MSI site analytics pixel

Voluntary ISO Standards: Why Ethylene Oxide Rules Matter


Environmental Management | ISO 14001:2026 | Ethics

Voluntary ISO standards are the commitments a company keeps when no law is forcing its hand, and October 2026 just showed why that matters. On October 24, 2026, The New York Times reported that clean-air rules for industrial plants releasing cancer-causing gases were first suspended by presidential action and then targeted for elimination. The example at the center of the story is ethylene oxide, a colorless gas used to sterilize roughly half of America’s sterile medical devices. The Times reported that one emitting site sits about 100 feet from a school.

One hundred feet. That is shorter than a soccer field, and it is the distance between a cancer-causing emission point and children who are breathing the air during every recess.

Here is the question every plant manager, EHS manager, and quality leader should be asking this week: if the rule disappears tomorrow, does your control disappear with it?

When a regulation is rolled back, companies split into three groups. Some were only ever meeting the regulation, and they will quietly loosen their controls. Some will keep doing what is right because their management system already says so. And some will look past the rulebook entirely and follow what the science has proven about harm to the public. The third group is where voluntary ISO standards were always meant to take an organization.

This article walks through the ethylene oxide facts, what the science says is a safe level compared with what is allowed now, and how ISO 14001:2026, ISO 13485, ISO 45001, and ISO 9001:2026 give leaders a disciplined way to protect their interested parties when the legal floor drops. It is written from 28 years of MSI ISO consulting experience, more than 200 registrar audits attended, and 80+ certifications supported.

Direct Answer: Voluntary ISO standards are internationally agreed management system requirements that organizations choose to adopt, such as ISO 14001 for environmental management. Because no regulator imposes them, a certified company’s commitments to prevent pollution and meet the needs of interested parties stay in place even when a government regulation is suspended, delayed, or repealed.


The Foundation

What Voluntary ISO Standards Are, and Why “Voluntary” Is Their Strength

Chosen. Committed. Consistent.

Voluntary ISO standards are written by technical committees of experts from more than 170 national standards bodies and published by the International Organization for Standardization. ISO itself states plainly that its standards are voluntary. No agency inspects your plant for ISO 14001 conformance. No statute requires ISO 9001. An organization decides to adopt the standard, builds the system, and then invites an accredited registrar to verify it.

That decision is the point. Regulations tell an organization the minimum it must do to avoid penalties. Voluntary ISO standards tell an organization how to manage itself so that it achieves what it has promised. The first is enforced from the outside. The second is held together from the inside, by policy, objectives, internal audits, and management review.

The scale of that choice is remarkable. According to the ISO Survey, the 2024 count reached 676,232 ISO 14001 certificates covering more than 1.17 million sites, alongside 1.47 million ISO 9001 certificates and 542,527 ISO 45001 certificates (ISO Survey 2024 summary). Hundreds of thousands of organizations chose these voluntary ISO standards without a law requiring them.

Direct Answer: Voluntary ISO standards differ from regulations in where their authority comes from. A regulation is enforced by government and can change with each administration. Voluntary ISO standards are enforced by the organization’s own policy, verified by accredited third-party audits, and they stay constant across election cycles.

ISO 14001:2026 even describes this directly. Its guidance on interested parties (Annex A.4.2) explains that some requirements are mandatory because they were written into laws, permits, or court decisions, while an organization may also voluntarily adopt other expectations of interested parties. Once adopted, those expectations become the organization’s own compliance obligations. In other words, voluntary ISO standards let a company turn “the right thing to do” into a documented, auditable requirement.

If you are new to this distinction, MSI’s article on compliance versus certification explains why meeting a rule and running a system are not the same thing, and What Is ISO? covers the basics.


The News Hook

The Ethylene Oxide Example: What Changed in the Rules

Finalized. Exempted. Reconsidered.

To see why voluntary ISO standards matter right now, it helps to lay out the ethylene oxide timeline in plain terms, drawn from the public record.

