6.2 Clause 9 — Performance Evaluation

6.2 Clause 9 — Performance Evaluation

Quick Answer: Clause 9 requires the organization to evaluate EMS performance. 9.1 covers monitoring, measurement, analysis, and evaluation of environmental performance; 9.1.2 requires evaluation of compliance with compliance obligations; 9.2 requires a planned internal audit program; and 9.3 requires top management review at planned intervals with defined inputs and outputs. Auditors sample data integrity, compliance evaluation records, audit independence/coverage, and whether management review drives decisions and actions.

If Clause 8 is where the EMS operates, Clause 9 is where the organization proves it knows whether the EMS works. For Lead Auditors, Clause 9 findings are often decisive in certification decisions because weak monitoring, shallow compliance evaluation, ineffective internal audits, or ceremonial management reviews indicate the PDCA cycle is broken at "Check."

---

9.1 Monitoring, Measurement, Analysis, and Evaluation

Clause 9.1 requires the organization to monitor, measure, analyze, and evaluate its environmental performance. The organization must determine:

• What needs to be monitored and measured
• The methods for monitoring, measurement, analysis, and evaluation, as applicable, to ensure valid results
• The criteria against which the organization will evaluate its environmental performance, and appropriate indicators
• When monitoring and measuring shall be performed
• When the results from monitoring and measurement shall be analyzed and evaluated

The organization must ensure that calibrated or verified monitoring and measurement equipment is used and maintained, as appropriate, and retain appropriate documented information as evidence of monitoring, measurement, analysis, and evaluation results.

What Auditors Expect to See

Monitoring and measurement should connect to significant environmental aspects, environmental objectives (6.2), operational controls (8.1), and compliance obligations. Examples include stack emission rates, effluent quality, energy intensity, waste diversion rates, refrigerant leak quantities, training completion for critical roles, and on-time completion of preventive maintenance that protects environmental controls.

Analysis and evaluation mean more than filing numbers. Auditors ask whether results are compared to criteria/indicators, whether trends are understood, and whether poor performance triggers action (often into Clause 10). A dashboard that no one reviews is weak evidence of 9.1 conformity.

Equipment used for monitoring that requires confidence in results must be calibrated or verified as appropriate. Auditors commonly sample calibration certificates, status labels, and out-of-tolerance responses for instruments that support compliance reporting or significant aspect control (e.g., pH meters for permitted discharge, continuous emission monitors, weigh scales for hazardous waste).

---

9.1.2 Evaluation of Compliance

Clause 9.1.2 is a frequent exam and audit hotspot. The organization must establish, implement, and maintain the processes needed to evaluate fulfillment of its compliance obligations. It must:

• Determine the frequency with which compliance will be evaluated
• Evaluate compliance and take action if needed
• Maintain knowledge and understanding of its compliance status
• Retain documented information as evidence of the compliance evaluation results

Compliance obligations include legal requirements and other requirements the organization must or chooses to comply with (from 6.1.3). Evaluation is not the same as merely listing regulations. Auditors look for a defined method and frequency (which may vary by obligation risk), records of evaluations (audits, inspections, permit reviews, self-assessments), evidence of actions when gaps appear, and current knowledge of status—not a stale spreadsheet last updated at certification.

---

9.2 Internal Audit

Clause 9.2 requires the organization to conduct internal audits at planned intervals to provide information on whether the EMS:

1. Conforms to the organization's own requirements for its EMS and to the requirements of ISO 14001:2015
2. Is effectively implemented and maintained

The organization must establish, implement, and maintain an internal audit program including frequency, methods, responsibilities, planning requirements, and reporting. When establishing the program, the organization must consider the environmental importance of processes concerned, changes affecting the organization, and results of previous audits. Auditors (internal) must be selected to ensure objectivity and the impartiality of the audit process. Documented information must be retained as evidence of audit program implementation and audit results.

Evidence Auditors Seek for 9.2

• Audit program: multi-period coverage of EMS scope, clauses, locations, and significant processes—not only "easy" areas
• Risk-based planning: higher audit attention to significant aspects, past nonconformities, process changes, and compliance-critical operations
• Competence and independence: auditors not auditing their own work where impartiality would be compromised
• Audit criteria, scope, and objectives defined for each audit
• Objective evidence-based findings (conformities, nonconformities, opportunities for improvement)
• Reporting and follow-up into corrective action and management review

A classic nonconformity is an internal audit program that only reviews documentation in the EHS office and never samples operational controls or emergency preparedness in the field. Another is using the process owner as sole auditor of their own process with no impartiality safeguard.

---

9.3 Management Review

Clause 9.3 requires top management to review the organization's EMS at planned intervals to ensure its continuing suitability, adequacy, and effectiveness.

Required Inputs (9.3.2)

Management review inputs must include:

• Status of actions from previous management reviews
• Changes in external and internal issues relevant to the EMS; needs and expectations of interested parties, including compliance obligations; risks and opportunities
• Extent to which environmental objectives have been achieved
• Information on environmental performance, including trends in nonconformities and corrective actions; monitoring and measurement results; fulfillment of compliance obligations; audit results
• Adequacy of resources
• Relevant communication(s) from interested parties, including complaints
• Opportunities for continual improvement

Required Outputs (9.3.3)

Outputs must include:

• Conclusions on the continuing suitability, adequacy, and effectiveness of the EMS
• Decisions related to continual improvement opportunities
• Decisions related to any need for changes to the EMS, including resources
• Actions if needed when environmental objectives have not been achieved
• Opportunities to improve integration of the EMS with other business processes, if needed
• Any implications for the strategic direction of the organization

Documented information must be retained as evidence of the results of management reviews.

Auditor Focus on Management Review Quality

Frequency is "at planned intervals," not a fixed calendar mandated by ISO 14001. Many organizations review annually, but complex or rapidly changing contexts may need more frequent review. Auditors care less about the exact interval than about whether reviews actually occur as planned, use the required inputs, produce the required outputs, and result in tracked actions.

Weak reviews show up as: rubber-stamp signatures on a template that omits compliance status or audit results; no discussion of unmet objectives; no resource decisions; or repeated "actions" with no closure across review cycles. Strong reviews show top management engagement with performance data, compliance evaluation outcomes, internal/external audit results, and clear decisions that feed Clause 10 improvement.

---

Putting Clause 9 Together for Exam Scenarios

Scenario — Valid data, no evaluation: Meters are calibrated and readings recorded, but nobody compares results to objectives or permit limits. Risk: incomplete 9.1 analysis/evaluation; possible 9.1.2 failure if compliance is not evaluated.

Scenario — Compliance binder only: A regulation list exists, but no scheduled evaluation of fulfillment and no recorded compliance status. Direct 9.1.2 issue.

Scenario — Internal audits miss operations: Audits check policy and manuals only. Program likely fails to provide information on effective implementation (9.2) and may miss Clause 8 issues.

Scenario — Management review without inputs: Minutes exist but omit previous actions status, compliance fulfillment, and audit results. Nonconformity against 9.3 inputs/outputs.

Lead Auditors should always ask: What is monitored? How is compliance status known? Does internal audit cover the EMS impartially and effectively? Does top management review drive decisions with evidence?