ISO 14001:2026: changes, transition and certification support

What does ISO 14001 certification prove?

It proves that an independent certification body has checked that your environmental management system meets the requirements of ISO 14001, and that it will keep checking every year. It does not certify that your site does not pollute. It certifies a method: knowing your environmental aspects, meeting your compliance obligations, controlling operations, measuring and improving.

For exporters in Morocco and elsewhere in Africa, the request usually comes from downstream. A European retailer, an industrial customer or a development lender wants to know how the supplier handles waste, wastewater, energy and accident risks. Typical sites include a fish cannery in Agadir, a packaging plant in Kénitra, a fresh produce packhouse in the Souss valley, a construction contractor in Casablanca or Abidjan, or a logistics platform near a port.

One point avoids a lot of confusion: an ISO 14001 certificate is not a permit. It does not replace an environmental acceptability decision or the licence of a hazardous waste contractor. It does require you to identify those requirements, meet them and prove it.

What are the ISO 14001:2026 changes?

Few, in substance. ISO 14001:2026 was published in April 2026. It replaces ISO 14001:2015, including its 2024 amendment.

The Global ACI transition requirements (version 1.0, 4 September 2026) are mandatory for accreditation bodies that have signed the Global ACI multilateral recognition arrangement and for the certification bodies they accredit. The document lists the key changes as:

• alignment with Annex SL and ISO Technical Management Board resolution 16/2025;
• terms and definitions revised to match the harmonized structure;
• new wording for documented information, and a clarification of “documented information shall be available”;
• new requirements on planning of changes;
• additional elements in the management review.

It classes three topics as clarifications in Annex A rather than new requirements: organizational context, risks and opportunities and their links with other clauses; the life cycle perspective; and alignment with strategy, business processes and an integrated management system approach.

Global ACI describes the changes as minimal overall and expects most organisations to find them intuitive and achievable with reasonable effort, while each certified organisation remains responsible for working out what they mean for its own system. It puts the number of accredited ISO 14001 certificates worldwide at around 700,000, which is why it set a three-year transition.

The standard itself is a paid text: we reproduce neither its numbering nor its wording. The transition gap analysis is run on the purchased text, requirement by requirement, with your system in front of you.

What should a certified site do about these changes?

Run a methodical review, not a rebuild. A new production line, a new cleaning chemical or a new waste contractor changes your aspects: the standard now expects such changes to be planned within the system. Check your standard management review agenda against the added elements, make sure documented information is available where it is used, and revisit your context and your view of upstream and downstream stages: purchasing, packaging, transport, end of life.

What is the ISO 14001:2026 transition timeline?

Three years from the last day of the publication month, so until 30 April 2029. The intermediate deadlines apply first to accreditation and certification bodies, but they also set your own schedule.

How does the transition audit work?

It can be combined with a surveillance or recertification audit, or carried out as a special audit, remotely where the certification body can show the objectives are met. At a minimum the auditor reviews the changed requirements, changes in your context and any other changes your system needs. The certification body decides whether extra audit time is required; a full system audit may not need any.

A site that chooses not to transition sees its certification expire on 30 April 2029. Agree your transition date early: a recertification audit in 2027 or 2028 is often the natural moment, and waiting for the last surveillance audit means risking a major nonconformity to close in a hurry.

How does ISO 14001 certification work, step by step?

It runs in eight steps, described in our method below. Three of them decide the outcome: the aspects and impacts analysis, compliance obligations and operational control.

The initial review starts on the ground (discharge point, storage areas, waste yard, boiler house, refrigeration plant) and in the site’s permits, compared with every chapter of the standard. Keep the scope honest: leaving out the maintenance workshop or the wastewater plant because they cause problems is the mistake auditors spot first.

What is an environmental aspects and impacts analysis?

It is the core of the system. An environmental aspect is an element of your activities, products or services that interacts with the environment, such as the discharge of washing water. The impact is the resulting change to the environment, here pollution of the receiving water. The analysis covers aspects you control and those you can influence, in normal, abnormal (start-up, shutdown, maintenance) and emergency conditions, and identifies the significant ones.

A generic example for an export food plant in Morocco (illustrative, no real data):

Significance is decided with written criteria applied the same way to every line: severity, frequency or likelihood, sensitivity of the surroundings (river, aquifer, nearby housing), legal requirements, interested party expectations. We treat any aspect linked to a legal requirement as significant.

The life cycle perspective, which the 2026 edition clarifies in Annex A, starts by looking beyond the factory fence: what you buy, how products are packed and shipped, what happens to them after use. For exporters of packaging or packed goods to the European Union, this connects directly with the EU packaging regulation, applicable since 12 August 2026; see our PPWR packaging page.

Which environmental compliance obligations apply in Morocco?

Those that actually apply to your site: laws and regulations, permits and their conditions, customer requirements and voluntary commitments. The texts below are the ones we could read, or found listed, on official Moroccan government websites. The table is not exhaustive and is not a substitute for a site-specific legal review. Outside Morocco, the same method applies to your national legislation.

For Law 28-00 we read the Arabic text consolidated to 30 August 2012 on the Ministry of Justice’s Adala portal; the summary above is our own translation, and only the Official Bulletin is authoritative.

As of 6 November 2026, the Ministry’s environmental assessment page (in French) cites Law 49-17 but still lists only the implementing texts of Law 12-03, including Decrees 2-04-563 and 2-04-564 of 2008: the text that applies to a project is therefore checked case by case with the environmental authorities.