  • April 2024: a tighter rule. EPA finalized emission standards for commercial sterilizers that use ethylene oxide. According to Harvard Law School’s Environmental and Energy Law Program, EPA estimated the rule would cut sterilizer emissions by 90% across 88 facilities, 23 of which posed high lifetime cancer risks to nearby communities. It also required continuous emissions monitoring for most sterilizers, with compliance due in 2026 or 2027.
  • July 2025: presidential exemptions. Through Proclamation 10959, issued under Clean Air Act Section 112(i)(4), the administration gave listed sterilizer facilities two additional years to comply. The proclamation stated that compliance technology was not commercially available on the rule’s timeline and that closures could disrupt the supply of sterile medical equipment.
  • January 2026: a court challenge. Community groups represented by the environmental groups NRDC and the Southern Environmental Law Center sued over exemptions covering about 40 facilities, arguing the control technology already exists and is widely used.
  • March 2026: reconsideration. EPA proposed rescinding the 2024 rule’s tighter risk-based standards, relaxing standards for facilities using at least 10 tons of ethylene oxide per year, and dropping continuous monitoring for larger sterilizers.
  • April 2026: chemical plants deferred. When EPA updated air toxics standards for chemical manufacturing, it deferred a decision on ethylene oxide limits for the 33 facilities that emit it, according to Earthjustice.

The ethylene oxide changes sit inside a much larger shift. In March 2025, EPA announced 31 deregulatory actions, describing them as lowering costs and returning authority to states. In February 2026, EPA rescinded the 2009 greenhouse gas endangerment finding, and in September 2026 it repealed most power plant carbon standards (see the Harvard EELP tracker). Columbia Law School’s Sabin Center keeps a running record of these changes.

The administration’s stated reasons are cost, legal authority, and supply security. Critics point to health. Lawsuits are pending, and a future administration could reverse course again. For a management system professional, that back-and-forth is itself the lesson: a control that exists only because of a regulation is a control that can vanish with a signature. Voluntary ISO standards give an organization something steadier to stand on.


The Science

Ethylene Oxide Facts: What the Science Says Is Safe vs. What Is Allowed Now

Measured. Classified. Contested.

Ethylene oxide is a flammable, colorless gas made in large volumes for producing antifreeze, plastics, solvents, and detergents, and used to sterilize medical devices and some spices. It is valuable precisely because it is so reactive: it penetrates packaging and kills microorganisms by damaging their DNA. That same property is what makes it dangerous to people.

How the science classifies ethylene oxide

The scientific classifications are not close calls:

  • The International Agency for Research on Cancer lists ethylene oxide in Group 1, its highest category, meaning it is carcinogenic to humans.
  • EPA’s 2016 Integrated Risk Information System (IRIS) assessment classifies it as carcinogenic to humans by inhalation and identifies a mutagenic mode of action, which means it damages genetic material directly.
  • The cancers linked to it are lymphoid cancers, including non-Hodgkin lymphoma, myeloma, and lymphocytic leukemia, and breast cancer in women.
  • Because the mode of action is mutagenic, EPA applies extra weighting for exposure early in life, when children are more vulnerable.

The 2016 IRIS assessment found ethylene oxide far more potent as a carcinogen than earlier estimates, which is why the 2024 sterilizer rule was tightened. Advocacy groups often describe it as about 60 times more toxic than previously thought.

The numbers side by side

The table below converts the key limits into one unit, parts per trillion (ppt), so leaders can see the scale. One part per billion (ppb) equals 1,000 ppt, and one part per million (ppm) equals 1,000,000 ppt.

Reference pointLevel (ppt)What it means
EPA IRIS: 1-in-a-million lifetime cancer risk0.1Continuous lifetime breathing at this level is estimated to add one cancer case per million people
EPA IRIS: 100-in-a-million riskabout 10The upper end of what EPA has traditionally treated as acceptable lifetime risk for air toxics
Typical urban background air100 to 200Reported by Texas regulators; sources include combustion and vehicle exhaust
Texas screening value (2019 proposal)4,000Texas’s alternative risk assessment, hundreds of times less protective than EPA’s IRIS value
NIOSH recommended worker limitunder 100,000Under 0.1 ppm averaged over a work shift
OSHA legal worker limit (8-hour average)1,000,0001 ppm, with a 0.5 ppm action level and a 5 ppm 15-minute excursion limit, set in 1984

Sources: EPA IRIS (2016); Texas Commission on Environmental Quality; OSHA Occupational Chemical Database. Worker limits apply to shift-length exposure of adult workers and are not directly comparable to lifetime community exposure.

