ISO 14001

International

v2015

3 domains

14 controls

Environmental management systems requirements

Verified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (3)

ISO 14001: Environmental Policy & Planning

5 controls

Environmental management system planning (ISO 14001)

Controls in the ISO 14001: Environmental Policy & Planning domain of ISO 14001 — 5 controls
Code	Title	Description
ISO14001-01	Environmental policy development	Environmental policy development. Control from ISO 14001 framework, domain: ISO 14001: Environmental Policy & Planning.
ISO14001-02	Environmental aspects and impacts identification	Environmental aspects and impacts identification. Control from ISO 14001 framework, domain: ISO 14001: Environmental Pol...
ISO14001-03	Legal and regulatory compliance obligations	Legal and regulatory compliance obligations. Control from ISO 14001 framework, domain: ISO 14001: Environmental Policy &...
ISO14001-04	Environmental objectives and targets	Environmental objectives and targets. Control from ISO 14001 framework, domain: ISO 14001: Environmental Policy & Planni...
ISO14001-05	Action planning for environmental management	Action planning for environmental management. Control from ISO 14001 framework, domain: ISO 14001: Environmental Policy...

ISO 14001: Operational Controls

5 controls

Environmental operational controls (ISO 14001)

Controls in the ISO 14001: Operational Controls domain of ISO 14001 — 5 controls
Code	Title	Description
ISO14001-06	Operational control procedures	Operational control procedures. Control from ISO 14001 framework, domain: ISO 14001: Operational Controls.
ISO14001-07	Emergency preparedness and response	Emergency preparedness and response. Control from ISO 14001 framework, domain: ISO 14001: Operational Controls.
ISO14001-08	Resource and energy management	Resource and energy management. Control from ISO 14001 framework, domain: ISO 14001: Operational Controls.
ISO14001-09	Waste management and reduction	Waste management and reduction. Control from ISO 14001 framework, domain: ISO 14001: Operational Controls.
ISO14001-10	Pollution prevention measures	Pollution prevention measures. Control from ISO 14001 framework, domain: ISO 14001: Operational Controls.

ISO 14001: Performance Evaluation

4 controls

Environmental performance monitoring (ISO 14001)

Controls in the ISO 14001: Performance Evaluation domain of ISO 14001 — 4 controls
Code	Title	Description
ISO14001-11	Environmental monitoring and measurement	Environmental monitoring and measurement. Control from ISO 14001 framework, domain: ISO 14001: Performance Evaluation.
ISO14001-12	Compliance evaluation	Compliance evaluation. Control from ISO 14001 framework, domain: ISO 14001: Performance Evaluation.
ISO14001-13	Internal environmental audit	Internal environmental audit. Control from ISO 14001 framework, domain: ISO 14001: Performance Evaluation.
ISO14001-14	Management review of environmental performance	Management review of environmental performance. Control from ISO 14001 framework, domain: ISO 14001: Performance Evaluat...

Maps to 157 other frameworks

14 total controls

CSRD

5 source controls mapped|5 target controls covered

36%

GRI Standards

5 source controls mapped|5 target controls covered

36%

EU SFDR (Sustainable Finance Disclosure Regulation)

5 source controls mapped|5 target controls covered

36%

ISSB Standards

5 source controls mapped|5 target controls covered

36%

TCFD Recommendations

5 source controls mapped|5 target controls covered

36%

NIST AI Risk Management Framework (AI RMF 1.0)

4 source controls mapped|4 target controls covered

29%

NIST AI 600-1 Generative AI Profile

4 source controls mapped|5 target controls covered

29%

EU Taxonomy Regulation (Regulation 2020/852)

4 source controls mapped|4 target controls covered

29%

EU Taxonomy Regulation

4 source controls mapped|4 target controls covered

29%

LEED v4.1 — Green Building Rating System (US Green Building Council)

4 source controls mapped|3 target controls covered

29%

SASB Standards (ISSB Integrated)

4 source controls mapped|4 target controls covered

29%

SASB Standards

4 source controls mapped|3 target controls covered

29%

ISO 20400:2017 — Sustainable Procurement

3 source controls mapped|3 target controls covered

21%

ISO 37000:2021 — Governance of Organizations

3 source controls mapped|2 target controls covered

21%

ICMM Mining Principles (2024 Update)

