ISO 14001:2026 Annex A — What Really Changes for Quality and Environmental Managers
Annex A of ISO 14001:2026 was substantially revised structurally and in content. This guide explains all relevant changes for QMRs and EMRs — section by section, with direct practical implications.
ISO 14001:2026 was published on 21 April 2026. We went straight to Annex A — the part of the standard that many skip on first reading because it is marked as "informative." That is a mistake. For experienced auditors and certification bodies, Annex A is the first port of call when it comes to interpreting disputed standard requirements. Those who know it conduct audit discussions on equal terms.
This article is aimed at QMRs and EMRs who are already familiar with ISO 14001 and are looking for a precise, practice-oriented comparison of the Annex A changes between the 2015 and 2026 versions. No background knowledge, but concrete differences with direct implications for your daily work.
A general overview of all ISO 14001:2026 changes — including transition timelines and first steps — can be found in our introductory article on ISO 14001:2026.
Why Annex A Is Critical for Practitioners
Annex A is informative, not normative. It adds no additional requirements — but it explains how the standard's authors intend the requirements to be understood. In practice this means: if an auditor interprets a requirement differently from how your system implements it, Annex A is the argument that counts. Those who know it can clarify misunderstandings before the audit rather than during it.
ISO 14001:2026 has substantially revised Annex A — not just linguistically, but structurally and in content. Some sections have been completely redesigned, others merged or expanded. For those who know the 2015 version and are only looking for the differences, here is the direct comparison.
Structural Changes at a Glance
| Section | 2015 | 2026 | Nature of change |
|---|---|---|---|
| A.1 | Change management included | Shortened, refers to A.6.3 | Restructuring |
| A.3 | Basic terminology | Expanded terminology | Content expansion |
| A.4.1 | Context general | + ecosystems, biodiversity | Substantial expansion |
| A.6.1.1 | Risks and opportunities included | Moved to A.6.1.4 | Restructuring |
| A.6.1.4 | Did not exist | New section: Risks & Opportunities | Completely new |
| A.6.1.5 | A.6.1.4 Planning action | Expanded action planning | Renumbering + expansion |
| A.6.3 | Did not exist | New section: Change Management | Completely new |
| A.7.4 | Communication general | + Timeliness, sustainability reports | Substantial expansion |
| A.9.2 | Internal audit | + external audits as source | Content expansion |
A.1 General — Change Management Becomes Standalone
In the 2015 version, A.1 was the central section for change management. It contained a detailed description of the types of changes affecting the EMS, and all other sections referred back to this section with "see Clause A.1."
In the 2026 version, A.1 was substantially shortened. Change management has now been moved to the new standalone section A.6.3 "Planning of Changes." All previous references to "Clause A.1" have been replaced by "see A.6.3."
This is more than a editorial restructuring: change management is in the new standard a planning task, not a general system maintenance topic. The signal for practice — and for auditors — is unambiguous.
A.3 Terminology — New Terminology with Consequences
A.3 is particularly important for auditors because terms are defined here whose incorrect use can lead to findings. In the 2026 version, several relevant clarifications were added.
| Topic | 2015 wording | 2026 wording | Practical relevance |
|---|---|---|---|
| Outcome vs. Result | Not explicitly distinguished | Outcome = strategic intent; Result = measurable achievement | Objective tracking, management review |
| Determine | Formal establishment | Discovery process leading to knowledge | All "determine" requirements |
| Documentation | "Maintain documented information" | "Shall be available as documented information" | Document control |
| Compliance | "Fulfil compliance obligations" | "Meet compliance obligations" | Audit language |
| Outsourcing | "Outsourced processes" | "Externally provided processes, products or services" | Supplier management |
| Risk term | Standalone "risk" definition | Only "risks and opportunities" as a defined term | Risk assessment |
"Outcome" versus "result": The 2026 version now explicitly distinguishes between these two terms. "Outcome" designates the strategic intent — what the organization intends to achieve with its EMS. "Result" designates an already achieved, measurable outcome. For the management review and objective tracking this distinction is relevant: an environmental objective is an "outcome," its measured achievement is a "result."
"Determine" as a discovery process: The 2026 version explicitly explains that "determine" designates a discovery process leading to knowledge — not just a formal establishment. This is relevant for all sections in which the organization must "determine" something.
New documentation terminology: Two wording changes have direct implications for document control:
- "Maintain documented information" was replaced by "shall be available as documented information"
- "Retain documented information as evidence of" was replaced by "documented information shall be available as evidence of"
"Available" here means: the organization can procure, use or provide the information. This is a clarification, not a tightening — but auditors will apply the new terminology when reviewing documents.