What the gap tells a leader

This gap is exactly where voluntary ISO standards earn their value. Read the table from top to bottom and the pattern is striking. The legal workplace limit is ten million times higher than the concentration EPA’s science links to a one-in-a-million community cancer risk. Even after allowing for differences in exposure time and population, the federal worker limit was set in 1984, three decades before the current cancer science, and NIOSH has recommended a limit ten times lower.

The science is not without dispute, and fairness requires saying so. Industry groups and Texas regulators argue the IRIS model overstates risk at very low concentrations. They note that the human body naturally produces small amounts of ethylene oxide, at levels Texas estimates are equal to breathing about 1.9 ppb continuously, and that urban background air already exceeds the IRIS risk-based values. EPA’s IRIS assessment itself notes its unit risk estimates are intended for environmental exposures up to about 20 ppb.

Here is what is not disputed. Ethylene oxide causes cancer. Communities closest to emitting facilities face the highest concentrations. The 2024 rule was designed to cut sterilizer emissions by about 90%. And the exemptions and proposals of 2025 and 2026 mean those reductions will arrive later, in reduced form, or possibly not at all.

Direct Answer: EPA’s 2016 science links ethylene oxide at about 0.1 parts per trillion to a one-in-a-million lifetime cancer risk, while the legal workplace limit is 1 part per million. Voluntary ISO standards such as ISO 14001 and ISO 45001 let an organization set its own controls based on that science rather than waiting for the legal minimum to catch up.


The Choice

Three Kinds of Companies When a Rule Disappears

Minimum. Right. Grounded.

Across more than 200 registrar audits, MSI has seen how organizations respond when external pressure changes. They tend to fall into three groups, and voluntary ISO standards are what separate them.

1. The compliance-only company

This organization treats regulation as the ceiling. Its controls were built to pass an inspection, and every control has a regulatory citation next to it. When the rule is suspended, the business case for the control vanishes, so the scrubber maintenance gets deferred, the monitoring contract lapses, and the capital project is cancelled. Nothing illegal happens. The neighbors simply breathe more of what the rule was meant to stop.

2. The company that keeps doing what is right

This organization built its controls through a management system. Its environmental policy commits to protecting the environment and preventing pollution. Its controls are tied to significant environmental aspects, not just regulatory citations.

When the rule changes, the change goes through planning and management review, and leadership asks whether removing the control is consistent with the policy it signed. Most of the time, the answer is no. Voluntary ISO standards are the structure that makes that question unavoidable.

3. The company whose moral grounding follows the science

This organization goes one step further. It reads the science, not just the regulation, and sets internal limits that reflect what has been proven about harm. It may have adopted those limits before any rule required them, and it will keep them after the rule is gone. For this company, voluntary ISO standards are not paperwork. They are the operating expression of its values.

Diana Lynn, MSI’s founder and president, puts it this way in a principle she has held since she was a young girl walking through California’s redwoods:

“Protect before you restore. The cheapest health benefit an organization will ever deliver is the harm it never caused to something that was already good.”

— Diana Lynn, Founder and President, Management Systems International

MSI’s article on ISO standards and integrity explores this further, and environmental stewardship examples shows what the third kind of company looks like in practice.

Free Resource Hub

Stop Rebuilding Procedures From Scratch Every Time a Rule Changes

Voluntary ISO standards only hold when your procedures are written to your system, not to a regulation that may not survive the next election. MSI’s ISO Procedure Templates & Guides hub collects ready-to-adapt procedures for ISO 9001, ISO 14001, ISO 13485, ISO 45001, and ISO 7101, built from 28 years of implementation work. Start here, find your standard, and see exactly what is included.

Browse the ISO Procedure Templates & Guides →


The Evidence

Why Voluntary ISO Standards Outlast Regulatory Swings

Durable. Global. Proven.

It is fair to ask whether voluntary ISO standards actually change environmental results or simply produce binders. The research gives a clear answer. In a study of more than 3,000 U.S. facilities regulated as major sources under the Clean Air Act, political scientists Matthew Potoski and Aseem Prakash found that ISO 14001-certified facilities reduced their pollution emissions more than non-certified facilities, even after controlling for their prior emission and compliance histories.

