Chapter 8: Management Review, Internal Audit, and Continual Improvement

Internal Audit, Management Review, and Continual Improvement in the EMS

An ISO 14001 environmental management system only delivers sustained value when the organization systematically evaluates its own performance, reviews results at the highest levels of leadership, and commits to ongoing improvement. Clauses 9.2, 9.3, and 10 of ISO 14001:2015 establish the requirements for internal audits, management reviews, and the improvement cycle that prevents an EMS from becoming static documentation.

For Ontario manufacturing operations, these requirements are not abstract exercises. They determine whether the environmental management system catches problems before regulators do, whether leadership remains engaged with environmental performance, and whether the organization achieves genuine reductions in its environmental footprint rather than maintaining the status quo.

Lakeshore Environmental Technologies, the Sarnia-Lambton plastics recycling facility, runs a mature audit and review cycle that has evolved over several years. The lessons from that evolution illustrate both the common pitfalls and the practices that distinguish effective programs from compliance-only approaches.

Clause 9.2: The Internal Audit Program

Purpose and Scope of EMS Audits

The internal audit required by Clause 9.2 serves two distinct purposes. First, it determines whether the environmental management system conforms to the organization's own planned arrangements and to the requirements of ISO 14001. Second, it determines whether the EMS has been effectively implemented and maintained. These are different questions. An organization can have a well-documented system that looks good on paper but fails in practice because procedures are not followed, records are not maintained, or operational controls are not effective.

For a plastics recycling facility in Ontario, the audit program must cover the full scope of the EMS, including environmental policy and objectives, legal compliance obligations and their evaluation, operational controls for significant environmental aspects, emergency preparedness and response, monitoring and measurement programs, documented information and record-keeping, competence and awareness programs, and communication processes.

Planning the Audit Program

ISO 14001 requires that the audit program take into account the environmental importance of the processes concerned, changes affecting the organization, and the results of previous audits. This means that not every process receives equal audit attention every year. A risk-based approach allocates more audit time to areas with higher environmental significance, a history of nonconformities, or recent changes.

Lakeshore Environmental Technologies uses an annual audit plan that divides the EMS into twelve audit modules. Each module covers a related group of clauses and associated operational areas. The frequency and depth of each module is adjusted based on a scoring matrix that considers the environmental significance of the processes covered, previous audit findings (areas with recurring issues get more frequent audits), regulatory sensitivity (processes subject to permit conditions receive priority), and recent changes (new equipment, modified processes, or changed regulations trigger additional audit coverage).

The audit plan is approved by the environmental management representative and reviewed at each management review meeting. When significant changes occur mid-year, such as a new Environmental Compliance Approval condition or a process modification, the audit plan is updated accordingly.

Auditor Competence and Independence

ISO 14001 requires that auditors are competent and that the audit process ensures objectivity and impartiality. This means that auditors should not audit their own work. For small and mid-sized manufacturers, this can present a challenge because the environmental team may be small.

Lakeshore addresses this through a combination of approaches. Internal auditors are trained through a recognized lead auditor course (typically a two-day or three-day program accredited by a body registered with the Standards Council of Canada). Auditors do not audit processes for which they have direct operational responsibility. The facility maintains a pool of six trained auditors drawn from different departments, including quality, maintenance, operations, and health and safety. Audit teams are rotated annually to bring fresh perspectives and prevent familiarity bias.

Building audit competence takes time. Lakeshore started with two trained auditors and expanded the pool gradually by having new auditors shadow experienced ones before leading audits independently. Each auditor conducts a minimum of two audits per year to maintain proficiency.

Conducting Effective Audits

The audit process follows the standard Plan-Do-Check-Act cycle. Planning involves reviewing previous audit reports, the relevant procedures and records, and any recent changes. Execution involves on-site observation, interviews with personnel at all levels, and review of documented information. Reporting involves documenting findings, classifying them as conformities, opportunities for improvement, or nonconformities, and communicating results to the audited area's management.

The most common mistake in EMS auditing is focusing exclusively on documentation. Effective auditors spend most of their time on the shop floor, observing actual practices, interviewing operators, and verifying that what happens in practice matches what the documented procedures describe. Lakeshore's auditors follow a 70-30 rule: approximately 70 percent of audit time is spent on the floor and in interviews, and 30 percent on document and record review.

Effective audit questions focus on understanding rather than compliance. Instead of asking "Do you have a procedure for this?", a skilled auditor asks "Walk me through how you handle this situation" and then compares the response to the documented procedure and the standard's requirements.

Common Audit Findings for Ontario Manufacturers

Based on the audit experience at Lakeshore and the broader patterns observed across Ontario manufacturing facilities, several categories of findings recur frequently.

Incomplete compliance evaluation records. Organizations often evaluate compliance informally but fail to document the evaluation process and results as required by Clause 9.1.2. The compliance register may exist, but evidence that each obligation has been systematically evaluated is missing or incomplete.