Terminological harmonization: "Outsourced processes" was replaced by "externally provided processes, products or services," aligned with the main standard. The standalone definition of "risk" was removed — there is now only the term "risks and opportunities" as a defined terminus.
"Meet" instead of "fulfil": The formulation "fulfil compliance obligations" was replaced by "meet compliance obligations." The meaning does not change, but audit language will follow this new terminology.
A.4.1 Context of the Organization — Ecosystem Health and Biodiversity as New Mandatory Topics
This is one of the most significant content expansions in the entire Annex. In the 2026 version, A.4.1 was substantially expanded.
New is the explicit inclusion of ecosystem health and biodiversity as relevant environmental conditions. The 2015 version mentioned biodiversity only as an example of environmental conditions. The 2026 version contains a standalone definition:
Ecosystem health refers to the overall condition or integrity of an ecosystem and its ability to maintain structure, function and resilience over time.
Added to this is a new paragraph on the interconnection of environmental conditions: climate change interacts with other environmental conditions. Organizations that only document climate measures but do not address biodiversity loss, resource scarcity or ecosystem instability can be flagged for gaps in audits.
Practically relevant: Two new standards were added to the bibliography — ISO 17298 (biodiversity in strategy and operations) and ISO 59014 (circular economy, secondary materials). Depending on industry and environmental impacts, engagement with these standards may be relevant for your next revision of environmental aspects.
A.4.2 Interested Parties — Climate Change Is Not Everything
In the 2015 version, many organizations' implicit focus in the interested parties analysis was on climate protection measures. The 2026 version sends an explicit signal against this narrowing:
Alongside climate change, pollution, resource scarcity, biodiversity loss and ecosystem instability are now explicitly named as equally important topics for interested party requirements. In future, auditors will not only ask about climate targets — they will ask whether the organization has also addressed the other planetary challenges in its stakeholder analysis.
A.4.3 Scope — Corporate Structures and Transparency
New in the 2026 version is an explicit note on organizations that depend on external entities for key functions (e.g. resource allocation, decision-making) — such as a corporate headquarters. These dependencies must be considered when defining the scope.
The clarification that the scope must not omit relevant information and must be "factual and representative" is more precisely formulated than in the 2015 version. Scope definitions that visibly serve to exclude areas with significant environmental aspects remain impermissible — but the formulation is now sharper.
A.5.1 Leadership — Trust Through Visible Action
A new sentence in A.5.1 makes clear that top management can demonstrate leadership strength and build trust with interested parties through concrete action on environmental and sustainability topics. This is not a new obligation, but a clear signal to communications strategy: visible engagement from senior management is part of the EMS — not just the signature under the environmental policy.
A.5.2 Environmental Policy — Natural Resource Preservation Explicitly Upgraded
The 2026 version adds to the examples for the environmental protection commitment the explicit mention of "natural resource preservation or conservation" — preservation and protection of natural resources. Together with climate protection, biodiversity, ecosystem protection and restoration, this creates a broader picture of environmental protection than in the 2015 version.
For revising your environmental policy this means: a policy that is limited to emissions reduction will in future be more closely questioned on its scope.
A.6.1.1 General — Leaner Structure Through Outsourcing
In the 2015 version, A.6.1.1 contained a detailed description of risks and opportunities, including example lists. In the 2026 version this content was completely moved to the new standalone section A.6.1.4. A.6.1.1 remains as a general planning framework — leaner, more clearly structured.
A.6.1.2 Environmental Aspects — Land and Marine Use, New Emergency Structure
Two content changes are practically relevant here:
New environmental aspect categories: The example list was expanded. The previous item h "use of space" was replaced by:
- h) Land use
- i) Use of marine and coastal areas
For manufacturing companies without a coastal connection, little changes. For port operators, fishing companies, the maritime industry or companies with significant land consumption, these categories are explicitly to be examined.
Emergency situations now anchored in A.6.1.2: In the 2015 version, the identification of emergency situations was part of A.6.1.1. In the 2026 version this content belongs to A.6.1.2 — the section on environmental aspects. This is logical: emergency situations are first to be considered from the environmental aspects identification.
"Abnormal operating conditions" receive a new definition: rare, atypical, unplanned — and: they can introduce new environmental aspects or change existing ones. This is a direct indication of the need to think through the environmental aspects process not just for normal operations but also for abnormal operating states.
A.6.1.4 Risks and Opportunities — Completely New Standalone Section
This is the largest structural change in the planning area of the Annex: risks and opportunities have their own standalone section in the 2026 version — A.6.1.4 is completely new.
