ISO 14001:2015

International

7 domains

32 controls

ISO 14001:2015 Environmental Management Systems Requirements.

Verified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (7)

Context of the Organization

4 controls

Controls in the Context of the Organization domain of ISO 14001:2015 — 4 controls
Code	Title	Description
4.1	Understanding Organisation and Its Context	Organisation determines external and internal issues relevant to its purpose that affect its ability to achieve SMS outc...
4.2	Understanding Needs of Interested Parties	Interested parties relevant to SMS and their requirements are determined and monitored.
4.3	Determining Scope of SMS	Boundaries and applicability of SMS are determined considering services, locations and interfaces.
4.4	Service Management System	Organisation establishes, implements, maintains and continually improves an SMS.

Improvement

3 controls

Controls in the Improvement domain of ISO 14001:2015 — 3 controls
Code	Title	Description
10.1	Risk monitoring and review	Monitor and review risks, controls and the risk management process for continuing relevance.
10.2	Risk reporting	Report risk information to management with sufficient detail to support decision making.
10.3	Continual Improvement	Continually improve the suitability, adequacy and effectiveness of the EMS to enhance environmental performance.

Leadership

3 controls

Controls in the Leadership domain of ISO 14001:2015 — 3 controls
Code	Title	Description
5.1	Risk management context	Establish the internal and external context, scope and criteria for information security risk management.
5.2	Risk acceptance criteria	Define risk acceptance criteria aligned to organizational risk appetite and objectives.
5.3	Determining and Evaluating Audit Programme Risks	Risks and opportunities related to audit programme are identified and addressed in programme design.

Operation

2 controls

Controls in the Operation domain of ISO 14001:2015 — 2 controls
Code	Title	Description
8.1	Risk treatment selection	Select appropriate risk treatment options including modification, retention, avoidance or sharing.
8.2	Risk treatment plan	Formulate a risk treatment plan with assigned owners, timelines and resources.

Performance Evaluation

5 controls

Controls in the Performance Evaluation domain of ISO 14001:2015 — 5 controls
Code	Title	Description
9.1.1	Monitoring, Measurement, Analysis and Evaluation	Monitor, measure, analyse and evaluate environmental performance, including determining what needs to be monitored and m...
9.1.2	Access to networks and network services (cloud)	Access to cloud services and their management APIs shall be restricted to authorized users.
9.2.1	Internal audit (general)	Conduct internal audits at planned intervals to provide information on whether the EMS conforms to organization requirem...
9.2.2	Internal audit programme	Establish, implement and maintain an audit programme considering environmental importance, changes affecting EMS, and re...
9.3	Management Review	Top management reviews SMS at planned intervals to ensure suitability, adequacy and effectiveness.

Planning

6 controls

Controls in the Planning domain of ISO 14001:2015 — 6 controls
Code	Title	Description
6.1.1	Information security roles and responsibilities (cloud guidance)	Cloud-specific information security roles shall be defined for both customer and provider.
6.1.2	Environmental Aspects	Determine environmental aspects of activities, products and services within the scope of the EMS and the associated envi...
6.1.3	Compliance Obligations	Determine and have access to compliance obligations related to environmental aspects and determine how they apply to the...
6.1.4	Planning Action	Plan actions to address significant environmental aspects, compliance obligations and risks and opportunities, including...
6.2.1	OH&S objectives	Establish OH&S objectives at relevant functions and levels to maintain and continually improve the OH&S MS and OH&S perf...
6.2.2	Planning to achieve OH&S objectives	When planning how to achieve OH&S objectives, determine what will be done, what resources are required, who is responsib...

