企业通过了环境管理体系ISO14001认证

一、ISO14000系列标准是由国际标准化组织制订的环境管理体系标准。是针对全球性的环境污染和生态破坏越来越严重，臭氧层破坏、全球气候变暖、生物多样性的消失等重大环境问题威胁着人类未来的生存和发展，顺应国际环境保护的发展，依据国际经济贸易发展的需要而制定的。

ISO14000是ISO推出的第二个管理性系列标准。为使用者（企业、事业、政府）提供了综合管理包括质量管理等体系兼容并蓄的环境管理的依据，规定了环境管理的共同语言和准则的要求。

ISO14000是一个环境管理系列标准，共有100个标准号。ISO从1996年以来，已正式颁布六个标准，分别是：

ISO14001-环境管理体系-规范及使用指南

ISO14004-环境管理体系-原理、体系和支撑技术通用指南

ISO14010-环境审核指南-通用指南

ISO14011-环境管理审核-审核程式-环境管理体系审核

ISO14012-环境管理审核指南-环境管理审核员的资格要求

ISO14040-生命周期评估-原则和框架

其中ISO14001环境管理体系标准：包括环境因素识别、重要环境因素评价与控制，适用环境法律、法规的识别、获取和遵循，环境方针和目标的制定和实施，以期达到污染预防、节能降耗、提高资源利用率，最终达到环境绩效的持续改进的目的。

ISO14001认证适用于任何有下列愿望的组织：

a)建立、实施、保持并改进环境管理体系；

b)使自己确信能符合所声明的环境方针；

c)通过下列方式展示对本标准的符合；

1）进行自我评价和自我声明；

2）寻求组织的相关方（如顾客）对其符合性予以确认；

3）寻求外部对它的自我声明予以确认；

4）寻求外部组织对其环境管理进行认证/注册。

ISO/DIS22000：2017已发布，比起旧版有何变化

ISO/DIS22000采取了HSL高级结构，可以跟ISO9001更好的融合。另外新增了以下条款：

4.1理解组织及其环境

4.2理解相关方的需求和期望

6.1应对风险和机遇的措施

7.1.5外部开发食品安全管理体系要素的控制

7.1.6外部提供过程、产品和服务的控制

8.4.2紧急情况和事故的处理

9食品安全管理体系绩效评价

9.1.1总则

10.1不符合和纠正措施

二、标准主要变化点

1.很好的体现PDCA循环

分两个层次来理解PDCA，一个是体系的PDCA，包括体系策划、体系运行、体系检查和体系改进。“体系”本身是需要被管理的对象，管理“体系”比管理一个“过程”更为复杂。需要认清体系的作用（全员理解），给予体系明确的定位（需要领导明示），需要结合公司内外环境合理策划（量体裁衣），需要领导强有力的介入（实际参与PDCA各环节），需要各要素被合理策划和有效执行（过程管理和人员的能力），需要对过程和体系绩效进行评价（数据分析）和不断改进。不管什么体系，我们时常说体系很重要，但体系有效性很难显现，从ISO9001新版改版，我们也可以看到在如何提高体系有效性方面，标准制定者所作出的思考，可所谓用心良苦，但从实践的角度，管理好“体系”根本就不容易，任重而道远。此时此刻，我想到的是胡适先生说过的一句话：多谈点问题，少谈点主义。推动体系改进的过程中，是不是我们也应多研究点过程，少研究点体系呢？

另一个层面是危害控制的PDCA，主要体现在第八章节。新版的危害控制基本上保留旧版的预防控制理念，核心仍然是前提方案+危害控制措施（HACCP计划/OPRP方案）的基本组合，但是新版经过条款的调整，将旧版中措施的确认和体系的验证加以拆分，将控制措施的确认放在前面，措施实施后有效性验证放在后面，这样总体逻辑更清晰（确认和验证是两个不同的概念，一前一后），也更好的将危害控制的PDCA和体系的PDCA区分开来（大环套小环）。

2.很好的体现风险管理思维

新版标准引言0.3.3保留了ISO9001提出的基于风险的思维，并将风险分成两个层级，一是组织层面的风险管理，另一是食品安全危害控制。

1）组织的风险管理其实是未来所有管理体系都要考虑的一个方向，风险具体表现为战略选择错误，错过发展机会；组织结构设计不合理，机构臃肿，效率底下；资源配置不足；没有考虑到相关方的要求导致合作关系不紧密；人员能力不匹配；制度设计不合理；管理工具选择错误；法规考虑不充分，导致违规等等，总结为系统性风险（经营性风险）和过程性风险（部门职能层面）管理这些风险所选用的工具则是多方面的。

2）食品安全危害控制

而食品安全危害则是指引起食品安全问题的生物、化学和物理性危害，风险则表现为危害发生的概率和潜在后果的综合考量。控制这一层面的风险是食品安全管理体系的主要任务，风险管理基本遵循的是HACCP原则（第八章节）。

Why do enterprises need to do environmental management system ISO14001 certification

1. The ISO14000 series standards are environmental management system standards established by the International Organization for Standardization. They address the increasingly severe global environmental pollution and ecological destruction, as well as major environmental issues such as ozone layer depletion, global warming, and the disappearance of biodiversity, which threaten human survival and development in the future. These standards are formulated in response to international environmental protection developments and according to the needs of international economic and trade development.

