ISO 14001:2026: What Changed, What Didn't, and What You Don't Need To Do
The fourth edition is published and the 2015 edition is withdrawn. Most transition guides list what changed. Fewer tell you which clauses stayed exactly the same — or that you are not required to renumber a single document.
ISO Management Systems · 9 min read · Reviewed 16 August 2026
Key points
- Published 15 April 2026. Fourth edition. ISO 14001:2015 and its 2024 climate amendment are both formally withdrawn.
- There is no single deadline. ISO ties transition to your own certification cycle — ask your certification body, not the internet.
- One new clause (6.3, planning of changes) and one new documented output (6.1.4, risks and opportunities). Clause 4.1 and 8.1 are meaningfully broadened. The rest is largely renumbering, terminology and clarification.
- You do not need to renumber your documentation, scrap your manual, or adopt the standard's vocabulary.
- Malaysian adoptions are identical (IDT), so preparing against the ISO text now cannot put you on the wrong track.
ISO published the fourth edition of ISO 14001 on 15 April 2026. If you hold a certificate to the 2015 edition, that edition is now withdrawn and you will need to move — but probably with far less upheaval than the volume of transition articles suggests.
This guide is drawn from ISO's own publication record and from the clause-by-clause briefing note published by the CQI for EMS auditors. Where sources disagree, we say so.
First, the deadline question — because everyone gets this wrong
You will find confident statements online that the deadline is April 2029. Others say 30 April 2029. Others say May 2029. They cannot all be right, and the disagreement is not trivial.
ISO's own position is that there is no universal date. Certified organisations transition within the timeframe set by their certification cycle — typically around three years — and should contact their certification body for specifics.
That matters practically. A factory recertifying in early 2027 faces a very different runway from one recertifying in late 2028. A date lifted from a blog post could be months out for your situation.
There is also a squeeze that the three-year figure hides. Certification bodies cannot audit to the new edition until their own auditors are assessed as competent for it, which takes time after publication. In practice, an organisation already certified may have only two ordinary surveillance visits available before recertification forces the issue.
The action: ask your certification body for your dates, in writing. That is the only answer that applies to you.
What actually changed
ISO describes the revision as incorporating the latest requirements for management system standards and clarifying requirements around key topics. The ISO committee itself characterises it as a moderate revision.
Clause 4 — Context
This is the change that will generate findings. Five environmental conditions are now named in Clause 4.1 — pollution levels, availability of natural resources, climate change, biodiversity and ecosystem health. They existed in the 2015 edition, but only in Annex A, which is informative and therefore not auditable. Moving them into the requirement text means an auditor can now ask where you have addressed biodiversity, and record a finding if the answer is silence.
They must be addressed as both internal issues (conditions you can affect) and external issues (conditions that can affect you). Documenting low relevance is fine — saying nothing is not. Clause 4.3(e) adds the lifecycle of your activities, products and services to scope determination. Clause 4.4 is unchanged.
Clause 5 — Leadership
Clause 5.2 adds preservation or conservation of natural resources to the listed policy commitments, and the policy must be “available” rather than “maintained”. Clause 5.3 keeps its content but drops “Organizational” from its title. Top management accountability is widened, with some responsibilities traditionally delegated to a management representative now needing top management involvement.
Clause 6 — Planning (where the real change is)
6.3 is a genuinely new clause requiring changes affecting the EMS to be carried out in a planned manner. 6.1.2 gains a new sub-clause (c) covering potential emergency situations, and now names normal and abnormal conditions explicitly.
6.1.4 deserves attention. Risks and opportunities were previously bundled inside 6.1.1 alongside several other requirements. They now have their own sub-clause with an output that must be available as documented information — so an auditor can ask to see your risks and opportunities as a distinct, traceable set. If yours are mixed into a single register with aspects and compliance obligations, they need to be separable. The old 6.1.4 becomes 6.1.5. Clause 6.1.3 is unchanged.
Clause 7 — Support
Mostly terminology. Documented information is now “available”, replacing both “maintained” and “retained” throughout. Communication processes should engage employees in contributing to continual improvement. Clauses 7.1, 7.3 and 7.5 are unchanged.