Support

9 controls

Controls in the Support domain of ISO 14001:2015 — 9 controls
Code	Title	Description
7.1	Risk identification	Identify risks based on assets, threats, vulnerabilities, controls and consequences.
7.2	Risk analysis	Analyse risks to determine likelihood and consequence, using qualitative or quantitative methods.
7.3	Risk evaluation	Compare analysed risks against acceptance criteria to prioritize treatment.
7.4.1	Purchasing Process	Document procedures to ensure purchased product conforms; supplier evaluation/selection based on ability to meet require...
7.4.2	Purchasing Information	Purchasing information shall describe product to be purchased including specifications, acceptance criteria, qualificati...
7.4.3	Verification of Purchased Product	Verify that purchased product meets requirements; extent of verification proportional to supplier risk; maintain records...
7.5.1	Control of Production and Service Provision	Plan, carry out, and monitor production under controlled conditions; documented procedures, monitoring, infrastructure,...
7.5.2	Cleanliness of Product	Document requirements for cleanliness if product is cleaned prior to sterilization/use, supplied non-sterile to be clean...
7.5.3	Installation Activities	Document requirements for installation and acceptance criteria; maintain records of installation and verification by org...

Your Compliance Coverage

If you comply with ISO 14001:2015, you already cover:

BRCGS Global Standard for Food Safety Issue 9

16%

5 controls mapped

Compare →

SWIFT CSCF v2024

16%

5 controls mapped

Compare →

CIS Controls v8

16%

5 controls mapped

Compare →

+ 99 more: FDA Quality Management System Regulation (QMSR) (16%), NIST SP 800-171A Rev 3 — Assessing CUI Security Requirements (16%)

See all 102 mapped frameworks ↓

Maps to 102 other frameworks

32 total controls

BRCGS Global Standard for Food Safety Issue 9

5 source controls mapped|8 target controls covered

16%

SWIFT CSCF v2024

5 source controls mapped|5 target controls covered

16%

CIS Controls v8

5 source controls mapped|9 target controls covered

16%

FDA Quality Management System Regulation (QMSR)

5 source controls mapped|4 target controls covered

16%

NIST SP 800-171A Rev 3 — Assessing CUI Security Requirements

5 source controls mapped|3 target controls covered

16%

IEC 62304:2015 Medical Device Software Lifecycle Processes

5 source controls mapped|3 target controls covered

16%

ICH E6(R3) — Good Clinical Practice

5 source controls mapped|2 target controls covered

16%

ISO/IEC 17025:2017 — General Requirements for Testing and Calibration Laboratories

5 source controls mapped|6 target controls covered

16%

ISO 15189:2022 — Medical Laboratories Requirements for Quality and Competence

5 source controls mapped|9 target controls covered

16%

GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v6

5 source controls mapped|3 target controls covered

16%

EU Medical Devices Regulation (MDR 2017/745)

5 source controls mapped|5 target controls covered

16%

AS9100D — Aerospace Quality Management System

5 source controls mapped|6 target controls covered

16%

ISO/IEC 27003:2017

5 source controls mapped|6 target controls covered

16%

DO-178C / ED-12C — Software Considerations in Airborne Systems

5 source controls mapped|4 target controls covered

16%

ISO 27005

5 source controls mapped|3 target controls covered

16%

SQF Code Edition 9 — Safe Quality Food

5 source controls mapped|4 target controls covered

16%

PIC/S Guide to Good Manufacturing Practice for Medicinal Products

5 source controls mapped|5 target controls covered

16%

ISO 19011

4 source controls mapped|2 target controls covered

13%

21 CFR Part 58 — Good Laboratory Practice (GLP)

4 source controls mapped|1 target controls covered

13%

PCI DSS 4.0

4 source controls mapped|2 target controls covered

13%

US OFAC Sanctions Compliance Framework

4 source controls mapped|3 target controls covered

13%

ISO 9001:2015

4 source controls mapped|4 target controls covered

13%

ISO 13485:2016

4 source controls mapped|3 target controls covered

13%

ISO 45001:2018

4 source controls mapped|4 target controls covered

13%

AS9100D:2016 — Quality Management Systems for Aviation, Space, and Defence

4 source controls mapped|6 target controls covered

13%

3GPP Security Architecture (TS 33.501 — 5G Security)