The example list for opportunities (beneficial effects) was substantially expanded and made more concrete:
| Opportunities (A.6.1.4) | Risks (A.6.1.4) |
|---|---|
| Transition to circular economy — waste minimization and resource efficiency | Language barriers and literacy issues as incident causes |
| Improved land management to promote biodiversity | Climate change consequences: floods, droughts, extreme temperatures, wildfires |
| Employee engagement and qualification for environmental objectives | Missing resources for effective EMS |
| Advanced analytics and real-time data collection for sustainability decisions | Water scarcity that can take emission control equipment offline |
| Partnerships with environmental organizations and suppliers | Resource scarcity in the supply chain |
| Proactive adaptation to new environmental legislation | Long-term impacts of biodiversity loss on operations |
| New technologies through government funding programmes | Reputational damage and legal consequences in the event of compliance violations |
For practice this means: this example list is the de facto audit reference framework for risk and opportunity assessments. If your risk assessment does not at least contain circular economy, biodiversity and climate change consequences as examined and justifiably excluded items, this is a potential finding.
A.6.1.5 Action Planning — Integration into Business Processes
What in the 2015 version was "Planning action" under A.6.1.4 is now A.6.1.5 — and was expanded in content. New is the explicit mention of how measures should be integrated into business processes:
- Environmental requirements into design and development processes
- Environmental requirements into procurement and purchasing processes
- Competence requirements into HR processes
- End-of-life and disposal requirements into sales and marketing processes
Additionally: energy management systems, occupational health and safety management systems and other IMS components are explicitly mentioned as potential parallel structures for joint measures.
A.6.2 Environmental Objectives — Small Wording, Major Audit Relevance
In the 2026 version, a new statement was added: it is important that the organization is able to determine whether an environmental objective has been achieved — not just that it ensures this. This wording change is small at first glance, but audit-technically relevant: an environmental objective without a measurable or determinable degree of fulfilment is inadequate under the new logic.
A.6.3 Change Management — Standalone Planning Section (Completely New)
This is the most important structural intervention in the entire Annex A. What in the 2015 version was part of A.1 has in the 2026 version received its own section under Planning: A.6.3 "Planning of Changes."
The list of change triggers was expanded from 4 to 8 categories:
| No. | Change trigger per A.6.3 | Status |
|---|---|---|
| 1 | New or changed products, services, processes, operating facilities or equipment | Carried over |
| 2 | Changes to compliance obligations | Carried over |
| 3 | New knowledge on environmental aspects, impacts, risks or opportunities | Carried over |
| 4 | Developments in knowledge and technology | Carried over |
| 5 | Changes to technical specifications of materials or process inputs | Expanded |
| 6 | Changes due to mergers, acquisitions, joint ventures or divestments | New |
| 7 | Changes in staff or external providers, including contractors | Expanded |
| 8 | Operational disruptions from supply chain problems, labour disputes, natural disasters, political instability or war | New |
Added to this is an explicit requirement: the organization must review the consequences of unplanned changes and take measures where needed to mitigate adverse impacts.
And a NOTE that can become relevant in audits: Changes can generate risks and opportunities. This is the bridge between the change management process and the risks-and-opportunities process under A.6.1.4.
For practice: Does your existing EMS have a documented change management process? Does it cover all eight categories — in particular M&A activities and geopolitical operational disruptions? This will be a standard topic in surveillance audits going forward.
A.7.4 Communication — Timeliness and Sustainability Reporting
A.7.4 was substantially expanded in the 2026 version to reflect the growing importance of external environmental and sustainability communication.
New is the explicit recognition that external communication requirements on environmental and sustainability information are increasing — both mandatory (e.g. regulatory reporting) and voluntary. Concretely now also named: communication on products and services (resource efficiency, water footprint) and supply chain communication with suppliers and customers.
Relevant for CSRD-obligated companies and all those falling under the Supply Chain Due Diligence Act: ISO 14001:2026 now provides an explicit framework for these communication obligations.
The list of communication requirements was also expanded with a new criterion: "timely" — promptly. Organizations that do not communicate environmental incidents, compliance information or performance data promptly can be measured against this.
A.9.1.2 Compliance Evaluation — External Assessments and New Terminology
In the 2026 version two clarifications were added:
- The organization can use external compliance evaluations as part of its compliance evaluation process — this was implicitly possible but is now explicitly confirmed.
- The frequency and timing of compliance evaluations depends on the importance of the requirement, on operating conditions, on changes to compliance obligations and on past performance — a more precise formulation than in the 2015 version.
Terminologically: "failure to fulfil a legal requirement" → "failure to meet a compliance obligation." Consistent with the new language conventions of the main standard.
A.9.2 Internal Audit — Audit Evidence and External Findings
A.9.2 received in the 2026 version a new introductory paragraph with the definition of audit evidence and audit criteria. This is a conceptual addition relevant to the planning and documentation of internal audits.
