ISO 14001 certification, first time round

A customer wants ISO 14001 and you don't have the certificate. Here is what the standard actually asks for, how certification works, and what sets the timeline and the bill.

Why the requirement shows up

Rarely because management woke up wanting an environmental management system. Usually because a contract, tender or big customer says so.

Certification is voluntary. But for a supplier, a certificate from an accredited body is the standard way to prove environmental work is systematic, not just a policy on the intranet.

ISO 14001:2015 or 2026?

ISO published ISO 14001:2026 on 15 April 2026. The structure is unchanged from 2015, but requirements on climate, life cycle thinking, change management and leadership are sharper.

Certification bodies need accreditation for the new edition before they can issue accredited 2026 certificates. From 31 October 2027, new certificates can only be issued against the 2026 edition, and every 2015 certificate must be transitioned by 30 April 2029.

So build to 2026, and ask your certification body which edition they can audit against when you are ready. A 2015 certificate today means a transition before 2029 anyway.

What ISO 14001 requires

The standard doesn't demand a specific environmental result. It demands a management system: know your impact, set objectives, follow up, improve. The requirements sit in clauses 4 to 10.

  • Context: who has a stake in your environmental work, and what the system covers.
  • Leadership: an environmental policy, clear roles and management that actually owns it.
  • Planning: environmental aspects, legal and other obligations, risks and opportunities, objectives and a plan to reach them.
  • Support: competence, awareness, communication and documented information.
  • Operation: control of activities that affect the environment, including in the value chain, and emergency preparedness.
  • Performance evaluation: monitoring, checking legal compliance, internal audit and management review.
  • Improvement: nonconformities, corrective action and continual improvement.

How certification works

You pick a certification body accredited for ISO 14001. In Norway, Norsk akkreditering (Norwegian Accreditation) accredits these bodies and oversees how they audit. The list of accredited bodies is on akkreditert.no.

  • Stage 1: the auditor reviews documentation and scope and checks you are ready for the main audit, including that internal audits are done.
  • Stage 2: the certification audit. The auditor checks the system is actually in use, through interviews, samples and a site visit.
  • Findings closed: nonconformities from the audit must be dealt with before the certificate is issued.
  • Certificate: valid for three years.
  • Surveillance audit: normally once a year.
  • Recertification: a new full audit before the three years run out.

Ready is not the same as certified

Ready means the system is in place, has run for a while and has been tested through an internal audit and a management review. Certified means an accredited certification body has audited you and issued the certificate.

No consultant or software skips that last step. Also check that the certification body is accredited for ISO 14001. That is usually what the customer means when they ask for a certificate.

How long it takes and what it costs

Kiwa quotes 4 to 6 months from contract to certificate, assuming the system is already implemented. Building it comes first. For a consultant-led project, we estimate 6 to 12 months in total.

Cost comes from your own time, any consultant, and the audit. Audit time follows international guidelines based on headcount within scope and how complex your environmental impact is.

For 20 to 200 employees at medium complexity, the starting point is roughly 4.5 to 10 auditor days for stage 1 and 2. Surveillance audits take about a third of that each year. The consultant is often the biggest line: our estimate for a typical project is around NOK 1 million.

How to get started

  • Pin down the requirement: standard, scope and deadline in the contract or tender.
  • Buy the standard from Standard Norge and read clauses 4 to 10.
  • Run a gap analysis: what do you have, and what is missing?
  • Set objectives and build an action plan with owners and deadlines.
  • Run the system, then do an internal audit and a management review.
  • Ask two or three accredited certification bodies for quotes early. Ask how many auditor days they plan and which edition they audit against.

Where Vyve fits

You upload what you already have: HSE policy, procedures, nonconformities, annual report. Vyve produces a gap analysis against the ISO 14001 clauses, objectives with KPIs, an action plan with owners and deadlines, and traceable documentation. Those are the steps above that usually eat the most time.

The plan stays live in the platform instead of becoming a PDF in a drawer. We estimate 90 percent less time on gap analysis, strategy, processes and documentation. The audit takes as long as it always did.

Vyve does not certify. An accredited certification body does. We build the plan, you carry it out, and the same data also gives you the VSME report if your customer asks for sustainability data.

Frequently asked questions

How much does ISO 14001 certification cost?

It depends on size, complexity and what you already have. You pay in own time, any consultant, and the audit, priced by auditor days. Get several quotes, and budget for annual surveillance audits.

How long does it take to get ISO 14001 certified?

Once the system is in place, typically 4 to 6 months from contract to certificate. Including building the system, 6 to 12 months is a realistic range for a first certification.

Is ISO 14001 mandatory?

No, certification is voluntary. In practice it becomes a requirement when a customer, contract or tender makes it one.

Should we certify to ISO 14001:2015 or 2026?

Build to 2026. From 31 October 2027, new accredited certificates are only issued against 2026, and 2015 certificates must transition by 30 April 2029.

Who can certify us in Norway?

A certification body accredited for ISO 14001. Norsk akkreditering publishes the list, which includes DNV, Kiwa, Nemko and Norsk Sertifisering among others.

How often are we audited after certification?

Normally one surveillance audit a year, and a full recertification every three years.

Want to see how it's done?

Book a demo and we'll walk through it on your own documents.

Book a demo

Sources

Other reasons your phone is ringing

Magnet JQS: the supplier profile that decides who gets invited

Operators find suppliers in Magnet JQS. If the environmental part of your profile is thin, you do not get asked.

Transitioning to ISO 14001:2026

ISO 14001:2026 was published in April 2026. What changed, and how to transition before the 30 April 2029 deadline.

Your customer wants a VSME report. Now what?

A customer wants a VSME report: what the basic module covers, what they can demand, and how to deliver in weeks.

Your bank asks about climate targets. Here is why, and what to answer.

Banks must now assess climate risk when they lend. Here is what they ask, and how to have the answers ready.

Energy audits in Norway: who needs one, and what it takes

Using 2.5 GWh or more a year? Norwegian law requires an energy audit, reported to Enova by 1 October 2026.