Is the risks evaluation necessary

Answer:

The standard requires organization to determine risks and opportunities that need to be addressed to and to keep records of such risks and opportunities. How will organization know whether the risk should be addressed or not without evaluation? The evaluation doesn't have to be structured neither any methodology is required but the organization simply must decide what risks should be addressed and this is practically evaluation.

For more information, see:
- Risks and opportunities in ISO 14001:2015 – What they are and why they are important https://advisera.com/14001academy/blog/2016/03/07/risks-and-opportunities-in-iso-140012015-what-they-are-and-why-they-are-important/