Monitoring data collected but not analyzed. Facilities collect environmental data diligently but do not conduct the trend analysis and evaluation required by Clause 9.1.1. Raw data sits in spreadsheets without being transformed into actionable information.

Training records not linked to competence requirements. Personnel have attended environmental training, but the organization cannot demonstrate that the training addressed the specific competence requirements identified under Clause 7.2. Training logs exist, but the connection between identified needs and delivered training is not documented.

Emergency drills not conducted at required frequency. Emergency preparedness plans exist, but scheduled drills have been delayed or canceled without rescheduling. When drills are conducted, the results are not always reviewed and lessons learned are not incorporated into plan updates.

Operational controls not updated after process changes. When equipment is modified or processes change, the associated environmental procedures and controls are not always updated promptly. This creates gaps between the documented system and actual practice.

Environmental objectives stagnant. Organizations set environmental objectives during initial certification but do not update them when targets are achieved or when circumstances change. The objectives become irrelevant to current operations.

Clause 9.3: Management Review

Purpose and Inputs

Management review is the mechanism through which top management maintains its engagement with the environmental management system. Clause 9.3 requires management review at planned intervals, and it specifies the minimum inputs that must be considered.

The required inputs include the status of actions from previous management reviews, changes in external and internal issues relevant to the EMS, information on environmental performance including trends in nonconformities and corrective actions, monitoring and measurement results, compliance evaluation results, audit results, and the adequacy of resources. The review must also consider the effectiveness of actions taken to address risks and opportunities, communications from external interested parties including complaints, and opportunities for continual improvement.

Running an Effective Management Review

Lakeshore Environmental Technologies conducts formal management reviews quarterly, with an expanded annual review that covers all required inputs comprehensively. The quarterly reviews focus on the most dynamic elements: monitoring trends, compliance status, audit findings, and progress against environmental objectives.

The key to an effective management review is preparation. The environmental coordinator compiles a management review package at least one week before the meeting. This package includes a dashboard summarizing key environmental KPIs with trend charts, a compliance status summary with any exceedances or near-misses flagged, a summary of internal and external audit findings with corrective action status, progress against each environmental objective with traffic-light status indicators, a summary of environmental incidents and near-misses since the last review, any relevant regulatory changes or stakeholder communications, and resource requirements for the upcoming period.

The review is chaired by the general manager and attended by department heads, the environmental coordinator, and the health and safety manager. Minutes are recorded with specific action items, responsibilities, and deadlines.

Management Review Outputs

Clause 9.3 requires that management review outputs include conclusions on the continuing suitability, adequacy, and effectiveness of the environmental management system, decisions related to continual improvement opportunities, decisions related to any need for changes to the EMS including resources, and actions needed when environmental objectives have not been achieved.

Lakeshore's management review minutes consistently address each of these outputs. The facility found that the most valuable output is not the formal conclusion about system adequacy but the specific decisions about resource allocation, objective revision, and strategic direction. For example, a management review identified that the facility's water recycling rate had plateaued, and the general manager authorized a capital investment in advanced filtration that increased the recycling rate from 85 percent to 91 percent over the following year.

Common Management Review Shortcomings

Several patterns undermine the effectiveness of management reviews in Ontario manufacturing facilities.

Reviews conducted but decisions not implemented. Management reviews generate action items, but follow-up is inconsistent. By the next review, the same items reappear because nothing was done.

Insufficient data quality. The review relies on outdated or incomplete information because the monitoring program does not produce timely reports. Decisions made on poor data are rarely effective.

Top management absent or disengaged. The review is attended by middle managers who lack the authority to make resource allocation decisions. This violates the intent of Clause 5.1 (leadership and commitment) and reduces the review to an information-sharing session rather than a decision-making forum.

Template-driven reviews that miss the substance. Organizations use the same review template year after year without adapting it to current issues. The review covers all required inputs but does not address the issues that actually matter to environmental performance.

Clause 10.2: Nonconformity and Corrective Action

When monitoring, auditing, or compliance evaluation identifies a nonconformity, Clause 10.2 requires the organization to react to the nonconformity by taking action to control and correct it and dealing with the consequences, evaluate the need for action to eliminate the causes so that it does not recur or occur elsewhere, implement any action needed, review the effectiveness of corrective action taken, and make changes to the EMS if necessary.

The Corrective Action Process at Lakeshore

Lakeshore Environmental Technologies manages environmental nonconformities through the same corrective action system used for quality and health and safety issues. When an environmental nonconformity is identified, whether through an audit finding, a monitoring exceedance, a compliance evaluation gap, or an operational incident, it enters a structured workflow.

The first step is containment: what immediate action is needed to control the situation and prevent further environmental impact. For an effluent exceedance, this might mean diverting flow to a holding tank. For a spill, it means deploying containment materials and notifying the appropriate authorities.

The second step is root cause analysis. Lakeshore uses the "5 Whys" method for straightforward nonconformities and fishbone (Ishikawa) diagrams for more complex issues. The environmental team has found that the most common root causes fall into five categories: inadequate procedures (the procedure did not cover the situation), training gaps (personnel did not understand the requirements), equipment failure (preventive maintenance was not performed or was inadequate), management system gaps (the EMS did not address the risk), and communication failures (relevant information was not communicated to the right people).