Clause 8 — Operation
Operational control expands from “outsourced processes” to externally provided processes, products or services relevant to the intended outcomes of the EMS. In practice this pushes control and influence out to suppliers and partners, with upstream and downstream impacts assessed and expectations documented.
Clause 9 — Performance evaluation
Clause 9.1.1 now asks what needs to be monitored, measured and analysed — pushing you to define an analysis method at the planning stage rather than after the data piles up. Internal audits must define audit objectives in addition to scope and criteria, and the audit programme itself is required as documented information. Management review is reformatted into three sub-clauses: general, inputs and results. Clause 9.2.1 is unchanged.
Clause 10 — Improvement
Clause 10.3 has been integrated into 10.1, with references to the relevant clauses. Note that several certification bodies have published this the other way round — stating 10.1 was absorbed into 10.2 and 10.3. The auditor briefing is clear that it is 10.3 that moved. Clause 10.2 has minor rewording tying corrective actions more closely to their environmental impacts.
Terms and definitions
The definition of “risk” borrowed from ISO 31000 has been removed entirely — only “risks and opportunities” survives, with “threats” replaced by “risks”. Definitions of process, audit and indicator are modified, and “outsource” is deleted as a defined term. Accounts of exactly how “indicator” changed differ between commentators, so check that one against the standard if it matters to your monitoring plan.
What did not change — and what you are not required to do
This is the part most transition guides skip, and it is the part that determines what the work actually costs you.
Guidance published for EMS auditors is explicit that organisations complying with the 2026 edition do not need to:
- Remove a management representative role. The standard has never required one, and if the role works for you, keep it — noting that some of its traditional responsibilities now need top management involvement.
- Eliminate existing manuals and documented procedures. If they are in place, needed and working, they stay. They only need aligning with revised requirements.
- Renumber or rename documentation to match the revised clause references. You may choose to, but it is a judgement call about whether the benefit justifies the effort.
- Restructure your management system to follow the standard's sequence. Meet the requirements and your EMS conforms, whatever order it sits in.
- Adopt the standard's terminology. If your team says “records” rather than “documented information”, or “supplier” rather than “external provider”, that is perfectly acceptable.
If a consultant tells you the transition requires renumbering your entire documentation set, that is a choice being sold to you, not a requirement.
One practical qualification. Not being required to renumber is not the same as leaving every reference alone. If your procedures point to clause 6.1.1 for risk determination, or to 10.3 for continual improvement, those clause numbers now mean something different. The obligation has not changed, but an auditor following your cross-references will end up somewhere unexpected. Correcting pointers to clauses that moved is worth doing even though a wholesale renumbering exercise is not.
Where a Malaysian factory will actually feel it
Three areas are most likely to generate findings here:
Change management (6.3). Most plants handle change informally — a new line goes in, the aspects register catches up eventually. A dedicated clause means an auditor asks to see the process, not just the outcome.
Supplier and value chain control (8.1). For JB manufacturers supplying multinationals, this aligns with what customers already audit. If your customer environmental questionnaires ask about your suppliers, you have a head start.
Context (4.1). If your context analysis names climate change and stops, it will look thin against pollution, biodiversity and ecosystem health. For factories already managing scheduled waste and DOE obligations, much of the underlying evidence exists — it has simply never been framed as context.
That last point is worth drawing out. If you are already running scheduled waste and eSWIS compliance, your waste streams, monitoring data and DOE correspondence are environmental aspects and compliance obligations already. The transition is often a matter of connecting existing evidence to the new framing rather than generating anything new.
The Malaysian standards position
Malaysian Standards are published by Standards Malaysia under the Standards of Malaysia Act 1996. ISO adoptions are marked IDT — identical — meaning the technical content, structure and wording match the international standard. MS ISO 14001:2015 was an identical adoption of ISO 14001:2015.
A practical note on buying the standard. As at August 2026 the 2026 edition is not sold locally. SIRIM QAS International's own transition announcement directs organisations to buy it from ISO, linking to the ISO catalogue entry. So order the PDF directly from ISO — budget roughly CHF 196 before conversion. The Standards Malaysia MySOL portal is where to check whether a Malaysian adoption has been published.