3 source controls mapped|1 target controls covered

21%

EU Critical Raw Materials Act (Regulation (EU) 2024/1252)

3 source controls mapped|1 target controls covered

21%

ISO/IEC 38500:2024 — Governance of IT

3 source controls mapped|1 target controls covered

21%

ISO 26000:2010

3 source controls mapped|2 target controls covered

21%

CDP Corporate Questionnaire

3 source controls mapped|2 target controls covered

21%

CDP (formerly Carbon Disclosure Project)

3 source controls mapped|3 target controls covered

21%

GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v6

3 source controls mapped|1 target controls covered

21%

UNESCO Recommendation on the Ethics of AI

3 source controls mapped|3 target controls covered

21%

BREEAM — Building Research Establishment Environmental Assessment Method

3 source controls mapped|3 target controls covered

21%

OECD Guidelines for Multinational Enterprises on Responsible Business Conduct (2023 Update)

3 source controls mapped|3 target controls covered

21%

OECD AI Principles (2024 Update)

3 source controls mapped|2 target controls covered

21%

EU GMP Annex 11 — Computerised Systems

3 source controls mapped|1 target controls covered

21%

TNFD Recommendations

3 source controls mapped|1 target controls covered

21%

AICPA Privacy Management Framework (PMF)

3 source controls mapped|1 target controls covered

21%

ISO 56002

1 source controls mapped|3 target controls covered

ISO 41001:2018 — Facility Management Systems

1 source controls mapped|3 target controls covered

ISO 39001:2012 — Road Traffic Safety Management

1 source controls mapped|3 target controls covered

ISO 37002:2021 — Whistleblowing Management Systems

1 source controls mapped|3 target controls covered

ISO 50001:2018 — Energy Management Systems

1 source controls mapped|3 target controls covered

ISO 22313:2020 — Guidance on Business Continuity Management Systems

1 source controls mapped|3 target controls covered

NABERS — National Australian Built Environment Rating System

1 source controls mapped|3 target controls covered

GHG Protocol

1 source controls mapped|1 target controls covered

IEC 62351 — Power Systems Communication Security

1 source controls mapped|1 target controls covered

Security of Critical Infrastructure Act 2018 (SOCI)

1 source controls mapped|1 target controls covered

AWS Well-Architected Security Pillar

1 source controls mapped|1 target controls covered

FERPA

1 source controls mapped|1 target controls covered

China AI Regulations

1 source controls mapped|1 target controls covered

IEEE 7000

1 source controls mapped|1 target controls covered

Colorado Privacy Act

1 source controls mapped|1 target controls covered

Iowa Consumer Data Protection Act

1 source controls mapped|1 target controls covered

Dominican Republic DPL

1 source controls mapped|1 target controls covered

ESRB Privacy Certified Programme

1 source controls mapped|1 target controls covered

Azure Security Benchmark

1 source controls mapped|1 target controls covered

Bahrain PDPL

1 source controls mapped|1 target controls covered

EU AI Act

1 source controls mapped|1 target controls covered

C5 (Germany)

1 source controls mapped|1 target controls covered

Delaware Personal Data Privacy Act

1 source controls mapped|1 target controls covered

COPPA

1 source controls mapped|1 target controls covered

Global Cross-Border Privacy Rules (Global CBPR) Forum

1 source controls mapped|1 target controls covered

EDM Council DCAM — Data Management Capability Assessment Model

1 source controls mapped|1 target controls covered

Australia AI Ethics Framework

1 source controls mapped|1 target controls covered

CCPA/CPRA

1 source controls mapped|1 target controls covered

Indonesia PDP Law

1 source controls mapped|1 target controls covered

India DPDP Act

1 source controls mapped|1 target controls covered

Privacy Act 1988 (Australia)

1 source controls mapped|1 target controls covered

Iceland DPA

1 source controls mapped|1 target controls covered

Notifiable Data Breaches Scheme (Australia)

