Environmental audit evidence should show what the organisation controls, what it measures and how it acts when results or obligations are not met.

01

Follow one environmental control through its records

For a hypothetical waste stream, connect its source, classification, storage controls, authorised collection arrangements and transfer evidence as applicable. Match locations, quantities, dates and responsibilities. A contractor invoice alone may not explain whether the waste went through the required route. Use a similar trace for water, emissions or resource controls relevant to your scope.

02

Evaluate results and close gaps

Keep the applicable obligation, monitoring method, result and compliance evaluation together. Distinguish an expired permission, a missing measurement and a result outside the applicable limit; they need different actions. Track containment, cause, corrective action and effectiveness, including emergency lessons where relevant. Internal evaluation and management review should discuss actual gaps, not only the number of documents issued.

03

Plan cost and verify the correct certificate

Monitoring, permits, operational improvements and waste services are separate from independent audit fees. Compare initial audit, surveillance, recertification, travel and additional work with site and activity assumptions. Read the issued certificate’s entity, activities, sites, edition and status and verify the issuer’s claimed accreditation. The 2026 publication does not prove that every issuer is approved for it. The certificate does not replace legal permissions or guarantee zero pollution.

04

Preparation and independent decision

ISO does not issue certificates. Verify the proposed issuer, standard and activity against any claimed accreditation scope. Consultancy cannot guarantee approval; the competent body evaluates evidence and makes the independent decision. The applicant implements the system and prepares procedures specific to its own operations and operating records. A certification enquiry to Kayra concerns actual activities, sites, application information, authority and impartiality risks; this role does not include designing or implementing the client’s system. A management-system certification body, other parts of the same legal entity and controlled entities cannot offer or provide management-system consultancy; separate contracts do not remove this restriction.

Sources and application limits

Examples are possible record checks, not a customer event. Preparation duration depends on operational controls and evidence gaps, while the competent body sets its independent audit and decision process.