9.3 Objectives, Scope, Criteria & Initial Contact

9.3 Objectives, Scope, Criteria & Initial Contact

Quick Answer: Every ISO 14001 audit needs clear objectives (why), scope (what/where/who), and criteria (against what). Initial contact with the auditee confirms these elements, agrees logistics and access, and requests information needed to finalize the plan. If any of the three is vague, stop and clarify before auditing.

This section is the backbone of Domain 4 planning literacy. Exam items often present a messy client request and ask what must be defined first—or what initial contact should achieve.

---

1. Audit Objectives

Audit objectives describe the intended outcome of the audit. Examples for EMS work:

• Determine conformity of the EMS with ISO 14001:2015 for certification Stage 2.
• Evaluate readiness of the EMS for Stage 2 (Stage 1 objective).
• Verify continued conformity and effectiveness during surveillance.
• Assess supplier EMS controls related to outsourced waste handling.
• Verify corrective action effectiveness after a major nonconformity.

Objectives influence everything downstream: person-days, which processes get deep sampling, whether legal compliance evaluation is in depth or limited to EMS process checks, and what the report must conclude.

Weak objective: “Look around the factory.” Strong objective: “Evaluate implementation and effectiveness of the EMS conforming to ISO 14001:2015 for the defined manufacturing scope at Sites A and B.”

Objectives should be realistic. An internal audit of a multi-site EMS in one half-day cannot honestly claim full coverage of all significant aspects.

---

2. Audit Scope

Audit scope describes the extent and boundaries: physical locations, organizational units, activities, processes, and time period covered. For ISO 14001, scope language must align with the organization’s EMS scope—and with what the certificate will claim if this is a certification audit.

Scope creep is a common failure mode: auditors wander into a non-certified sister company “because it is next door,” then argue about findings that sit outside agreed boundaries. Conversely, artificially narrow scope that omits the only significant emission source can make a certificate misleading. Lead auditors raise such issues during planning and initial contact—not after the closing meeting.

Multi-site scopes need sampling logic. Initial contact should confirm the central EMS functions and which sites will be visited this cycle.

---

3. Audit Criteria

Audit criteria are the reference set used to determine conformity. For ISO 14001 Lead Auditor contexts, criteria commonly include:

• ISO 14001:2015 requirements.
• The organization’s EMS documented information (scope, policy, procedures, operational controls) to the extent used as the performance standard.
• Other agreed requirements (customer EMS requirements, corporate standards).
• Where applicable, compliance obligations as used within the EMS audit criteria—remember auditors evaluate how the organization identifies and manages obligations; they do not replace regulators.

Criteria must be known to the team before evidence collection. You cannot fairly raise a nonconformity against a requirement that was never in the agreed criteria set. If the client wants “ISO 14001 + corporate sustainability scorecard,” say so explicitly; otherwise scorecard gaps may be observations or out-of-scope comments, not ISO 14001 nonconformities.

---

4. Keeping Objectives, Scope, and Criteria Consistent

The three elements must fit together:

• Objective = certification Stage 2 for Site A painting operations.
• Scope = Site A painting, pretreatment, waste, and related EMS support processes.
• Criteria = ISO 14001:2015 and relevant EMS documented information for that scope.

Inconsistency example: objective claims “full corporate certification” while scope lists one pilot line and criteria omit ISO 14001 Clause 8 operational control. That package is not audit-ready.

Document the agreed trio in the audit plan and opening meeting so disputes are minimized.

---

5. Purpose of Initial Contact

Initial contact (ISO 19011 initiating the audit) establishes communication between the audit team leader (or CB planner) and the auditee’s representative. Typical aims:

1. Confirm authority channels and communication methods.
2. Confirm audit objectives, scope, and criteria—or flag mismatches.
3. Request access to relevant documented information for planning/document review.
4. Agree on practical arrangements: dates, shifts, PPE, security clearances, languages, remote audit tools.
5. Confirm site safety and emergency rules for visiting auditors.
6. Agree on attendance of guides and observers.
7. Soften the ground for a cooperative, professional relationship.

Initial contact is not the Stage 1 audit itself, but it often triggers document exchange that Stage 1 will deepen. For surveillance, contact still matters: confirm changes since last visit (new processes, incidents, reorganizations).

---

6. Information Commonly Requested at Initial Contact

For an ISO 14001 audit, planners often request:

• Current EMS scope and site list.
• Organization chart and process overview.
• Aspect/impact information or significance outputs.
• Compliance-obligation process overview and key permits list (as EMS inputs).
• Recent internal audit and management review outputs.
• Status of previous nonconformities and complaints/incidents of environmental relevance.
• Operational schedules (shutdowns, night shifts) that affect sampling.

If the auditee cannot provide even basic scope and site information, return to feasibility (Section 9.1). Do not invent a plan from marketing brochures.

---

7. Communication Tone and Professional Boundaries

Initial contact should be clear, respectful, and precise. Avoid implying that the audit is a coaching engagement or that “everything will be fine.” Equally avoid adversarial tone. Explain that auditors need access to operational areas and relevant people, including those who run significant environmental processes—not only the management representative.

Confirm confidentiality expectations early, especially when sharing permit correspondence or community-complaint records. If remote auditing methods will be used for some interviews or document review, agree platforms and evidence authenticity controls during contact—not on the morning of the audit.

---

8. Exam Scenario: Fix the Package First

A client emails: “Please certify our green company next week; criteria are sustainability.” Initial contact should convert this into measurable audit language: Is the objective accredited ISO 14001 certification? Which legal entities and sites are in scope? Is the criterion ISO 14001:2015 (and which EMS documents)? Until those answers exist, scheduling a full Stage 2 is premature. A competent lead auditor uses initial contact to replace slogans with audit parameters.

Another scenario: scope excludes the effluent treatment plant “owned by a contractor on-site,” yet that plant treats all process wastewater from the certified activities. Contact discussion should explore whether the outsourced process must be covered through control/influence evidence and site access agreements—otherwise Stage 2 may be unable to conclude on operational control related to water impacts.

---

9. Handoff to Scheduling

Once objectives, scope, and criteria are confirmed and initial contact has secured cooperation and information flows, you can define the detailed audit schedule/plan—timetable by process, site, and auditor. That is the next section. Without this foundation, a beautiful Gantt chart still audits the wrong thing.