1 source controls mapped|2 target controls covered

EU Digital Markets Act

1 source controls mapped|2 target controls covered

FTC Health Breach Notification Rule

1 source controls mapped|2 target controls covered

UK Product Security and Telecommunications Infrastructure Act (PSTI)

1 source controls mapped|2 target controls covered

EAR — Export Administration Regulations

1 source controls mapped|2 target controls covered

European Accessibility Act (Directive (EU) 2019/882)

1 source controls mapped|2 target controls covered

EU Deforestation-Free Products Regulation (EUDR)

1 source controls mapped|2 target controls covered

Ontario Accessibility for Ontarians with Disabilities Act (AODA) — IASR Web Standard

1 source controls mapped|2 target controls covered

EU NIS2 Directive — Energy Sector Cybersecurity Requirements (Directive 2022/2555)

1 source controls mapped|2 target controls covered

US ITAR and EAR — Export Control and Data Security

1 source controls mapped|2 target controls covered

US SEC Digital Assets and Crypto Regulatory Framework

1 source controls mapped|2 target controls covered

Australia Consumer Data Right — Banking (CDR)

1 source controls mapped|2 target controls covered

Australia eSafety Commissioner — Online Safety Expectations for Industry

1 source controls mapped|2 target controls covered

NIST SP 800-34 Rev 1 — Contingency Planning Guide

1 source controls mapped|1 target controls covered

CSA CCM v4

1 source controls mapped|1 target controls covered

CAIQ (CSA)

1 source controls mapped|1 target controls covered

Colombia Habeas Data Law

1 source controls mapped|1 target controls covered

Chile DPL

1 source controls mapped|1 target controls covered

ISMAP (Japan)

1 source controls mapped|1 target controls covered

APPI

1 source controls mapped|1 target controls covered

EU European Health Data Space (EHDS)

1 source controls mapped|1 target controls covered

Indiana Consumer Data Protection Act

1 source controls mapped|1 target controls covered

Connecticut DPA

1 source controls mapped|1 target controls covered

EU Machinery Regulation (Regulation (EU) 2023/1230)

1 source controls mapped|1 target controls covered

Brazil AI Framework

1 source controls mapped|1 target controls covered

Argentina PDPA

1 source controls mapped|1 target controls covered

FATF 40 Recommendations

1 source controls mapped|1 target controls covered

GLI-33 — Gaming Laboratories International Event Wagering Systems

1 source controls mapped|1 target controls covered

US Gramm-Leach-Bliley Act (GLBA) — Higher Education Safeguards Rule

1 source controls mapped|1 target controls covered

OWASP DevSecOps Maturity Model (DSOMM)

1 source controls mapped|1 target controls covered

Switzerland FADP

1 source controls mapped|1 target controls covered

EDM Council CDMC — Cloud Data Management Capabilities Framework

1 source controls mapped|1 target controls covered

Ecuador LOPDP

1 source controls mapped|1 target controls covered

APEC Cross-Border Privacy Rules (CBPR) System

1 source controls mapped|1 target controls covered

MTCS (Singapore)

1 source controls mapped|1 target controls covered

New Hampshire Privacy Act

1 source controls mapped|1 target controls covered

UK Data Protection Act 2018

1 source controls mapped|1 target controls covered

OECD AI Principles

1 source controls mapped|1 target controls covered

EU Medical Devices Regulation (MDR 2017/745)

1 source controls mapped|3 target controls covered

ISO 27701

1 source controls mapped|1 target controls covered

ISO 22000

1 source controls mapped|1 target controls covered

China PIPL

1 source controls mapped|1 target controls covered

New Zealand Privacy Act

1 source controls mapped|1 target controls covered

NIST SP 800-144

1 source controls mapped|1 target controls covered

LGPD

1 source controls mapped|1 target controls covered

Liechtenstein DPA

1 source controls mapped|1 target controls covered

New Zealand Information Security Manual (NZISM)

1 source controls mapped|1 target controls covered

New Jersey Data Privacy Act

1 source controls mapped|1 target controls covered

NRF Cybersecurity and Data Privacy Framework (National Retail Federation)