The third step is developing and implementing corrective action. Effective corrective action addresses the root cause, not just the symptoms. If an effluent exceedance occurred because the pH monitoring alarm was not calibrated, the corrective action addresses the calibration program, not just the single instrument.

The fourth step is verification of effectiveness. Lakeshore requires that every corrective action be verified within a defined timeframe, typically 30 to 90 days depending on the nature of the nonconformity. Verification involves checking whether the corrective action was implemented as planned and whether the nonconformity has recurred. If the nonconformity recurs, the corrective action is deemed ineffective and the cycle repeats with a deeper investigation.

Trending Nonconformities

Individual nonconformities provide limited insight. Trending reveals patterns. Lakeshore categorizes nonconformities by type, area, root cause category, and clause reference, and reviews trends quarterly during management review. This analysis has revealed systemic issues that individual incident investigations missed.

For example, a trend analysis showed that 40 percent of environmental nonconformities in one year were related to contractor activities. This led to a comprehensive review and strengthening of the contractor environmental management program, including revised induction requirements, enhanced supervision protocols, and more rigorous pre-qualification criteria.

Clause 10.3: Continual Improvement

Clause 10.3 requires the organization to continually improve the suitability, adequacy, and effectiveness of the environmental management system to enhance environmental performance. This is not a vague aspiration; it requires demonstrable improvement over time.

What Continual Improvement Looks Like

For Ontario manufacturers, continual improvement in environmental performance can take many forms. It may involve reducing emissions intensity, decreasing waste generation rates, improving energy efficiency, enhancing compliance performance (fewer exceedances, fewer incidents), reducing the environmental impact of products through design changes, improving the efficiency and effectiveness of the EMS itself, expanding the scope of environmental monitoring and control, and strengthening the organization's ability to respond to environmental emergencies.

Lakeshore Environmental Technologies tracks improvement across multiple dimensions. The facility maintains a rolling three-year improvement plan that identifies specific projects, assigns resources, and sets measurable targets. The plan is reviewed and updated during the annual management review. Examples of completed improvement projects include installation of the closed-loop water treatment system (reducing water consumption by 40 percent), upgrade of the thermal processing line to reduce volatile organic compound emissions, implementation of the energy management program aligned with off-peak electricity usage, introduction of real-time emissions monitoring replacing periodic manual testing, and development of a supplier environmental assessment program for feedstock providers.

Driving Improvement Through the EMS

The ISO 14001 management system provides several mechanisms for driving continual improvement. The Plan-Do-Check-Act cycle built into the standard ensures that performance is monitored and deviations are corrected. Environmental objectives (Clause 6.2) provide targets for improvement. Internal audits (Clause 9.2) identify gaps and opportunities. Management reviews (Clause 9.3) allocate resources and set direction. Corrective actions (Clause 10.2) eliminate the causes of nonconformities.

The key is connecting these mechanisms so that information flows from monitoring to analysis to decision to action and back to monitoring. When these connections are strong, the EMS becomes a self-improving system. When they are weak, the system stagnates despite having all the required elements in place.

The Role of Employee Engagement

Continual improvement depends on the active participation of employees at all levels. Lakeshore operates an environmental suggestion program that encourages all employees to identify opportunities for environmental improvement. Suggestions are reviewed monthly by the environmental team, and viable ideas are incorporated into the improvement plan. The facility recognizes contributors through its internal communication channels, which reinforces the message that environmental performance is a shared responsibility.

Over the past two years, employee suggestions have led to several operational improvements at Lakeshore, including revised handling procedures that reduced plastic pellet loss during transfer operations, a modified cleaning schedule that reduced water usage in the washing stage without affecting product quality, and identification of a recycling outlet for a waste stream that had previously been sent to landfill.

Building an Audit-Ready Culture

The most effective environmental management systems are those where compliance and improvement are embedded in daily operations rather than activated only when an audit approaches. Lakeshore Environmental Technologies has deliberately cultivated what its management calls an "always audit-ready" culture, where environmental performance is managed continuously rather than in bursts of activity before scheduled audits.

This culture is built on several foundations. Procedures are written for the people who use them, not for auditors. Records are maintained in real time, not reconstructed before an audit. Nonconformities are reported promptly because reporting is seen as a positive contribution rather than an admission of failure. Management reviews produce real decisions, not pro forma minutes.

The result is a facility where the surveillance audit conducted annually by the certification body is not a stressful event but a routine external verification of systems that are already working effectively. For Ontario manufacturers operating under tight regulatory scrutiny and growing customer expectations, this level of maturity in the EMS represents a significant competitive advantage.

The final chapter of this series examines how Lakeshore Environmental Technologies integrates its ISO 14001 environmental management system with ISO 9001 quality management and ISO 45001 occupational health and safety to create a unified integrated management system.