There are four practical reasons voluntary ISO standards hold steady when regulations move:

  1. Customers do not follow the Federal Register. A U.S. manufacturer selling into Europe, Japan, or a multinational supply chain answers to buyers who still expect certified environmental management. Their supplier requirements do not change when an American rule does.
  2. Registrars audit to the standard, not the administration. Accredited certification bodies, overseen internationally through Global ACI, verify conformance to ISO 14001:2026 the same way regardless of who runs EPA.
  3. Rules swing back. Every major rollback described above is in litigation, and a future administration can restore what this one removed. A company that dismantled its controls in 2026 may be rebuilding them, at higher cost, by 2030.
  4. Communities remember. The families living next to an emitting facility do not experience a regulatory change. They experience the air.

This is why MSI treats environmental performance as business performance. Our article on environmental risk as business risk and the guide to the benefits of environmental management systems both show how voluntary ISO standards reduce exposure that regulations alone cannot.

Direct Answer: Voluntary ISO standards outlast regulatory swings because customers, accredited registrars, and international supply chains keep requiring them no matter which way domestic rules move. Research on more than 3,000 Clean Air Act facilities found ISO 14001-certified sites cut emissions more than uncertified ones.


The Obligation

Certified Companies Owe Interested Parties More Than the Legal Minimum

Policy. People. Proof.

This is where voluntary ISO standards get personal for certified organizations. If a company holds an ISO 14001 certificate and its emissions rise, or its planned reductions quietly slip because a rule was delayed, its own management system requires it to consider the harm it is imposing on its interested parties. That is not MSI’s opinion. It is written into the requirements of ISO 14001:2026.

What ISO 14001:2026 requires of a certified company

  • Clause 4.2, interested parties. The organization must determine its relevant interested parties and their needs and expectations. A note in the 2026 edition names pollution levels specifically as an environmental condition interested parties can have expectations about. Neighbors of a sterilizer or chemical plant are about as relevant as an interested party gets, and a school roughly 100 feet from an emission point, as the Times described, holds the most vulnerable interested parties of all: children, whose early-life exposure EPA’s science weights more heavily.
  • Annex A.4.2, affected parties. When an interested party perceives itself to be affected by the organization’s environmental decisions, the organization considers the needs and expectations that party has made known.
  • Clause 5.2, environmental policy. Top management must commit to protecting the environment, including prevention of pollution. The 2026 Annex explains that this commitment goes beyond preventing adverse impacts to protecting the natural environment from harm and degradation. A policy cannot honestly claim that commitment while the organization walks back controls it knows reduce cancer risk.
  • Clause 6.1.2, environmental aspects. Air emissions of a known carcinogen are a significant environmental aspect by almost any reasonable criteria. The aspect does not become less significant because a rule was suspended.
  • Clause 6.1.3, compliance obligations. Once an organization adopts an interested party’s expectation, such as a community commitment or a customer emissions requirement, it becomes a compliance obligation in its own right, independent of federal law.
  • Clause 6.3, planning of changes. Elevated to its own clause in the 2026 edition, it requires changes to the system to be carried out in a planned manner. Removing an emission control is a change.
  • Clause 9.3, management review. Inputs must include changes in interested party needs and compliance obligations, and relevant communications from interested parties, including complaints.

When the policy and the science disagree with the decision

ISO 14001 does not set emission limits, and registrars do not audit against EPA’s risk values. The conflict comes from somewhere more personal: the organization’s own words. Most certified companies have written an environmental policy that commits them to protect the environment and prevent pollution, and many go further and promise not to harm people or the communities around them.

Once that commitment is on paper, the science becomes part of the test. A company cannot claim it protects people while knowingly releasing a proven carcinogen at levels the science links to harm, especially near a school, and especially when it chooses to stop reductions it already planned. The certificate does not create the conflict. The policy does.

“If your environmental policy says you will not harm the environment or people, then knowingly exceeding what the science has proven harmful puts you in conflict with your own policy.”

— Diana Lynn, Founder and President, Management Systems International

Put together, these clauses mean a company certified to voluntary ISO standards cannot treat a rollback as a free pass. Voluntary ISO standards ask leaders to look at who is affected, what the science says, and what they promised in writing. An auditor reviewing an organization that loosened carcinogen controls the week a rule was suspended will reasonably ask how that decision went through planning of changes and management review, and how it squares with the policy commitment.

