8.7 Nonconforming Outputs    
 

Checking

Monitoring, measurement, analysis and evaluation

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
9.1 Monitoring & Measurement 9.1.1 Performance Evaluation 9.1.1 Performance Evaluation
9.2 Internal Audit 9.1.2 Evaluation of Compliance 9.1.2 Evaluation of Compliance
9.3 Management Review 9.2 Internal Audit 9.2 Internal Audit
  9.3 Management Review 9.3 Management Review
 

Acting

Improvement

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
10.1 Continual Improvement 10.1 Continual Improvement 10.1 Improvement - General
10.2 Nonconformity & Corrective Action 10.2 Nonconformity & Corrective Action 10.2 Incident, Nonconformity & Corrective Action
    10.3 Continual Improvement
 

Want to know more?

SSL certification

A certificate guarantees the information your internet browser is receiving now originates from the expected domain - https://www.iso9001help.co.uk. It guarantees that when you make a purchase, sensitive data is encrypted and sent to the right place, and not to a malicious third-party.

Free PDCA guidance

ISO Navigator™ is our FREE online training tool that shows you how to apply the principles of PDCA to your operations. We also offer many helpful templates that get you on the road to documenting your management system, please visit the download page.