The Well-Documented, Empty System
A newly appointed EHS manager takes over the environmental management system of a 240-employee packaging printer that has held ISO 14001 certification since 2018. The site runs three shifts, consumes about 2.1 GWh of electricity a year and stores solvent-based inks in two 20,000-litre tanks. Reviewing the system, the manager finds 17 documented procedures, none revised since 2019; two environmental objectives - 'reduce waste to landfill by 2%' and 'zero spills' - with no baseline, target date or named owner; four management reviews in 36 months whose minutes record the same attendee list and no decisions; and internal audit reports showing zero nonconformities for three consecutive years, with every finding logged as an 'observation'. The EMS coordinator's defence is that 'we pass every audit, so the system works'. The production manager describes the EMS as 'the paperwork the EHS person does', and no shop-floor operator can describe an environmental objective. The certification body's last report described the system as 'stable'.
1. Which fundamental principles and concepts of an environmental management system are contradicted by this evidence, and why does 'we pass audits' not demonstrate that they are in place?
Read the worked answer
An EMS is the part of the management system used to manage environmental aspects, fulfil compliance obligations and address risks and opportunities; it is expected to follow the Plan-Do-Check-Act cycle and to deliver continual improvement, driven by leadership commitment.
The evidence attacks each element:
- Plan is empty. Objectives with no baseline, date or owner are not consistent with the requirement that objectives be measurable where practicable, monitored, communicated and updated (6.2.1). 'Zero spills' with no measurement method is a slogan.
- Check is not functioning. Zero nonconformities across 17 procedures in three years is implausible; findings logged only as observations suggest the auditors are not questioning evidence, or are not independent (9.2).
- Act is absent. Management review minutes with no decisions means the highest-level mechanism for changing the system is ceremonial (9.3).
- Leadership and awareness are missing. The production manager's framing and the operators' ignorance of objectives contradict 5.1 and 7.3.
A certification audit samples against requirements. It can confirm that a weak but conforming system exists; it cannot prove effectiveness or improvement. The auditor's word 'stable' is a warning about a static system, not reassurance. Conformity is the floor, not the goal.
2. Distinguish conformity, effectiveness and continual improvement in this context, and state what the manager should measure to show whether the system is actually working.
Read the worked answer
Conformity is fulfilment of a requirement - a clause of ISO 14001, a permit condition, or the organisation's own procedure. It is essentially yes/no and can be verified by audit. This site plausibly conforms: objectives exist, reviews happen, audits happen.
Effectiveness is the extent to which planned activities are realised and planned results achieved. A system can conform completely and still be ineffective - as here, where the objectives achieve nothing measurable.
Continual improvement is a recurring activity that enhances environmental performance; it requires evidence that performance or the system itself changed for the better over time. Nothing at this site has changed since 2019.
What to measure:
- Outcome indicators: kWh per 1,000 m² printed, VOC emissions, litres of ink solvent purchased, waste to landfill in tonnes per month, number and volume of spills.
- Driver indicators: percentage of objectives on track against milestone dates, age and closure rate of actions from management review, trend in audit findings by type, compliance status per obligation, competence coverage.
The test is a traceable chain: significant aspect → objective with baseline and owner → action → monitoring data → management review decision → changed result. If the manager cannot produce that chain, adding more procedures will not help.
3. The manager has 90 days before the next surveillance audit and limited credibility with top management. Propose the first three actions, in order, and justify the sequence.
Read the worked answer
1. Force a management-review decision (weeks 1–3). Present top management with a one-page gap analysis: objectives with no owner or baseline, three years of zero findings, reviews with no outputs, and the resulting failure to demonstrate improvement. Frame it around business exposure - a surveillance auditor who starts pulling this thread, customer ESG questionnaires, rising energy cost - not around compliance for its own sake. Rationale: 9.3 and 5.1 are the levers. Without a recorded decision and named owners with resources, any lower-level fix will decay. The output should be minutes with decisions, owners and dates.
2. Rebuild the objectives (weeks 3–8). Baseline the two existing objectives from actual data, then rewrite them as measurable, dated, owned targets linked to the significant aspects and compliance obligations (6.2). For example: solvent purchases per unit output, waste-to-landfill tonnes per month, spill incidents and near-misses. Rationale: this creates the 'plan' that the check and act steps need something to check against.
3. Re-establish the check function (weeks 6–12). Assess auditor competence and independence, set a risk-based programme covering the plating and ink-storage areas, and require findings to be raised as nonconformities where criteria are not met (9.2). Rationale: a compromised audit function is why the gaps survived three years; fixing it gives the system its own detection mechanism.
Deliberately not on the list: rewriting the 17 procedures. Documentation is not the constraint, and adding documents would confirm the organisation's belief that the EMS is paperwork.