“Having systems, acting on what the records are reporting, and never letting anyone deny the facts is what prevents good systems from deteriorating.”

— Diana Lynn, Founder and President, Management Systems International

Workers are interested parties too

Ethylene oxide exposure is not only a fence-line issue. Sterilizer operators, maintenance technicians, and warehouse staff who handle freshly sterilized product can be exposed inside the plant. ISO 45001 requires hazard identification and risk assessment that considers worker exposure, and voluntary ISO standards allow an organization to set an internal action limit closer to the NIOSH recommendation than the 1984 OSHA limit. MSI’s overview of the ISO 45001 revision covers where occupational health and safety management is heading.

Ethics is now in the quality standard as well

Voluntary ISO standards now reach ethics directly. ISO 9001:2026, published September 16, 2026, brings quality culture and ethical behavior directly into the quality management system, including awareness requirements that reach every employee. MSI’s view is that ethics is not only a leadership issue but every department’s issue. The article on ISO 9001:2026 ethics requirements explains the change, and MSI’s list of unethical business practices gives teams concrete behaviors to watch for.

For Experienced EHS Managers

Update Your ISO 14001:2015 System to 2026 in a Week

The interested party, environmental policy, and planning of changes requirements above are exactly where 2015-era procedures fall short. MSI built the ISO 14001:2026 Procedure Templates & Guides so an experienced EHS manager can bring a working ISO 14001:2015 system up to the 2026 edition in a week’s time, with each procedure mapped to the revised clauses. The transition deadline is April 2029, and registrars are already auditing to the new edition.

Get the ISO 14001:2026 Procedure Templates →


Medical Devices

The Medical Device Angle: Sterilization, ISO 13485, and Your Suppliers

Sterile. Validated. Accountable.

The ethylene oxide story lands squarely on the medical device industry. The FDA reports that about half of all sterile medical devices in the U.S. are sterilized with ethylene oxide, often because it is the only method that sterilizes complex devices such as catheters without damaging them. The presidential exemptions were justified on exactly that supply concern.

Both things are true at once, and voluntary ISO standards were built for exactly that kind of tension. Patients need sterile devices, and communities near sterilizers need clean air. Voluntary ISO standards help device manufacturers hold both obligations at the same time:

  • ISO 13485 Clause 7.5.7 sets particular requirements for validating sterilization processes and sterile barrier systems. Validation work under ISO 11135 for ethylene oxide is the natural place to study whether a lower ethylene oxide concentration or a shorter cycle still achieves sterility.
  • Purchasing controls under ISO 13485 Clause 7.4 let a manufacturer set criteria for contract sterilizers. A device company can choose to favor sterilization suppliers who meet the 2024 emission standards voluntarily, whether or not they hold an exemption.
  • Alternative modalities. The FDA has run innovation challenges to reduce ethylene oxide emissions and develop alternatives, and in 2024 recognized vaporized hydrogen peroxide as an established sterilization method. Design changes that open the door to alternatives belong in design and development planning.
  • Packaging decisions. FDA encourages moving paper labeling to electronic formats where safe, since paper slows ethylene oxide penetration and can lengthen cycles.

For device makers, MSI’s ISO 13485 consulting team can help connect sterilization validation, supplier controls, and environmental commitments into one coherent system, and our supplier management program guide shows how to build supplier criteria that reflect your values, not just the legal minimum.


Leadership Decisions

Management Review: Where Leaders Decide to Keep the Control

Review. Decide. Document.

Voluntary ISO standards put one meeting at the center of every decision like this: management review. ISO 14001:2026 Clause 9.3, ISO 9001:2026, ISO 13485, and ISO 45001 all require top management to review the system at planned intervals and make documented decisions.

A regulatory rollback is exactly the kind of change management review exists to handle. Under ISO 14001:2026 Clause 9.3.2, the inputs must cover changes in external issues, changes in interested party needs including compliance obligations, significant environmental aspects, risks and opportunities, and communications from interested parties, including complaints. The outputs must include decisions on any changes to the system and any implications for strategic direction.

