Writing and Implementing an Environmental Policy Under ISO 14001

ISO 14001 Clause 5.2

Top management's public statement of intent for the environmental management system.

ISO 14001 Clause 5.2 - Environmental Policy

ISO 14001:2026 Clause 5.2 requires top management to establish, implement and maintain an environmental policy. The policy is a public statement of intent and a foundation document for the rest of the environmental management system. Objectives flow from it. Operational decisions are tested against it. The auditor reads it first to understand what the organisation has committed to.

The clause specifies five things the policy must do or include, three commitments it must contain, and three things it must do as a document.

What the Policy Must Cover

The policy must:

  • be appropriate to the purpose and context of the organisation, including the nature, scale and environmental impacts of its activities, products and services;
  • provide a framework for setting environmental objectives;
  • include a commitment to the protection of the environment, including prevention of pollution and other specific commitments relevant to the context of the organisation;
  • include a commitment to meet compliance obligations;
  • include a commitment to continual improvement of the environmental management system to enhance environmental performance.

The standard also notes that other specific commitments to protect the environment can include preservation of natural resources, sustainable resource use, climate change mitigation and adaptation, or protection of biodiversity and ecosystems. These are not mandatory but are encouraged where they fit the context of the organisation.

Once written, the policy must be available as documented information, communicated within the organisation, and made available to interested parties.

What "Appropriate to the Organisation" Means in Practice

An environmental policy that could equally apply to a building contractor, a software firm and a chemical manufacturer is too generic to be useful. The standard expects the policy to reflect the actual organisation - its activities, the scale of its operations, and the kinds of environmental impacts it has.

For a logistics business, that might mean explicit reference to fleet emissions and route efficiency. For a food manufacturer, water use and packaging waste. For an office-based consultancy, energy consumption and electronic waste. The specific commitments give the policy weight and make it credible to interested parties who read it.

How the Policy Connects to the Rest of the System

The three core commitments in the policy are not standalone statements - they connect directly to other clauses. The commitment to meet compliance obligations is operationalised through Clause 6.1.3 on compliance obligations and Clause 9.1.2 on evaluation of compliance. The commitment to continual improvement is delivered through Clause 10.1. The commitment to protect the environment runs through Clause 6.1.2 on environmental aspects and Clause 8.1 on operational planning and control. A policy commitment that is not visible in operational practice is one of the easiest things for an auditor to flag as a nonconformity.

The environmental policy is the bit that ends up on the wall and on the website. It is also the bit people forget to read when they next renew it.

Make it short. Make it specific to your business. Get the boss to sign it and put a date on it. And once a year, sit down and ask whether it still describes what you actually do and what you actually care about. If it does not, change it.

The three required commitments - protect the environment, meet compliance obligations, continual improvement - are the framework. Around those, the policy should reflect the specific environmental considerations that matter to the business.

For ISO 14001:2026 the additional commitments wording has been refined slightly compared to the 2015 edition to encourage organisations to think about climate change, biodiversity and resource use. None of these is mandatory, but the standard signals that they are increasingly expected.

I check the policy against three things at audit. Does it actually describe this organisation. Does it contain the three required commitments. And does it appear in evidence elsewhere - in induction materials, on the noticeboard, on the intranet, in supplier communications. A policy that exists only as a single signed document in a folder is a weak policy.

Practical Compliance Guidance

The environmental policy is a separate document signed by top management. The IMS Manual references the policy and explains how it integrates with the management system.

The following alphaZ documents support compliance with ISO 14001:2026 Clause 5.2.

alphaZ document How to use it
ISO 9001/14001/45001 IMS Toolkit The full set of integrated management system documents covering all three standards.
P-2 Environmental Policy The environmental policy template covering the three required commitments and the additional context-specific commitments expected by the standard.

Note - all the above files can be downloaded with an alphaZ subscription.

Frequently Asked Questions

The standard does not specifically require a signature. It does require top management to establish the policy and for it to be available as documented information. In practice almost all organisations have a signed and dated policy because it provides clear evidence of top management's establishment of the policy and acts as a useful reference point for review and update cycles.
A single integrated policy can cover all three standards provided it includes the specific commitments required by each. In practice many organisations prefer to keep separate quality, environmental and health and safety policies because each addresses different audiences and topics. Either approach is acceptable.
The standard does not set a frequency. Most organisations review the policy as part of the annual management review under Clause 9.3. The policy is also reviewed whenever there is a significant change in the organisation, its activities or its compliance obligations - for example after acquiring a new business, opening a new site, or in response to new environmental legislation.
The standard requires the policy to be available to interested parties. Most organisations meet this through a website link or by providing the policy on request. Publishing it on the website is the simplest and most transparent approach but is not mandated.

Further Resources

payment logos