EMS EMS Documentation & Records Management 2 — Questions and Answers
Question 1: An EMS auditor reviewing legal compliance records notices that the organization has not updated its legal register for 14 months. What is the most appropriate audit finding?
- Nonconformity, because the legal register must be kept current to reflect applicable obligations (Correct answer)
- Observation only, because annual updates are acceptable under ISO 14001
- Major nonconformity only if a regulation was actually violated during that period
- No finding, because record frequency is not specified in ISO 14001
Correct answer: Nonconformity, because the legal register must be kept current to reflect applicable obligations
Failure to maintain a current register of legal and other requirements is a nonconformity against clause 6.1.3, which requires identifying and maintaining access to applicable obligations.
Question 2: Which of the following best describes the purpose of retaining records of environmental monitoring and measurement results?
- To provide objective evidence that the organization is controlling and improving its significant environmental aspects (Correct answer)
- To satisfy insurance company documentation requirements
- To support employee performance evaluations
- To generate data for annual shareholder reports
Correct answer: To provide objective evidence that the organization is controlling and improving its significant environmental aspects
Environmental monitoring records provide objective evidence that significant aspects are being managed and that environmental performance trends can be analyzed for improvement.
Question 3: An internal auditor asks to see records demonstrating that all employees with significant environmental responsibilities have received the required training. What specific type of documented information is being requested?
- Competence records such as training completion certificates, attendance logs, or qualification records (Correct answer)
- Job descriptions listing environmental responsibilities
- The training program curriculum outline
- The organizational chart showing reporting lines
Correct answer: Competence records such as training completion certificates, attendance logs, or qualification records
ISO 14001 clause 7.2 requires retaining documented information as evidence of competence, which includes actual records that individuals completed the required training.
Question 4: In what way does proper records management support an organization during an external regulatory inspection in the US?
- It provides readily accessible evidence of compliance with environmental regulations such as EPA requirements, reducing liability risk (Correct answer)
- It allows the organization to claim all records are confidential
- It enables the organization to delay inspections by citing incomplete records
- It substitutes for actual environmental performance data
Correct answer: It provides readily accessible evidence of compliance with environmental regulations such as EPA requirements, reducing liability risk
Well-maintained compliance records demonstrate due diligence to US regulators such as the EPA and can significantly reduce liability in enforcement situations.
Question 5: What must an organization define when establishing its document control process for EMS records?
- Retention periods, storage location, access controls, and method of disposal (Correct answer)
- The exact font and format for all documents
- The marketing department's approval for all environmental communications
- The number of paper copies required for each record type
Correct answer: Retention periods, storage location, access controls, and method of disposal
A complete document control process for records must address how long records are kept, where they are stored, who can access them, and how they are disposed of at end of retention.
Question 6: An organization uses an electronic document management system for its EMS records. What must the system ensure to satisfy ISO 14001 requirements?
- Records must be legible, identifiable, retrievable, and protected from damage or loss (Correct answer)
- All records must be printed and physically signed
- Electronic records must be approved by the ISO certification body
- The system must be cloud-based and accessible from any location
Correct answer: Records must be legible, identifiable, retrievable, and protected from damage or loss
ISO 14001 clause 7.5.3 requires documented information to be legible, identifiable, retrievable, and protected, regardless of whether it is stored electronically or in paper form.
An EMS auditor reviewing legal compliance records notices that the organization has not updated its legal register for 14 months.
What is the most appropriate audit finding?