Auditor Lee: A Transition Audit With Unsupported Reductions
Auditor Lee is conducting a transition audit for a certification body at a three-site engineering firm. The client's internal audit programme still uses the 2004 clause checklist and has not covered context, interested parties, risks and opportunities, or lifecycle perspective. Management review minutes list the same agenda as 2015 (results of internal audits, customer feedback, process performance) but omit the status of actions from previous reviews and changes in external/internal issues. A major nonconformity from the last surveillance audit concerned uncontrolled solvent emissions. The client submitted a closed corrective action with a photo of a new extraction hood and a signed work instruction, but no root-cause analysis or verification that the hood works. The certification body has reduced the transition audit duration from three to two days because the client has an integrated QMS/EMS and 'mature processes'. The scope includes design of pollution-control equipment. The client wants the transition audit to proceed and a new certificate issued.
1. Should Auditor Lee proceed with the audit as planned? Assess the audit-duration decision and the audit programme's coverage.
Read the worked answer
Lee should not simply proceed with an unexplained two-day audit. The reduction needs a documented justification based on audit time principles, not on the existence of an integrated system. Integration with QMS can reduce duplication, but ISO 14001 transition audits must still cover new requirements such as context, interested parties, risks and opportunities, lifecycle perspective, and strengthened leadership. A 'mature process' claim does not replace evidence.
The internal audit programme is a bigger problem. It still uses the 2004 checklist and omits context, interested parties, risks and opportunities, and lifecycle. That means clause 9.2 is not effectively implemented, and the organization has not tested its transition readiness. Management review also omits required inputs, so 9.3 is weak. These are nonconformities that the transition audit must examine.
Lee should either restore adequate audit time or document why the reduced time still allows full coverage. If the client cannot support the reduction, Lee should escalate to the certification body's technical reviewer. Proceeding with insufficient time risks an unsupported certification decision.
2. Evaluate whether the major nonconformity has been effectively closed. What evidence is missing, and what are the consequences for certification?
Read the worked answer
The nonconformity has not been effectively closed. The photo and work instruction show a correction, possibly the installation of controls, but they do not show corrective action. There is no root-cause analysis explaining why solvent emissions were uncontrolled, no action to prevent recurrence, and no verification that the extraction hood actually captures emissions and is maintained.
Missing evidence includes:
- root cause, such as absent design review, no commissioning check, no maintenance regime, or unclear responsibility;
- corrective actions addressing that cause;
- verification of effectiveness, such as monitoring results, commissioning data, or maintenance records;
- evidence that similar emission points were reviewed;
- a revised risk assessment and operational control.
Consequently, the major nonconformity remains open. The certification body should not recommend transition certification while it is open. Depending on its rules, it may require a follow-up audit or additional evidence within a defined period. If closure cannot be verified, certification should be refused or the existing certificate suspended or withdrawn. A client's desire for a new certificate does not override the need for objective evidence.
3. What should Lee verify about the scope and the integrated management system before recommending certification to ISO 14001:2015?
Read the worked answer
Lee should verify that the scope accurately describes the EMS boundaries and that integration has not diluted ISO 14001 requirements.
The scope includes design of pollution-control equipment. Lee should confirm that design activities are covered by the aspects register, compliance obligations, operational controls, and competence arrangements. Design decisions can determine emissions and waste at customer sites, so lifecycle thinking and controls over design outputs are relevant. If design is performed at another location or by partners, the scope and control arrangements must be clear.
For the integrated system, Lee should check that:
- EMS-specific processes, such as aspects, compliance obligations, emergency preparedness, and lifecycle perspective, are not absorbed into QMS procedures without meeting ISO 14001;
- internal audit covers EMS requirements and the new clauses;
- management review includes EMS inputs and outputs;
- top management demonstrates leadership for the EMS, not only for quality;
- site sampling covers all three sites and the design function;
- the open major nonconformity is closed and verified.
Only then can Lee recommend certification.