ISO14000 is the second management series standard introduced by ISO providing users (enterprises, institutions, government) with a comprehensive basis for environmental management that encompasses systems such as quality management and stipulates the common language and criteria requirements for environmental management.

ISO14000 is a series of environmental management standards with 100 standard numbers. Since 1996, ISO has officially promulgated six standards, which are:

ISO14001 Environmental management system-specifications and guidelines for use

ISO14004 General guidelines on principles, systems and supporting technologies for environmental management systems

ISO14010-Environmental audit guidelines-general guidelines

ISO14011-Environmental management audit-audit procedure-environmental management system audit

ISO14012 Environmental Management Audit Guide-Qualification requirements for environmental management auditors

ISO14040 Life cycle assessment-principles and framework

The ISO14001 environmental management system standard: includes the identification of environmental factors, evaluation and control of important environmental factors, identification, acquisition and compliance with applicable environmental laws and regulations, the formulation and implementation of environmental policies and objectives, in order to achieve pollution prevention, energy conservation and consumption reduction, improve resource utilization, and ultimately achieve continuous improvement of environmental performance.

ISO14001 certification is applicable to any organization with one of the following wishes:

a) Establish, implement, maintain and improve the environmental management system;

b) To be convinced that they are in compliance with the environmental policy declared;

c) Show compliance with this standard by the following means;

1) Self-evaluation and self-declaration;

2) Seek confirmation of its compliance from relevant parties of the organization (such as customers);

3) Seeking external confirmation of its self-declaration;

4) Seek external organization certification/registration for its environmental management.

ISO/DIS22000:2017 has been released. What are the changes compared to the old version?

The ISO/DIS22000 has adopted the HSL advanced structure, which can be better integrated with ISO9001. In addition, the following clauses have been added:

4.1 Understand the organization and its environment

4.2 Understand the needs and expectations of stakeholders

6.1 Measures to deal with risks and opportunities

7.1.5 Control of elements of external development of food safety management system

7.1.6 Control over external provision of processes, products and services

8.4.2 Handling of emergencies and accidents

9 Performance evaluation of food safety management system

9.1.1 General provisions

10.1 Nonconformities and corrective actions

2. Main changes in the standard

1. It is a good representation of the PDCA cycle

Understanding PDCA at two levels: one is the PDCA of the system, which includes system planning, system operation, system inspection, and system improvement. The "system" itself is an object that needs to be managed, managing a "system" is more complex than managing a "process." It is necessary to recognize the role of the system (understanding by all employees), provide a clear positioning for the system (requiring leadership guidance), reasonably plan according to the internal and external environment of the company (tailoring measures), require strong leadership involvement (actual participation in all aspects of PDCA), require reasonable planning and effective execution of elements (process management and personnel capabilities), and require evaluation of process and system performance (data analysis) and continuous improvement. Regardless of what system it is, we often say that the system is important, but its effectiveness is difficult to demonstrate. From the new ISO9001 revisions, we can see the considerations made by standard setters on how to improve system effectiveness, which is commendable. However, from a practical perspective, managing a "system" is not easy and is a long and arduous journey. At this moment, I am reminded of a quote by Mr.Hu Shi: talk more about issues, less about doctrines. In the process of promoting system improvement, should we also focus more on processes and less on systems?

Another level is the PDCA for hazard control, primarily reflected in Chapter Eight. The new version of hazard control largely retains the preventive control philosophy of the old version, with the core still being the basic combination of prerequisite plans + hazard control measures (HACCP plan/OPRP plan). However, after adjusting the clauses, the new version separates the confirmation of measures and the validation of the system from the old version, placing the confirmation of control measures at the front and the effectiveness verification after implementation, making the overall logic clearer (confirmation and validation are two different concepts, one before the other). This better distinguishes the PDCA for hazard control from the PDCA for the system (a larger loop enclosing a smaller loop).

. It reflects the risk management thinking very well

The new version of the standard retains the ISO9001s risk-based thinking and divides risks into two levels: one is organizational level risk management, and the other is food safety hazard control.

1) Organizational risk management is actually a direction that all future management systems must consider, risks are specifically manifested as incorrect strategic choices, missing development opportunities; unreasonable organizational structure design, bloated institutions, low efficiency; insufficient resource allocation; failure to consider stakeholders requirements leading to loose cooperation; mismatched personnel capabilities; unreasonable system design; incorrect choice of management tools; inadequate consideration of regulations leading to violations, etc., summarized as systemic risks (operational risks) and process risks (at the departmental function level). The tools selected to manage these risks are multifaceted.

2) Food safety hazard control

And food safety hazards refer to the biological chemical and physical hazards that cause food safety issues the risk is characterized by a comprehensive consideration of the probability of occurrence and potential consequences. Controlling this level of risk is the primary task of the food safety management system and risk management generally follows the HACCP principle (Chapter 8).