1. Home
  2. Insights
  3. GHG assurance
  4. Boundaries and categories: reading ISO 14064-1:2018 correctly
GHG assurance

Boundaries and categories: reading ISO 14064-1:2018 correctly

Many inventories in this region were built on the GHG Protocol's three scopes and are now being reported against ISO 14064-1:2018. The two are compatible in substance but not in structure, and the 2018 edition adds a requirement that the older habit does not cover: you must state why the indirect emissions you included are the significant ones.

First published01 September 2026
Last technical review01 September 2026
Review cycleAnnually
AuthorTechnical Directorate, Energy Up International
Technical reviewCompliance and Accreditation Officer
Reading time10 min
Structure

Six categories, not three scopes.

CategoryWhat it coversUsually maps to
Category 1Direct GHG emissions and removals — from sources owned or controlled by the organization.Scope 1
Category 2Indirect GHG emissions from imported energy — electricity, heat, steam, cooling.Scope 2
Category 3Indirect GHG emissions from transportation.Parts of Scope 3
Category 4Indirect GHG emissions from products used by the organization.Parts of Scope 3 (upstream)
Category 5Indirect GHG emissions associated with the use of products from the organization.Parts of Scope 3 (downstream)
Category 6Indirect GHG emissions from other sources.Remaining Scope 3
The mapping is not one-to-one and should not be presented as if it were. Transport, for example, is split across upstream and downstream in the GHG Protocol but sits in a single category here. Where an organisation reports under both frameworks, the reconciliation between them is itself a document a verifier will ask for.
The addition

Significance is now something you have to justify.

The 2018 edition requires the organization to establish and apply criteria for determining which indirect emissions are significant, and to report those criteria. In practice this replaces the familiar defence — "we reported the Scope 3 categories we had data for" — with a stated basis: magnitude, level of influence, risk, sector guidance, stakeholder expectation, or a documented combination.

This is one of the most common findings in first-cycle ISO 14064-1 verifications. The inventory itself is often sound; what is missing is the written criterion explaining why five indirect sources were included and eleven were not. Without it, completeness cannot be tested, because there is nothing against which to test it.

The criterion does not have to be elaborate. It has to exist, be applied consistently, and be capable of being read by someone who did not build the inventory.

Getting it right

Five decisions to record before the data work starts.

  1. The consolidation approach

    Control (financial or operational) or equity share. State it once, apply it everywhere, and reconcile it to the group structure. Changing it mid-inventory invalidates the comparison.

    Organizational boundary
  2. The entity and site list

    Every legal entity and site inside the boundary, with ownership percentage and the treatment of joint arrangements. This list is the completeness test.

    Boundary evidence
  3. The significance criteria

    The written basis for deciding which indirect emissions are reported, applied to every category from 3 to 6, including those the criteria exclude.

    Clause requirement
  4. The base year and the recalculation policy

    The base year, why it was chosen, and the events that trigger recalculation — structural change, methodology change, error correction above a stated threshold.

    Comparability
  5. The GWP source

    Which IPCC Assessment Report the global warming potentials come from, and the version applied consistently across all gases and all years shown.

    Quantification
All five are decisions, not measurements. Each takes an hour to record and, left unrecorded, each costs several days to reconstruct under verification.
Practical note

If your inventory is already built on scopes.

Nothing has to be rebuilt. Report against ISO 14064-1:2018 categories, keep a mapping table showing how each existing data stream lands in a category, and add the significance criteria you were applying implicitly. That is usually two documents and a restructured report — not a new inventory.

Where the organisation also reports to the GHG Protocol for a disclosure platform, both presentations can coexist provided the underlying data is identical and the mapping is documented. A verifier will test that they reconcile; a difference between them that nobody can explain is a finding.

Primary sources

  1. ISO 14064-1:2018 — Specification with guidance at the organization level, including the six categories and significance criteria — www.iso.org/certification.html (checked 01 September 2026)
  2. ISO 14064-3:2019 — verification requirements applied to organizational inventories — www.iso.org/certification.html (checked 01 September 2026)
  3. ISO 14066:2023 — competence requirements for validation and verification teams — www.iso.org/certification.html (checked 01 September 2026)

Editorial note. Author and technical review above are editorial functions. They are separate from the independent technical review and the decision functions required under ISO/IEC 17029:2019, which apply to validation and verification engagements and not to published articles. Nothing on this page is advice on a specific engagement, and nothing here extends or replaces the accreditation records.

Describe the claim — not the service.

Tell us what must be relied on, who will rely on it and by what date. We will confirm the correct programme, evidence requirement and responsible entity — or tell you it is outside our scope.