The Audit Report In ISO 14001

Once agreement has been reached, both among the audit team and with the auditee, it is time to prepare the audit report. Note that ISO 14001 does not require a documented audit report. However, it is very difficult to verify that the auditing requirement has been satisfied without a supporting record, which is typically a documented audit report.

The audit report is prepared by the lead auditor, although he or she may have other team members prepare portions. The content of the audit report is determined by the audit plan and the organization’s EMS audit procedures. Having completed the examination phase and evaluated the collected data observations, etc., the assessor is faced with the problem of documenting any deficiencies he or she may have found. There are many different methods of documenting deficiencies, ranging from inclusion in the body of the audit report to producing non-conformance notes or corrective action requests. Irrespective of which method is adopted, the basic principles to be followed are similar. ISO 14001 does not dictate what should be in the report, and ISO 14011 only suggests contents. ISO 14011 indicates that at a minimum, the findings need to be in the report. The findings appear as a statement that the EMS is or is not in conformance with the criteria, and states what the criteria and supporting evidence are for the statement. ISO 14011 also lists other optional items to include such as:

• the identification of the organization audited and of the client;

• the agreed objectives, scope and plan of the audit;

• the agreed criteria, including a list of reference documents against which the audit was conducted;

• the period covered by the audit and the date(s) the audit was conducted;

• the identification of the auditee’s representatives participating in the audit;

• the identification of the audit team members;

• a statement of the confidential nature of the contents;

• the distribution list for the audit report;

• a summary of the audit process including any obstacles encountered;

• audit conclusions such as:

- EMS conformance to the EMS audit criteria;

- whether the system is properly implemented and maintained;

- whether the internal management review process is able to ensure the continuing suitability and effectiveness of the EMS.

The format of such reports can vary considerably and may range from completion of a simple pro-forma to expansive documents describing all aspects of the audit performance and findings. However, irrespective of the style and format, the audit report should cover the key topics already identified as being essential for discussion and presentation at the opening and closing meetings. In constructing the report two specific objectives must be borne in mind.

(1) The report has to provide objective evidence of effective implementation of the audit procedure.

(2) The report has to allow for corrective action to be addressed and that the follow-up requirements can be established and initiated.

Where there are non-conformances, there are various options regarding deficiency reporting. One option is to describe each of the deficiencies identified in the main body of the report along with any supporting evidence, and if requested, corresponding recommendations. Although this may result in a comprehensive report of audit findings, it has the disadvantage that the individual

deficiencies are often difficult to locate, particularly when trying to monitor follow-up actions.

This can be partly overcome by writing separate corrective action requests for this purpose. A useful alternative that is less time consuming is to restrict the description of deficiencies in the body of the report to general summaries only. Details of deficiencies can then be included in non-conformance notes. Ideally, the non-conformance note should also provide space for agreeing corrective actions and recording subsequent monitoring of that corrective action. In this manner, any duplication of effort with respect to audit reporting is minimized, thus producing a more easily managed system. It is important that however non-conformances are handled, it be constant with the EMS correction action process (ISO 14001, Section 4.5.2).

Before considering the steps in preparing the non-conformance note we must be clear about their purpose.

• To convey to the auditee the findings in a clear and accurate manner so that they know what to do next.

• To advise the EMS personnel or other auditors what you have found so that he can follow it up.

• To present a record that can be reviewed remotely from the scene and be understood.

All non-conformance notes must contain certain basic information.

• The physical area being audited.

- Failure to record this often results in great confusion 3 to 6 months later when a follow up visit is carried out to review corrective action implementation.

• The specific clause(s) of the assessment standard(s) against which the non-conformance is issued.

- If the auditor is unable to readily identify the applicable section of the EMS manual or the procedure against which to issue the non-conformance, he must question whether or not he is justified in writing the non-conformance. It is good practice to re-read the

requirements of the relevant system documentation to confirm that these can be interpreted as supporting the non-conformance. If they do not, then the non-conformance cannot be issued.

• The detailed nature of the non-conformance including the specific identity of documents/procedures/material, etc.

Earlier we considered the requirements for recording observations during the assessment and emphasized the need for them to be factual and to contain objective evidence that the system requirements were not being satisfied. Although this appears to be fairly straightforward, in practice this is often not the case. It is not unusual for inexperienced auditors to identify a deficiency only to fail to communicate the findings in a manner that facilitates implementation of the appropriate corrective action. The non-conformance note, while not being over long, must contain sufficient information to enable a person not present during the audit to be able to gauge the seriousness or otherwise of the observation.

The use of descriptive terms such as extensive, several, isolated, etc… is essential to communicate accurately the nature and extent of the deficiency, but care must be taken to ensure that their use does not result in a lack of objectivity; e.g., the term extensive can only be included if there is irrefutable evidence to justify its use. The auditor must also take care to ensure that the description is not only accurate but it is also fair, e.g., a statement that 50% of manifests were incorrectly signed may be accurate but is hardly fair if only two manifests were sampled.

Having documented the nature of the deficiency, some audit systems require the auditor to grade the deficiency or non-conformance, e.g., major and minor. It is not intended to discuss grading systems in detail since there are many potential variations that companies may wish to adopt. Irrespective of what system is being adopted, the auditor must ensure that the grading given and

the text describing the deficiency are completely compatible.