Here is how MSI recommends structuring the agenda item when a rule your controls depend on is suspended:

  1. State the change. What rule changed, when, and what legal obligation was removed or delayed.
  2. List what the control protects. Which significant aspect, which interested parties, and what the science says about the harm.
  3. Check the policy. Read the environmental policy commitment aloud. Does removing the control honor it?
  4. Review the data. Monitoring results, complaints, community communications, and customer requirements.
  5. Decide and record. Keep, modify, or retire the control, with the reasoning documented as evidence of the review.

MSI promotes management review as the best place to apply voluntary ISO standards and to start any transition. The fastest way in is what we call an “End in Mind” management review: put the data you already have on the review slides and mark anything missing as TBD with a due date. Our guides on the ISO 14001:2026 management review and moving audit findings into management review show the method in detail.

Management Review Toolkits

Walk Into Your Next Management Review With Decisions, Not Slides

When a regulation shifts, leadership needs every required input on one page: interested parties, compliance obligations, significant aspects, complaints, and the decisions that follow. MSI’s Management Review Toolkits give you the agenda, input templates, and minutes structure for ISO 14001:2026, ISO 9001:2026, ISO 13485, and combined systems, so the record shows exactly how your leaders weighed the change. Want a quick start? Grab the free 5 Steps to a Decision-Ready ISO Management Review guide first.

See the Management Review Toolkits →


The Playbook

How to Use Voluntary ISO Standards to Stay Beyond Compliance: 7 Steps

Map. Commit. Verify.

Whether you are certified today or considering it, these seven steps turn voluntary ISO standards into controls that survive a regulatory swing. They reflect the approach MSI uses in ISO consulting engagements.

Step 1: Separate legal controls from value controls

Go through your list of operational controls and mark which ones exist only because of a regulation. Those are your exposure points. For each, ask whether it also protects a significant aspect or an interested party. Most will, which means they belong to your system, not just your permit. MSI’s guide to ISO 14001 environmental aspects walks through the criteria.

Step 2: Write the science into your criteria

Under voluntary ISO standards, your significance criteria for environmental aspects can reference health science directly, such as carcinogen classification, not only regulatory thresholds. That way a rule change does not automatically downgrade an aspect’s significance.

Step 3: Name your interested parties honestly

List the neighborhoods, schools, and workers closest to your emission points, and measure the actual distance. If a school is within a few hundred feet, that fact belongs in your aspects register and on your management review slides. Record what they have told you, through complaints, public meetings, or local news. Under ISO 14001:2026, those expectations can become compliance obligations the moment you choose to adopt them.

Step 4: Put rollbacks through planning of changes

To keep voluntary ISO standards from eroding quietly, require that any proposal to reduce or remove an environmental control go through your Clause 6.3 process, with a documented review of consequences, before anything changes on the floor.

Step 5: Bring it to management review

Use the five-part agenda above. The decision and its reasoning become the evidence an auditor, a customer, or a community member can see.

Step 6: Audit it every year

Registrars across the industry expect every requirement of the standard to be internally audited annually. Include the decision trail for any changed control in your internal audit scope. MSI’s internal audit services and SureResults ISO maintenance program cover this for organizations that want an independent set of eyes.

Now Available: ISO 14001:2026 Internal Auditing

Train Auditors Who Ask the Hard Questions About Your Environmental Decisions

An internal auditor who only checks paperwork will never ask why a carcinogen control was loosened the week a rule was suspended. MSI’s ISO 14001:2026 Internal Auditing course teaches your team to audit the revised standard the way registrars do: interested parties, policy commitments, planning of changes, and the management review decisions behind them. It is self-paced online, fulfills the 16-hour internal auditor training requirement, and is built from 200+ registrar audits MSI has attended.

Start the ISO 14001:2026 Internal Auditing Course →

Step 7: Tell people what you decided

ISO 14001:2026 makes the environmental policy available to interested parties. A short public statement that you are keeping your controls regardless of the rule change builds trust that no regulation can mandate. It also helps you attract people who want to work for principled employers, which is why MSI maintains a directory of ISO-certified employers.

Direct Answer: To use voluntary ISO standards to stay beyond compliance, separate controls that exist only for a regulation from those that protect people, write health science into your significance criteria, route any rollback through planning of changes and management review, audit the decisions annually, and communicate what you decided.

If you are planning a transition at the same time, MSI’s free ISO Transition Risk Scorecard shows where your 2015-era system is most exposed under ISO 9001:2026 and ISO 14001:2026, and the ISO 14001:2026 Transition course walks your team through every change.