4 source controls mapped|2 target controls covered

13%

ISO 22301:2019

4 source controls mapped|5 target controls covered

13%

ISO/IEC 42001:2023

4 source controls mapped|4 target controls covered

13%

ISO 20000-1

4 source controls mapped|3 target controls covered

13%

ISO 13485

4 source controls mapped|4 target controls covered

13%

GS1 Global Standards — Supply Chain Traceability and Data Security

4 source controls mapped|2 target controls covered

13%

FSSC 22000 — Food Safety System Certification

4 source controls mapped|3 target controls covered

13%

ISO/IEC 27006:2024

4 source controls mapped|3 target controls covered

13%

21 CFR Part 211 — Current Good Manufacturing Practice

4 source controls mapped|3 target controls covered

13%

CDP (formerly Carbon Disclosure Project)

4 source controls mapped|1 target controls covered

13%

WCO Authorised Economic Operator (AEO) Framework

4 source controls mapped|1 target controls covered

13%

NRF Cybersecurity and Data Privacy Framework (National Retail Federation)

4 source controls mapped|1 target controls covered

13%

NIS2 Directive Implementing Acts

4 source controls mapped|1 target controls covered

13%

WCO SAFE Framework of Standards to Secure and Facilitate Global Trade (2021)

4 source controls mapped|1 target controls covered

13%

Customs-Trade Partnership Against Terrorism (C-TPAT)

4 source controls mapped|1 target controls covered

13%

Critical Raw Materials Act (Proposed Regulation COM(2023) 192)

4 source controls mapped|1 target controls covered

13%

EU Chips Act (Regulation (EU) 2023/1781) — potential incorrect regulation number

4 source controls mapped|1 target controls covered

13%

UK Telecommunications (Security) Act 2021

4 source controls mapped|1 target controls covered

13%

ISO/IEC 25012:2008 — Data Quality Model

4 source controls mapped|1 target controls covered

13%

C-TPAT — Customs-Trade Partnership Against Terrorism

4 source controls mapped|1 target controls covered

13%

ISO/IEC 27701:2019

4 source controls mapped|1 target controls covered

13%

Singapore Model AI Governance Framework (2nd Edition)

4 source controls mapped|1 target controls covered

13%

EU Digital Services Act

4 source controls mapped|1 target controls covered

13%

ISO 31000:2018

3 source controls mapped|1 target controls covered

ISO 14001

2 source controls mapped|2 target controls covered

ASIS SPC.1-2009 — Organizational Resilience Standard

2 source controls mapped|2 target controls covered

NIST SP 800-34 Rev 1 — Contingency Planning Guide

1 source controls mapped|1 target controls covered

ISO 14064 — Greenhouse Gas Accounting and Verification (Parts 1-3)

1 source controls mapped|1 target controls covered

TISAX — Trusted Information Security Assessment Exchange

1 source controls mapped|1 target controls covered

ICH E6(R2) Good Clinical Practice — Data Integrity and Electronic Systems

1 source controls mapped|2 target controls covered

ILO Nursing Personnel Convention C149 (1977)

1 source controls mapped|3 target controls covered

6th Anti-Money Laundering Directive (AMLD6, Directive (EU) 2018/1673)

1 source controls mapped|3 target controls covered

ISO 8000 — Data Quality

1 source controls mapped|3 target controls covered

FATF Recommendation 16 — Virtual Asset Travel Rule

1 source controls mapped|3 target controls covered

Privacy by Design (PbD) — Seven Foundational Principles

1 source controls mapped|3 target controls covered

BS 65000:2014 — Guidance on Organizational Resilience

1 source controls mapped|3 target controls covered

Aged Care Quality Standards (Australia)

