EHS Governance in Regulated Sites
The management system for environment, health and safety: policy, accountability, legal registers, objectives, risk assessment, permits, assurance, metrics and improvement. EHS obligations are legal duties enforced by different authorities on different timescales from GxP, and a site can be entirely GMP-compliant while operating an unpermitted discharge. The two systems share rooms and people, so they need one view of the site rather than two.
What an explainer is not
A topic explainer is SPEQ’s synthesis of what a practice involves, cited to the standards that govern it. It does not reproduce their text, and it does not determine which of them apply to your product or process.
[ POSITION IN THE FRAMEWORK ]
7 DIMENSIONS · 21 LINKSA site can be fully GMP-compliant while operating an unpermitted discharge: the two systems share rooms, people and equipment but rarely share a view, and the gap between them is where each assumes the other is looking.
06 · QUALITY MATURITY — EHS GOVERNANCE IN REGULATED SITES, REACTIVE TO ADAPTIVE
EHS and quality are separate functions with separate systems. Neither knows what the other has open.
Both systems exist and are certified or inspected in their own right, with policies that reference each other and processes that never meet.
Where an obligation touches both — a change, an incident, a contractor, a permit — one assessment covers both, and accountability is named once.
The two share machinery: one change process, one incident process, one action tracker, so a finding is closed by whichever system is competent to close it.
Site risk is held as one picture, so a decision that trades a safety obligation against a quality one is made deliberately by someone who can see both.
SPEQ’s shared five-stage progression, labelled synthesis — not the FDA QMM rating scale. Where does your organization sit? Score your quality system →
07 · REGULATORY & EVIDENCE
GOVERNING STANDARDS · 5
Derived from the 5 standards SPEQ maps to this subject, across 2 regulatory bodies: ICH, ISO.
RECORDS & OBJECTIVE EVIDENCE
- The stated relationship between the EHS management system and the quality system
- Combined assessment where a change or incident affects both
- Named accountability for obligations that sit across the two
- Action tracking showing EHS and quality findings closed through comparable rigour
- Management review inputs covering both, with decisions taken across them
COMMON INSPECTION FINDINGS
- A change assessed for product impact and not for environmental or safety consequence
- Two incident systems holding different accounts of the same event
- EHS findings closed without effectiveness verification, unlike their quality equivalents
- Permits or consents held by a function nobody in quality can name
- A contractor controlled under one system and invisible to the other
Same structure, different objectives
ISO 45001 and ISO 14001 share the high-level structure of ISO 9001 — context, leadership, planning, support, operation, performance evaluation, improvement — which makes integration mechanically straightforward. What does not integrate is the objective. The quality system protects the patient through the product; the EHS system protects the worker and the environment from it. Those point in the same direction most of the time and not always.
Integration should therefore be structural rather than substantive: one document control, one audit programme, one change-control entry point, one management review agenda — with the risk assessments kept distinct, because a merged register applies one tolerance to two kinds of consequence, and in practice the less demanding one wins.
The compliance-obligations register is the operative document
ISO 14001 clause 6.1.3 requires compliance obligations to be determined and maintained, and it is the clause that matters most operationally, because environmental permits carry numeric limits with monitoring and reporting duties attached. A permit limit is a process parameter by another name: a constraint with a defined response to exceedance, except that the response includes notifying a regulator.
Registers go stale in a specific way — a permit renewed with a tightened limit, a new substance brought on site, a discharge point added during a project. Each is knowable and none announces itself. Reviewing the register against actual site activity, rather than against its previous version, is what keeps it a control rather than a document.
Change control is where the two systems either meet or do not
A change to a regulated process is frequently also an EHS change: a solvent substitution alters both the impurity profile and the exposure and effluent picture, a containment upgrade alters the airflow that the contamination-control strategy depends on, a new product introduces a compound with an occupational exposure limit nobody has derived.
Where the change-control form asks a GMP-impact question and no EHS one, changes reach the floor assessed on one axis. The remedy is a single change entry point with both assessments as required outputs — which is cheap, and which is the whole practical content of integrating the two systems.
SPEQ interpretation — different enforcement rhythms mislead
GMP inspection is periodic, announced or not, and its findings arrive in a form the organisation is practised at handling. Environmental and safety enforcement runs on other rhythms — a reportable release, an inspection triggered by a complaint, an accident investigation — and the consequences can be immediate and personal in a way GMP findings usually are not.
The practical effect is that a site can be well drilled for one and unpractised for the other, in the same rooms with the same people. An organisation with a mature quality system should assume its EHS incident response is less rehearsed than it believes, and test it the way it tests a mock inspection — because the muscle memory does not transfer between them.
FREQUENTLY ASKED
Should EHS and quality management systems be merged?
Structurally yes, substantively no. One document control, audit programme, change-control entry point and management review agenda is efficient. Merged risk registers are not: they apply one tolerance to two different kinds of consequence, and in practice the less demanding treatment wins on both.
Why does the compliance-obligations register matter so much?
Because environmental permits carry numeric limits with monitoring and reporting duties — a permit limit is a process parameter whose exceedance response includes notifying a regulator. Registers go stale through renewals with tightened limits, new substances and added discharge points, none of which announce themselves.
Where do the two systems most often fail to meet?
Change control. A solvent substitution changes the impurity profile and the exposure and effluent picture; a containment upgrade changes the airflow the contamination-control strategy relies on. Where the form asks a GMP question and no EHS one, changes reach the floor assessed on one axis only.
Why assume EHS response is less rehearsed than quality response?
Because enforcement rhythms differ. GMP inspection is periodic and its findings arrive in a familiar form; environmental and safety enforcement arrives through a reportable release, a complaint-triggered inspection or an accident investigation, with immediate and often personal consequences. The muscle memory does not transfer.