For discharges to water and air, the two decrees listed by the Ministry state most of what a site must be able to prove:

• water: Decree 2-04-553 (in French), adopted under the former water law 10-95 and listed by the Ministry with Law 36-15, makes any discharge into surface or ground water subject to an authorisation from the director of the river basin agency, after a public inquiry. The authorisation sets the location, the duration (twenty years at most), sampling and analysis by an approved laboratory, and the discharge limit values; industrial waste water discharges are subject to a fee based on the pollution discharged;
• air: Decree 2-09-631 (in French), implementing Law 13-03, prohibits any stationary installation from exceeding the general emission limit values it sets, or the sector values set by order. Inspectors measure emissions periodically or without notice; a notified exceedance leaves six months at most to comply, except in cases of serious pollution. The operator may self-monitor, with a system validated by the authorities and a register sent in every year.

These texts refer to limit-value orders, general or sector-specific: the site’s legal register must cite the ones that apply to it.

Evaluating compliance, not just listing it

For every obligation, a useful register says what it requires on your site, who owns it, what evidence proves it and how often you check. For hazardous waste the evidence is simple to ask for and often missing: the collector’s current licence, signed tracking forms, the quantities register, the annual report. A gap the company finds itself, with a dated action plan, holds up well at audit; the same gap found by the auditor or an environmental inspector does not. Buyers auditing a Moroccan supplier can ask for exactly these documents.

Operational control and emergencies

Operational control turns the analysis into shop-floor instructions: how a chemical is unloaded, where each waste goes, what is required of a contractor. An unlicensed waste collector moves the risk back onto your company. For emergencies you need scenarios drawn from the analysis (spill, fire, refrigerant leak), checked equipment, drills and a written lessons-learned report.

Internal audit and certification audit

Internal auditors should be able to follow a waste stream from where it is produced to where it is disposed of. The certification audit has two stages: stage 1 checks the system is ready, stage 2 checks it works in practice. The certificate then runs for a three-year cycle with annual surveillance audits. The consultant can support your team, but never audits.

Stage 1 readiness checklist

• Scope defined and justified, sites and activities included.
  
• Environmental policy signed, measurable objectives and action plans.
  
• Aspects and impacts analysis up to date, written significance criteria.
  
• Compliance obligations turned into concrete site requirements.
  
• One evaluation of compliance completed, gaps closed or scheduled.
  
• Waste contractor licences checked, tracking forms and register kept.
  
• Operating instructions known by the operators concerned.
  
• At least one emergency drill completed and reviewed.
  
• One full internal audit cycle completed by trained auditors.
  
• Management review held, mock audit completed, major gaps closed.
  

How do you integrate ISO 14001 with ISO 9001 and ISO 45001?

By building one system, not three. ISO 14001:2026, ISO 9001:2026 and ISO 45001:2018 share the same clause logic. An integrated QHSE management system relies on one process map, shared document control, one audit programme, one management review and often a combined audit.

For a site certified to the 2015 editions of ISO 9001 and ISO 14001, combine both transitions in one audit before 30 April 2029. Each standard keeps its own requirements: an aspects analysis does not come out of a quality process map. See our ISO 9001 certification page, the integrated approach on QHSE and ISO systems, and our outsourced QHSE service if you have no full-time QHSE manager.

How does ISO 14001 connect with ESG and export customer requirements?

ISO 14001 structures the environmental data customers and lenders ask for: energy, water, waste, discharges, incidents, compliance. It does not replace ESG reporting, a lender’s environmental and social performance requirements such as the EBRD’s, or a carbon footprint, which each have their own rules. ACG, an EBRD-accredited firm, links these approaches so the same data is not collected twice; see ESG and CSR.

How do you choose an ISO 14001 certification body?

Choose a body that is accredited, independent of your consultant and competent in your sector; price comes after. In Morocco, the Ministry of Industry and Trade publishes, on its online documents page, lists of management system certification bodies accredited to NM ISO/IEC 17021-1, dated 2020 and 2021. For a body accredited abroad, check the accreditation body named on the certificate and whether it signs the Global ACI arrangement.

As of 6 November 2026, the most recent of these lists is the version of 1 June 2021 (in French): check directly with the body, accreditation certificate in hand, that it is still accredited for ISO 14001 in your sector.

Ask your certification body in writing whether its accreditation has moved to ISO 14001:2026 and at which audit it plans your transition. A certification body does not advise and a consultant does not audit: we prepare your system for any accredited body.

Can the project be funded in Morocco?

Consulting fees and the certification audit are paid by the company. In Morocco, training linked to the project may be partly reimbursed through the OFPPT special training contracts (CSF), with GIAC support for training engineering, under the rules in force and within ceilings based on the vocational training tax the company has declared. We never promise an amount: we run a simulation on your actual situation. Details on our CSF and OFPPT funding page, and our courses in the ISO standards training domain.

These rules come from the CSF procedures manual of May 2006, amended by amendment No. 2 of 2 June 2014, and the GIAC procedures manual of March 2003 and its 2014 amendment (all in French). CSF rates apply to the cost excluding VAT and to in-person training only; GIAC support is capped at 100,000 DH per year per company. Points specific to your file are confirmed with OFPPT, on its CSF page, or with the competent GIAC.

How do you keep the certificate after the audit?

By running the system between audits. A system that only runs for the audit shows quickly: an aspects register never updated after an extension, a frozen legal register, missing waste tracking forms, a drill postponed year after year. Maintenance rests on five routines: regulatory watch with periodic evaluation of compliance, an aspects update at every planned change, internal audits focused on significant aspects, reviewed emergency drills, and a management review that takes decisions. ACG can take on all or part of this, including outsourced internal audits; see audits and inspections.