National Security Inspectorate Sentinel House, 5 Reform Road, Maidenhead, SL6 8BY E: nsi@nsi.org.uk | W: nsi.org.uk Page 1 of 2 © NSI 2024 Date: 22nd October 2024 To: All NSI Gold approved companies and applicants TECHNICAL BULLETIN No: 0067 Amendment to BS EN ISO 9001:2015, ISO 14001:2015, ISO 45001:2023, BS EN ISO 27001:2023 – Climate action changes The following standards have recently been amended by Amendment 1, and adopted as UK standards effective September 2024: BS EN ISO 9001:2015 BS EN ISO 14001:2015 BS EN ISO 45001:2023 BS EN ISO 27001:2023 These amendments incorporate climate change considerations into the management system standards, aligning with ISO’s London Declaration. Details of the changes The clauses overleaf have been updated to address climate change considerations. These updates apply to BS EN ISO 9001:2015, BS EN ISO 14001:2015, BS EN ISO 45001:2023 and BS EN ISO 27001:2023 Note: We have included BS EN ISO27001:2023. However, this is for reference only as there is currently no NSI approval scheme for this. For ISO 45001, this amendment is particularly important as it may affect health and safety conditions due to changing environmental factors such as extreme weather, affecting work environments, or safety protocols. Each standard can be identified by _ A1+2024 in the title and is available via the Standards on Subscription Service. The new requirements will form part of your ISO management system audit with immediate effect. Technical Bulletin No: 0067 Page 2 of 2 © NSI 2024 Clause 4.1 – Understanding the Organization and its Context The organization must determine whether climate change is a relevant issue for its operations. This ensures that the internal and external context includes climate-related factors that could influence the organization’s strategic direction and ability to achieve intended results. For example, this could include: Documentation or records of climate risk assessments that outline potential impacts on resources, supply chains, and operations. • Minutes from management meetings where climate change issues were discussed. • Updates to strategic plans that reflect climate-related risks and opportunities. • Evidence that climate change considerations have been incorporated into the organization’s environmental scanning processes Clause 4.2 – Understanding the Needs and Expectations of Interested Parties Relevant interested parties, such as customers, suppliers, and regulatory bodies, may have climate- related requirements. Organizations must consider these requirements and incorporate them into their management system where applicable. For example, this could include: • A stakeholder or interested party analysis that includes climate-related requirements. • Correspondence or engagement with key stakeholders (e.g., customers, suppliers, regulators) about climate-related expectations. • Modifications to contractual requirements or compliance obligations related to climate change. • Evidence that climate-related risks and opportunities have been incorporated into the risk management processes.