Experience Counts

What 28 Years of ISO Consulting Teaches About Doing Right

Seen. Measured. Earned.

MSI has supported 80+ certifications, attended 200+ audits, with 600+ professionals trained since 1998. That vantage point, seeing findings from the registrar’s side of the table, shows a consistent pattern: organizations that treat voluntary ISO standards as a values system weather external change far better than those that treat them as a certificate on the wall.

Diana Lynn learned the cost of environmental decisions long before founding MSI. As a procurement agent for a utility company, she bought wood poles and visited many pole treatment facilities, and she watched habitat protection for an endangered owl species reshape the supply of timber. The lesson stayed with her: environmental protection is not a cost that appears from nowhere. It is the price of a decision someone made earlier about what was worth protecting. MSI’s guide to ISO 14001 for utilities draws on that experience.

MSI applies the same standard to itself. How a consulting firm travels affects climate change, and MSI is deliberate about the travel choices it makes, delivering many of its 29 online courses and remote services so clients can build capability without unnecessary flights.

Here are measurable ways organizations typically demonstrate that their voluntary ISO standards commitments are real, based on MSI client experience:

  • Every significant environmental aspect has a named control owner and a documented basis that references both law and science.
  • Every change to an environmental control has a planning-of-changes record and a management review decision.
  • Internal audits cover every requirement of the standard each year, with zero repeat findings on the same control.
  • Interested party communications, including complaints, are logged and answered, and trends are reviewed by top management.
  • Environmental objectives include at least one target set below the current legal limit.

If you are weighing whether formal ISO consulting support to implement voluntary ISO standards is worth it, the article on ISO certification cost lays out what drives the investment, and MSI’s ISO 14001 consulting page explains how an engagement works. For leaders who want the big picture first, MSI’s free ISO Executive Decision Briefs are short videos you can watch before your next leadership meeting. Regenerative thinking goes further still, as explored in Gross Domestic Regeneration, and MSI’s article on ISO climate change considerations covers the climate requirements now built into every management system standard.

Free Planning Session

Decide What Your Company Stands For Before the Next Rule Changes

In one conversation, an MSI expert will help you identify which of your controls depend only on regulation, where your interested party obligations sit under ISO 14001:2026, and what it would take to make your commitments hold no matter what changes in Washington. No obligation and no sales script, just 28 years of ISO consulting experience applied to your situation. Call 760-434-9141 or book a time that works for you.

Book Your Planning Session → Meet MSI’s ISO consulting team


FAQ

Frequently Asked Questions About Voluntary ISO Standards

Asked. Answered. Applied.

Are ISO standards required by law?

No. Voluntary ISO standards are adopted by choice. Some customers and contracts require certification, and some regulators reference ISO standards, but ISO itself does not enforce them. Once an organization is certified, its commitments become requirements it is audited against.

If a regulation is rolled back, does an ISO 14001-certified company have to keep the control?

The legal obligation may change, but the system requirements do not. ISO 14001:2026 requires the organization to manage the change through planning of changes, consider interested parties and its pollution prevention commitment, and record the decision in management review. Many organizations find that removing the control would contradict their own policy.

Why is ethylene oxide considered dangerous?

IARC classifies ethylene oxide as a Group 1 human carcinogen, and EPA’s 2016 assessment links long-term inhalation to lymphoid cancers and breast cancer in women. It damages DNA directly, which is why EPA applies extra protection for childhood exposure.

What is the difference between the science-based level and the legal limit for ethylene oxide?

EPA’s science estimates a one-in-a-million lifetime cancer risk at about 0.1 parts per trillion in community air. The OSHA workplace limit is 1 part per million averaged over eight hours, and NIOSH recommends under 0.1 ppm. The two apply to different exposures, but the gap shows how far legal limits can trail current science.

How do voluntary ISO standards help medical device manufacturers that rely on ethylene oxide?

ISO 13485 requires validated sterilization processes and controlled purchasing. Manufacturers can use those requirements to optimize cycles, choose sterilization suppliers that meet stronger emission standards, and plan design changes that allow alternative sterilization methods.

Where should a company start if it wants to go beyond compliance?

