6.3 Auditing Environmental Controls, Permits & Compliance Evaluation

6.3 Auditing Environmental Controls, Permits & Compliance Evaluation

Quick Answer: Under ISO 14001:2015 Clause 9.1, the organization must systematically evaluate its environmental performance and fulfillment of compliance obligations. Auditing Clause 9.1.1 requires verifying that monitoring equipment is calibrated and data validity is assured. Auditing Clause 9.1.2 (Evaluation of compliance) is a critical focal point: the organization must actively and periodically evaluate compliance against all applicable legal requirements and permits, maintaining demonstrable knowledge and understanding of its compliance status. Mere awareness of laws (Clause 6.1.3) does not equal active evaluation of compliance (Clause 9.1.2).

---

Auditing Clause 9.1.1: Monitoring, Measurement, Analysis, and Evaluation

Clause 9.1.1 mandates that the organization determine what needs to be monitored and measured, the methods to ensure valid results, the criteria against which performance is evaluated, and when monitoring and analysis shall be performed.

+--------------------------------------------------------------------------+
|                   CLAUSE 9.1.1 AUDIT INVESTIGATION TRAIL                 |
+--------------------------------------------------------------------------+
| 1. MONITORING SCOPE   | Are all significant aspects & permit parameters  |
|                       | covered by defined monitoring programs?          |
+-----------------------+--------------------------------------------------+
| 2. MEASUREMENT VALIDITY| Are monitoring methods documented, valid, and    |
|                       | scientifically sound?                            |
+-----------------------+--------------------------------------------------+
| 3. CALIBRATION & QA   | Are instruments calibrated against traceable     |
|                       | national/international measurement standards?    |
+-----------------------+--------------------------------------------------+
| 4. DATA ANALYSIS      | Does the organization analyze trends or simply   |
|                       | file reports away in binders without review?     |
+--------------------------------------------------------------------------+

Calibrated and Verified Measurement Equipment

Under Clause 9.1.1, the organization must ensure that calibrated or verified monitoring and measuring equipment is used and maintained as appropriate. When auditing measuring devices:

1. Traceability: Verify that calibration certificates cite traceable national standards (e.g., NIST, UKAS, DAkkS).
2. In-Service Physical Checks: Inspect on-site instrumentation (e.g., pH meters, continuous emission monitors, acoustic sound meters, composite water samplers). Check calibration stickers for expiration dates, physical tamper seals, and device serial numbers.
3. Out-of-Calibration Protocol: What happens when an instrument is found to be out of calibration? The auditor must verify whether the organization assesses the validity of previous measuring results and takes corrective action on potentially impacted environmental discharges.

---

Auditing Clause 9.1.2: Evaluation of Compliance (The Cornerstone of EMS)

Clause 9.1.2 is arguably the most scrutinized clause during CQI/IRCA certification audits. An organization can have an impressive corporate environmental policy, but if it fails to evaluate whether it complies with applicable environmental statutes, its EMS fails its core intended outcome.

The Critical Distinction: Clause 6.1.3 vs. Clause 9.1.2

Candidates in Lead Auditor exams frequently confuse these two interrelated clauses:

The Three Requirements of Clause 9.1.2

The organization must:

1. Determine the frequency that compliance will be evaluated (e.g., quarterly permit checks, annual comprehensive environmental legal audits);
2. Evaluate compliance and take action if non-compliance is identified;
3. Maintain knowledge and understanding of its compliance status across all levels of leadership.

Exam Key Insight: If an organization's EHS manager states, "Our compliance evaluation consists of our legal consultant sending us a monthly newsletter with updated environmental statutes," this is a Major Nonconformity against Clause 9.1.2. Reading about new laws is planning (6.1.3); evaluating whether your boilers, stacks, and effluent pipes meet those laws is evaluation of compliance (9.1.2).

---

Auditing Technical Environmental Permits and Consent Conditions

Lead environmental auditors must be competent in dissecting industrial operating licenses, environmental permits, and discharge consents. Key technical areas include:

                               PRIMARY ENVIRONMENTAL PERMITS
                               
         AIR EMISSIONS                  WATER DISCHARGES                 HAZARDOUS WASTE
    +-----------------------+      +-----------------------+      +-----------------------+
    | • Particulate Matter  |      | • pH Range (6.0 - 9.0)|      | • Consignment Notes   |
    | • SO2, NOx, CO        |      | • BOD5 & COD Limits   |      | • Duty of Care Audit  |
    | • VOC Mass Flows      |      | • Total Suspended Sol.|      | • Licensed Carriers   |
    | • Stack Testing Rpts  |      | • Heavy Metals (Cr,Ni)|      | • 90-Day Storage Rule |
    | • Scrubber DP Limits  |      | • Temperature & Flow  |      | • Waste Hierarchy     |
    +-----------------------+      +-----------------------+      +-----------------------+

1. Industrial Wastewater Discharge Consents

• Parameters: Permitted limits typically specify chemical oxygen demand (COD), biochemical oxygen demand (BOD5), total suspended solids (TSS), ammonia nitrogen, heavy metals (e.g., zinc, copper, nickel), fats/oils/grease (FOG), and pH.
• Sampling Protocol: Review sampling logs. Are samples taken at the designated legal compliance point (the authorized monitoring chamber) before dilution with sanitary sewage or surface water?
• Laboratory Accreditation: Ensure compliance water testing is conducted by an accredited third-party laboratory (ISO/IEC 17025 accredited) or using verified in-house test methods.