1 source controls mapped|1 target controls covered

ISO 55001

1 source controls mapped|1 target controls covered

ISO 56002

1 source controls mapped|3 target controls covered

ISO 41001:2018 — Facility Management Systems

1 source controls mapped|3 target controls covered

ISO 39001:2012 — Road Traffic Safety Management

1 source controls mapped|3 target controls covered

ISO 37002:2021 — Whistleblowing Management Systems

1 source controls mapped|3 target controls covered

ISO 50001:2018 — Energy Management Systems

1 source controls mapped|3 target controls covered

ISO 22313:2020 — Guidance on Business Continuity Management Systems

1 source controls mapped|3 target controls covered

ASEAN Data Management Framework

1 source controls mapped|3 target controls covered

ISO 28001:2007 Supply Chain Security Management

1 source controls mapped|3 target controls covered

ISO 37301

1 source controls mapped|1 target controls covered

NFPA 1600 — Standard on Continuity, Emergency, and Crisis Management

1 source controls mapped|2 target controls covered

ISO 20400:2017 — Sustainable Procurement

1 source controls mapped|1 target controls covered

ISO 9001

1 source controls mapped|3 target controls covered

AICPA Privacy Management Framework (PMF)

1 source controls mapped|1 target controls covered

ILO Declaration on Fundamental Principles and Rights at Work (Core Conventions)

1 source controls mapped|1 target controls covered

Voluntary Principles on Security and Human Rights (VPs)

1 source controls mapped|1 target controls covered

EU Better Internet for Kids (BIK+) Strategy

1 source controls mapped|1 target controls covered

German Supply Chain Due Diligence Act (LkSG)

1 source controls mapped|1 target controls covered

IATF 16949:2016 — Quality Management System for Automotive Production

1 source controls mapped|2 target controls covered

ISO 37001

1 source controls mapped|1 target controls covered

ISO 31000

1 source controls mapped|1 target controls covered

ISO 45001

1 source controls mapped|1 target controls covered

IRS Publication 1075 — Tax Information Security Guidelines

1 source controls mapped|1 target controls covered

UK FCA/PRA Operational Resilience Framework

1 source controls mapped|1 target controls covered

NIST SP 800-30

1 source controls mapped|1 target controls covered

ITAR — International Traffic in Arms Regulations

1 source controls mapped|1 target controls covered

COSO ERM

1 source controls mapped|1 target controls covered

NATO AQAP 2110 — Quality Assurance Requirements for Design, Development, and Production

1 source controls mapped|3 target controls covered

ISO 22000

1 source controls mapped|1 target controls covered

NIST SP 800-37

1 source controls mapped|1 target controls covered

SA8000:2014 — Social Accountability Standard

1 source controls mapped|1 target controls covered

IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.2)

1 source controls mapped|1 target controls covered

South Korea ISMS-P

1 source controls mapped|1 target controls covered

NIST SP 800-39

1 source controls mapped|1 target controls covered

ICH Q10 — Pharmaceutical Quality System

1 source controls mapped|1 target controls covered

EASA Part-IS — Information Security in Aviation

1 source controls mapped|1 target controls covered

DAMA-DMBOK2 — Data Management Body of Knowledge (2nd Edition)

1 source controls mapped|1 target controls covered

ISO/IEC 27014:2020

1 source controls mapped|1 target controls covered

ICAO Annex 17 — Aviation Security (AVSEC)

1 source controls mapped|1 target controls covered

ISO 30401

1 source controls mapped|1 target controls covered

Compare ISO 14001:2015 with BRCGS Global Standard for Food Safety Issue 9

Frequently Asked Questions

What is ISO 14001:2015?

ISO 14001:2015 is a compliance framework from International with 7 domains and 32 controls. ISO 14001:2015 Environmental Management Systems Requirements. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does ISO 14001:2015 have?

ISO 14001:2015 has 32 controls organised across 7 domains. The largest domains are Support (9 controls), Planning (6 controls), Performance Evaluation (5 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does ISO 14001:2015 map to?

ISO 14001:2015 maps to 102 other compliance frameworks. The top mapping partners are BRCGS Global Standard for Food Safety Issue 9 (16% coverage), SWIFT CSCF v2024 (16% coverage), CIS Controls v8 (16% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with ISO 14001:2015 compliance?

Start your ISO 14001:2015 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 14001:2015 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 32 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 769 frameworks.

Get Started Free →

Free forever — no credit card required