Start with management review. Put the data you already have on the slides, mark missing information TBD with due dates, and have leadership decide which controls stay regardless of regulation. MSI’s Management Review Toolkits and a free planning session at 760-434-9141 can speed that first step.


Conclusion

Voluntary ISO Standards Are a Promise Kept in Private

Integrity. Science. Stewardship.

Regulations will keep moving. They tightened in 2024, loosened in 2025 and 2026, and may tighten again before the decade ends. What should not move is an organization’s answer to a simple question: are we willing to impose harm on our neighbors and our workers because the law now allows it?

Voluntary ISO standards exist so that answer does not depend on the news cycle. They ask leaders to name the people they affect, read the science, write down what they promise, and prove every year that they kept it. That is the difference between meeting a regulation and living by voluntary ISO standards.

If your organization is ready to make its commitments hold, start with the ISO Procedure Templates & Guides, bring the decision into your next management review, and call MSI at 760-434-9141 when you want an experienced partner beside you.


References

  1. The New York Times. (2026, October 24). Coverage of suspended and eliminated clean-air rules for carcinogenic emissions.
  2. U.S. EPA. (2016). Evaluation of the Inhalation Carcinogenicity of Ethylene Oxide: IRIS Executive Summary.
  3. International Agency for Research on Cancer. IARC Monographs: List of Classifications.
  4. OSHA. Occupational Chemical Database: Ethylene Oxide.
  5. Texas Commission on Environmental Quality. Ethylene Oxide Toxicity Assessment.
  6. Harvard Law School EELP. Ethylene Oxide Commercial Sterilizer Standards Tracker.
  7. Federal Register. (2025, July 23). Proclamation 10959: Regulatory Relief for Certain Stationary Sources With Respect to Sterile Medical Equipment.
  8. NRDC. (2026, January 28). Groups File Suit Over Presidential Exemptions for Cancer-Causing Ethylene Oxide.
  9. Earthjustice. (2026, April 2). EPA Updates Air Toxics Standards for Chemical Manufacturers but Defers Ethylene Oxide Limits.
  10. U.S. EPA. (2025, March 12). EPA Launches Biggest Deregulatory Action in U.S. History.
  11. Harvard Law School EELP. Power Plant Greenhouse Gas Standards Tracker.
  12. Sabin Center for Climate Change Law. Climate Deregulation Tracker.
  13. U.S. FDA. Ethylene Oxide Sterilization for Medical Devices.
  14. Potoski, M., & Prakash, A. (2005). Covenants with Weak Swords: ISO 14001 and Facilities’ Environmental Performance.
  15. ISO. The ISO Survey of Management System Standard Certifications.
  16. Global ACI. Global Accreditation Cooperation Incorporated.
  17. ISO. (2026). ISO 14001:2026, Environmental management systems: Requirements with guidance for use.


About MSI

Management Systems International (MSI) is a veteran-owned, female-owned ISO consulting and training firm founded in 1998 and based in Carlsbad, California, with a Southeast branch in Atlanta. With 28 years of experience, 80+ certifications supported, 200+ audits attended, and 600+ professionals trained, MSI implements ISO 9001, ISO 13485, ISO 14001, ISO 45001, and ISO 7101 for manufacturing, technology, medical device, government, healthcare, and other regulated organizations nationally and internationally.

Call 760-434-9141 or visit msi-international.com to schedule a free planning session.

Share this post:
post by:
Picture of Diana Lynn

Diana Lynn

Founder and Principal of Management Systems International (MSI), a veteran-owned, female-owned ISO consulting firm she founded in 1998. Diana implements management systems, conducts audits, and develops MSI's entire training curriculum — 80+ organizations certified, 200+ audits, and 600+ professionals trained across manufacturing, technology, aerospace, medical device, government, healthcare, defense, and other regulated industries.
In This Guide
Stay Informed

Join our early-access list for ISO 14001:2026 briefings.

Trusted by Global Leaders

Don't miss our latest news!

Get on our Email list. MSI emails new offers, training dates, and ISO updates to our list before anyone else.

Twenty-eight years of practice, written down.
New: complete ISO procedure templates and guides. 15 procedure topics, five standards and combos, editable Word — with the judgment calls already made.
See the templates →

Buy any Template Packages and the price is credited 100% to ISO Consulting Projects, SurePath or SureResults Online or Traditional. Terms apply