1 source controls mapped|1 target controls covered

Oman National Cybersecurity Framework

1 source controls mapped|1 target controls covered

Kentucky Consumer Data Protection Act

1 source controls mapped|1 target controls covered

Minnesota Consumer Data Privacy Act

1 source controls mapped|1 target controls covered

Utah Consumer Privacy Act

1 source controls mapped|1 target controls covered

Nigeria NDPR

1 source controls mapped|1 target controls covered

Nebraska Data Privacy Act

1 source controls mapped|1 target controls covered

Japan AI Guidelines

1 source controls mapped|1 target controls covered

Singapore AI Governance Framework

1 source controls mapped|1 target controls covered

PDPA Singapore

1 source controls mapped|1 target controls covered

Mauritius DPA

1 source controls mapped|1 target controls covered

Maryland Online Data Privacy Act

1 source controls mapped|1 target controls covered

Tennessee IPA

1 source controls mapped|1 target controls covered

MTCS — Multi-Tier Cloud Security (Singapore)

1 source controls mapped|1 target controls covered

TEFCA — Trusted Exchange Framework and Common Agreement

1 source controls mapped|1 target controls covered

UAE PDPL

1 source controls mapped|1 target controls covered

Philippines Data Privacy Act (RA 10173)

1 source controls mapped|1 target controls covered

POPIA

1 source controls mapped|1 target controls covered

ISO 42001

1 source controls mapped|1 target controls covered

ISO 27018

1 source controls mapped|1 target controls covered

Norway PDPA

1 source controls mapped|1 target controls covered

ISO 45001

1 source controls mapped|1 target controls covered

South Korea PIPA

1 source controls mapped|1 target controls covered

Taiwan PDPA

1 source controls mapped|1 target controls covered

Philippines DPA

1 source controls mapped|1 target controls covered

ISO 27017

1 source controls mapped|1 target controls covered

Rwanda DPL

1 source controls mapped|1 target controls covered

Virginia CDPA

1 source controls mapped|1 target controls covered

Jamaica DPA

1 source controls mapped|1 target controls covered

NIST SP 800-122

1 source controls mapped|1 target controls covered

Montana Consumer Data Privacy Act

1 source controls mapped|1 target controls covered

Oregon Consumer Privacy Act

1 source controls mapped|1 target controls covered

Qatar DPL

1 source controls mapped|1 target controls covered

Turkey KVKK

1 source controls mapped|1 target controls covered

PDPA Thailand

1 source controls mapped|1 target controls covered

NIST SP 800-190

1 source controls mapped|1 target controls covered

Uruguay DPL

1 source controls mapped|1 target controls covered

PIPEDA

1 source controls mapped|1 target controls covered

Peru DPL

1 source controls mapped|1 target controls covered

Mexico LFPDPPP

1 source controls mapped|1 target controls covered

NIST SP 800-145

1 source controls mapped|1 target controls covered

Texas Data Privacy Act

1 source controls mapped|1 target controls covered

NIST SP 800-146

1 source controls mapped|1 target controls covered

Saudi Arabia PDPL

1 source controls mapped|1 target controls covered

Vietnam PDPD

1 source controls mapped|1 target controls covered

Kenya DPA

1 source controls mapped|1 target controls covered

Malaysia PDPA 2010

1 source controls mapped|1 target controls covered

UK AI Regulation Framework

1 source controls mapped|1 target controls covered

NIST Privacy Framework 1.0

1 source controls mapped|1 target controls covered

Compare ISO 14001 with CSRD

Frequently Asked Questions

What is ISO 14001?

ISO 14001 is a compliance framework from International with 3 domains and 14 controls. Environmental management systems requirements It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does ISO 14001 have?

ISO 14001 has 14 controls organised across 3 domains. The largest domains are ISO 14001: Environmental Policy & Planning (5 controls), ISO 14001: Operational Controls (5 controls), ISO 14001: Performance Evaluation (4 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does ISO 14001 map to?

ISO 14001 maps to 157 other compliance frameworks. The top mapping partners are CSRD (36% coverage), GRI Standards (36% coverage), EU SFDR (Sustainable Finance Disclosure Regulation) (36% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with ISO 14001 compliance?

Start your ISO 14001 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 14001 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 14 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 692 frameworks.

Get Started Free →

Free forever — no credit card required