SIRIM QAS has publicly confirmed the 15 April 2026 publication and a three-year transition period, and offers readiness assessment and certification guidance. What it has not published is a schedule — when it begins auditing to the 2026 edition, and when it stops accepting the 2015 edition. If SIRIM QAS holds your certificate, that is the question to put to them directly. If another body holds it, ask them the same question. Either way, get the answer in writing.
The practical consequence: preparing against ISO 14001:2026 now cannot put you on the wrong track. The Malaysian edition will say the same thing. There is no reason to wait.
Two further points that are often muddled. Malaysian Standards are voluntary unless a regulatory authority makes them mandatory through regulations or by-laws — so ISO 14001 certification is driven by customers and tenders, not by Malaysian law. And ISO itself confirms that conformity can be self-declared; certification is a choice most organisations make because customers want independent confirmation, not because the standard demands it.
A practical sequence
- Get your dates. Ask your certification body when they will audit you to the 2026 edition and when they stop accepting the 2015 edition.
- Buy the standard from ISO. Not a summary — including this one. It is not available locally at present, so order the PDF directly from ISO. Everything downstream depends on your team reading the actual requirements.
- Gap analysis. Focus effort on 6.3, 4.1, 4.3(e), 8.1 and 9.2.2. Leave the unchanged clauses alone.
- Update what needs updating. Context analysis, change management process, supplier controls, internal audit objectives, management review structure.
- Internal audit and management review against the new edition before your certification body arrives.
Common questions
When was ISO 14001:2026 published?
15 April 2026, as the fourth edition. The 2015 edition and its 2024 climate change amendment are both formally withdrawn, with the amendment absorbed into the new text.
What is the transition deadline?
There is no single fixed date. ISO ties transition to your own certification cycle — typically around three years — and directs organisations to their certification body. You will see April 2029 and May 2029 quoted; your actual date depends on where you sit in your cycle.
Do we have to renumber our EMS documentation?
No. Auditor guidance is explicit that renumbering, restructuring, scrapping manuals and adopting the standard's terminology are all optional. If your documentation works and meets the requirements, it stays.
Which clauses are unchanged?
Unchanged in substance: 4.4, 6.1.3, 7.1, 7.3, 7.5 and 9.2.1. Clause 5.3 keeps its content but drops “Organizational” from its title. Clause 1 Scope changes only in replacing “International Standard” with “document”. One caution: sources disagree on Clause 6.2 — some report no change, others that environmental objectives must now be available as documented information as an explicit attribute. Check 6.2 against the standard rather than any summary, including this one.
Is there a Malaysian version?
Malaysian adoptions are IDT — identical in technical content, structure and wording — so preparing against the ISO text now is safe. As at August 2026 the 2026 edition is not available locally; SIRIM is directing buyers to ISO, so buy it there. Check MySOL for the status of the Malaysian adoption.
Is ISO 14001 required by Malaysian law?
No. Malaysian Standards are voluntary unless made mandatory by a regulatory authority. Certification is normally driven by customers, tenders and supply chain requirements. ISO also confirms conformity can be self-declared without certification.
Which certification body should we use?
Your choice. SIRIM QAS International operates alongside international bodies including SGS, BSI, TÜV, DNV, Bureau Veritas, Lloyd's Register and Intertek. Choose on cost, sector experience and which certificate your customers recognise. ProSafe is not tied to any certification body and takes no referral arrangements.
A note on sources
Publication date, edition and withdrawal status are taken from ISO's own record for the standard. Clause-level detail is drawn from the briefing note published by the CQI for EMS auditors, which is based on the final draft. Neither ProSafe nor any summary article is a substitute for the standard itself — buy it directly from ISO before making decisions at clause level.
Related: ISO consultancy services · What is ISO 45001? · DOE compliance guide
Planning your ISO 14001:2026 transition?
We run the gap analysis, update what needs updating, leave alone what doesn't — and attend the audit with you.