Distribution of the audit report and nature of documentation are decided between the auditor and auditee, although this too is usually addressed in the audit plan. An audit is considered successful when the auditee and client feel that they have useful, constructive feedback that allows them to improve the system.

Implement ISO 14001 To Reduce Carbon Footprint

Around the world people and their governments are concerned about climate change and global warming. During 2009 there is a series of international meetings preparing for the next climate change agreement to be hammered out in Copenhagen in 2010. This will be a very critical meeting because the planet is fast approaching a “tipping point” when it will be too late to pull back from very serious climate change.

So what does this mean to business and particularly small business? Small business is the backbone of economies around the world and cumulatively is responsible for an enormous amount of carbon emissions even when they are small and “just office or home based”. In fact office based business is responsible for 30% of greenhouse gas emissions. This is far more than transport which is the most obvious target for concern.

When a small business systematically addresses all its activities and looks at the carbon and other environmental impacts of each, the business can remove a large amount of waste and preventing waste is what also saves money. If you can reduce your electrical waste by 20% you will reduce both your greenhouse emissions and your power bill by that same 20%. And electrical consumption is just area that can be looked at.

If this is to work effectively the business will need to work with all employees to change the culture and raise awareness of green issues. Commencing some green training for all personnel helps them to understand and accept the reasons for the changes and know what is expected of them.

Many people feel that they want to go beyond carbon emissions because they realise that there is more to the environment than just emissions. In this case the business may want to take their planning a step further and implement and environmental management system. This works even better when an effective feedback loop is included so that when mistakes of any kind are made, the business looks at the root cause or real reason that they were able to happen then remove that cause.

Many businesses take their environmental management system a step further and have it independently audited to ISO 14001 which is the international standard for environmental management. It is important to keep the system simple and low in paper because otherwise it is unlikely to work effectively in the long term.

A simple and effective environmental management system can save a small business for more than the cost of implementing and maintaining it and it also saves time and money. Reducing your carbon footprint saves money but a full management system saves even more and achieves an internationally recognised green certification, ISO 14001.

Refer to http://www.e-wia.com for more information on ISO 14001 Standards – Environmental Management System

Introduction To ISO 14001 Standards

An environmental policy should reflect the vision, intentions, philosophy, values, and beliefs of the organization with respect to the environment. Top management should put a great deal of thought and imagination into developing and crafting the policy, since it will become the code of conduct by which the organization lives and operates. The policy should be practical and inspirational, providing a framework and a compass for business and technical decisions and actions, and at the same time motivate and encourage all personnel in the organization to achieve excellence in environmental performance.

The ISO 14001 Standard specifies several requirements for the development, content, intent, and implementation of an environmental policy:

1. Top management is responsible and accountable for defining the organization’s environmental policy. They must, as a minimum, carefully review, approve, and commit to abiding by an environmental policy that has been developed for their consideration.

2. The policy must completely cover the organization’s (i.e., facility’s) range of operations, including where appropriate, raw material acquisition, transportation, packaging, and shipping of product,as well as all on-site operations that may impact the environment.

3. The policy must contain three core commitments that are ISO 14001 absolute requirements:

(i) A commitment to continual improvement of the EMS and environmental performance.
(ii) A commitment to the prevention of pollution (i.e., this means taking all reasonable steps to eliminate, or at least minimize, pollution).
(iii) A commitment to comply with relevant environmental legislation and regulations, and with other requirements to which the organization subscribes. This means the organization commits to meet local, regional, and national legislated environmental standards.

4. The policy must give direction and a framework for progress through new environmental objectives and targets that will be set during the course of implementing and maintaining the EMS.

5. The policy must be documented, and it must be implemented through the day-to-day functioning of the EMS.

6. The policy must be maintained, meaning kept up to date and relevant to current operations and conditions.

7. The policy must be communicated to all employees. This implies active, intentional efforts by the organization, led by top management, to ensure all employees know about, understand, and apply the principles, ideas, and commitments in the policy.

8. The policy must be made available to the public, i.e., it must be accessible to all members of the public who wish to see it.

In addition to the essential requirements for an environmental policy, other considerations that may be incorporated into the policy include:

Principles of sustainable development, resource renewal, and preservation • of biological diversity

A commitment to use the most effective pollution abatement technology and • equipment, consistent with economic viability of the business (i.e., BEAT – Best Economically Achievable Technology)

Use of environmental performance indicators to quantitatively monitor • progress

Life cycle thinking – consideration of ‘cradle to grave’ impacts of a • product, which would require the organization to assess cumulative environmental impacts from all stages, from design of the product; acquisition of raw materials; processing to finished product; packaging; shipment; end-use; and ultimate re-use, recycle, or disposal.

For all components of this element of the Standard to be brought to fruition, it is essential that there is clear allocation of responsibilities for developing, approving, communicating, disseminating, implementing, maintaining, and when necessary, revising the environmental policy.

Although environmental policy is the first element of ISO 14001, it may be prudent for an organization to defer finalization of the wording of their policy until work has been done to identify the scope of environmental impacts from the operation, and other planning and preliminary preparation for the EMS has been done. This will help to ensure the policy is authentic and appropriate for the organization’s purpose.

Please visit http://www.e-wia.com for more information.