2. Atmospheric Emissions Consents

• Parameters: Volatile organic compounds (VOCs), sulfur dioxide ($SO_2$), nitrogen oxides ($NO_x$), particulate matter ($PM_{10}$, $PM_{2.5}$), and carbon monoxide ($CO$).
• Stack Testing Reports: Examine isokinetic stack testing reports. Were tests conducted under normal maximum operating production capacity? Were all emission points tested at the legally prescribed frequency?

3. Hazardous Waste Consignment and Duty of Care

• Consignment Tracking: Audit the cradle-to-grave manifest chain. Trace three random waste streams (e.g., contaminated solvent, paint sludge, used battery acid) from internal collection drums through to final disposal certificates.
• Carrier & Facility Permitting: Cross-reference the waste carrier's transport registration and the receiving treatment facility's environmental permit. Are the permits active and authorized to accept those specific European Waste Catalogue (EWC) or hazardous waste codes?

---

Classifying Compliance Nonconformities: Process Failure vs. Active Breach

When compliance deficiencies are discovered, lead auditors must categorize findings with extreme precision:

                      COMPLIANCE DEFICIENCY CLASSIFICATION MATRIX
                      
   +------------------------------------------------------------------------+
   | SCENARIO A: PROCESS FAILURE (Method Defect)                            |
   | The organization complies with discharge parameters, but has never     |
   | conducted an evaluation of compliance for municipal noise bylaws.      |
   | --> NONCONFORMITY: Clause 9.1.2 (Process breakdown; potential Minor/Maj)|
   +------------------------------------------------------------------------+
   | SCENARIO B: ACTIVE BREACH WITH ACTIVE MANAGEMENT                       |
   | Effluent exceeded COD limit last month. The organization self-reported |
   | to the regulator, identified root cause, and took corrective action.   |
   | --> AUDIT EVALUATION: EMS worked as intended! Verify Clause 10.2       |
   |     corrective action effectiveness. No automatic Major NC.            |
   +------------------------------------------------------------------------+
   | SCENARIO C: ACTIVE BREACH UNNOTICED OR CONCEALED                       |
   | Effluent has exceeded heavy metal limits for 6 months. Management is   |
   | unaware, did not evaluate compliance, and took no corrective action.   |
   | --> NONCONFORMITY: MAJOR NONCONFORMITY against 9.1.2 and 10.2;         |
   |     failure to achieve intended outcome of standard.                   |
   +------------------------------------------------------------------------+

The Golden Rule on Legal Breaches: An isolated historical permit exceedance does not automatically disqualify an organization from ISO 14001 certification. What matters is whether the EMS detected the breach, evaluated it, reported it as legally required, initiated corrective action, and eliminated the root cause. If an organization conceals breaches, ignores exceedances, or operates without knowledge of its legal standing, a Major Nonconformity must be raised.

---

Protocol for Imminent Environmental Hazards and Active Illegalities

If an auditor observes an ongoing, active illegal discharge or an imminent emergency during an audit:

1. Safety and Non-Interference: Do not attempt to touch valves, shut down pumps, or operate machinery. The auditor is not an employee or plant operator.
2. Immediate Escalation: Immediately notify the auditee guide and plant leadership so that facility management can execute emergency procedures (Clause 8.2) and arrest the release.
3. Inform Lead Auditor: The team auditor immediately notifies the Lead Auditor.
4. Document Objective Facts: Record precise time, physical location, equipment tags, visual descriptions, gauge readings, and auditee personnel present.
5. Special Review Meeting: The Lead Auditor convenes a formal briefing with top management. The Lead Auditor evaluates whether the condition indicates a systemic failure warranting suspension of the audit or issuance of an immediate Major Nonconformity.
6. Regulatory Role Boundaries: Auditors are not government environmental police. An auditor does not phone the environmental agency unless required by severe criminal statutory whistleblowing mandates defined under local jurisdiction.

---

Comparative Analysis Table: Clause 6.1.3 vs. Clause 9.1.2

---

Realistic Audit Scenario: The Overlooked Trade Effluent Permit Condition

Scenario: A metal plating company holds an environmental trade effluent discharge consent with the local water utility. Condition 4 of the permit states: "The discharge of cadmium shall not exceed 0.05 mg/L in any 24-hour composite sample, and the discharge volume shall not exceed 100 cubic meters per day."

During the audit of Clause 9.1.2, the Lead Auditor asks for records evaluating compliance with Condition 4.

• The EHS Manager provides third-party laboratory test reports showing cadmium concentrations between 0.01 and 0.03 mg/L, demonstrating that cadmium limits are met.
• The Lead Auditor then asks to see daily discharge flow records.
• The EHS Manager admits: "Our electromagnetic flowmeter broke 8 months ago. We didn't bother replacing it because our chemical analysis for cadmium was well within limits, so we assumed flow volume wasn't critical."
• A review of water utility intake bills indicates the facility consumes an average of 180 cubic meters of municipal water per day, with over 80% used in rinse baths discharging directly into the sewer.

Lead Auditor Evaluation & Finding:

1. Failure of Monitoring Equipment (Clause 9.1.1): The organization failed to ensure calibrated or verified equipment is used and maintained to ensure valid measurement of effluent flow.
2. Failure of Compliance Evaluation (Clause 9.1.2): The organization failed to evaluate compliance against all permit conditions. They evaluated chemical concentration but ignored the 100 $m^3$/day volumetric discharge limit.
3. Potential Legal Exceedance: Water bills suggest daily discharges of approximately 140 $m^3$/day, representing an active breach of Condition 4 of their legal permit.
4. Grading: Because this represents an unmonitored potential legal breach combined with equipment maintenance neglect, this constitutes a Major Nonconformity under Clause 9.1.2.