More importantly for practice: when considering previous audit results, external audits are now explicitly to be included — not just internal ones. This is an expansion particularly relevant for organizations that regularly undergo customer or certification audits.
A.9.3 Management Review — Structure and Time for Decisions
In the 2026 version, the order of content in A.9.3 was changed: the definitions of "Suitability," "Adequacy" and "Effectiveness" now appear at the end of the section rather than at the beginning — logical, as they act more strongly as evaluation criteria after the content description.
New is a clarification: the management review must provide adequate and sufficient time intervals for decisions to be implemented effectively and promptly. This is an implicit reference to the frequent practical mistake of treating the management review as a formality without measures with deadlines and responsible parties emerging from it.
A.10.1 Continual Improvement — External Audits as an Improvement Source
In the 2015 version, A.10.1 named internal audits as the basis for improvement measures. The 2026 version also explicitly adds external audits as an information source for continual improvement. For organizations with an active customer or supplier audit programme, this is an explicit invitation to systematically integrate external findings into improvement management.
What This Means for Your Practice — Recommended Actions
Based on the changes in Annex A, we recommend the following concrete review steps:
- Review the change management process: Is there a documented process covering all eight trigger categories per A.6.3 — including M&A activities and geopolitical operational disruptions? Is this process linked to the risk assessment?
- Update the risk-opportunity assessment: Does your risk assessment contain circular economy, biodiversity loss, climate change consequences and resource scarcity? These new examples in A.6.1.4 are a direct audit signal — not as mandatory topics, but as topics that must have been assessed with justification.
- Expand the context analysis: Was ecosystem health considered in the context analysis under 4.1? Are biodiversity loss and resource scarcity being examined as possible environmental conditions?
- Review environmental aspects identification: Are the new categories land use and marine use (h and i per A.6.1.2) relevant to your organization? If yes, were they identified and assessed?
- Check the communication process for timeliness: Are there defined communication deadlines for external environmental information? Does the process take into account the growing requirements from CSRD, Supply Chain Due Diligence Act and similar regulatory frameworks?
- Check ISO 17298 and ISO 59014 for relevance: Depending on industry and environmental impacts, these new standards in the bibliography of ISO 14001:2026 can serve as orientation for biodiversity and circular economy topics.
Frequently Asked Questions on the Annex A Changes
Is Annex A normative or informative — and what does this mean for audits?
Annex A is informative. It adds no new requirements and cannot be used as a standalone audit reference. Nevertheless, experienced auditors use Annex A to clarify standard interpretation on disputed points. Those who know it can conduct audit discussions more objectively.
Do I need to re-document my change management process because of A.6.3?
Not necessarily. If your existing process covers the relevant triggers, updating existing documents is sufficient. The question is whether your documentation recognizably addresses the new categories (M&A, operational disruptions). This will be a typical discussion topic in surveillance audits.
Do all organizations now need to address biodiversity in their environmental aspects identification?
No — but all organizations must examine the relevance of biodiversity and ecosystem health for their context and environmental aspects and assess this with justification. The result of this examination — including the judgement "not relevant" — should be traceable.
What are the implications of the new "timely" communication requirement for CSRD-obligated companies?
For CSRD-obligated companies, the addition of "timely" is a confirmation of the principle that already applies: sustainability information must be provided promptly and correctly. ISO 14001:2026 and CSRD do not exclude each other — a well-implemented EMS provides many of the data points needed for CSRD reporting.
What changes in environmental objective assessment due to the new wording in A.6.2?
The clarification that the organization must be able to determine whether an environmental objective has been achieved reinforces the requirement for measurable or otherwise assessable objectives. In practice this means: objectives without a defined degree of fulfilment (no indicator, no threshold, no qualitative assessment rule) will be viewed increasingly critically in audits.
How Sternberg Consulting Supports the Transition
We guide companies in the DACH region in the practice-oriented revision of existing ISO 14001 systems — without unnecessary bureaucracy. For the adaptation to ISO 14001:2026, we systematically analyse your existing documentation against the changed Annex A requirements: change management process, risk assessment, environmental aspects identification and communication processes. The result is a concrete action plan that takes your organization through the transition without certification risk. Find out more on our ISO 14001 Environmental Management Consulting page or contact us directly.
Related Articles
- ISO 14001:2026 — New Edition, Changes and Transition (Overview)
- ISO 14001 Explained Simply: Definition, Requirements and Benefits
- Risk-Based Thinking in Management Systems: Systematically Assessing Risks and Opportunities
- Internal Audit ISO 9001: Definition, Goals and Implementation
- ISO 9001 Climate Action Amendment: What Really Changes Through the Climate Supplement?
- ISO Audit Preparation: Succeeding Even Without Internal Expertise
- Costs of ISO 14001 Certification