Many organizations that hold ISO 9001 are later asked for ISO 14001 (environmental management) or ISO 45001 (occupational health and safety). The common mistake is to build each as a separate system, with its own manual, its own audits, its own review meeting and often its own coordinator. The result is three sets of paperwork describing one business.
The standards were designed to avoid this. All three follow the same ten-clause layout, called the Harmonized Structure, with much of the text in common. That makes it practical to run one management system that meets all three.
What the three standards share
| Clause | Shared element | How to integrate it |
|---|---|---|
| 4 | Context, interested parties, scope | One context review covering customers, regulators, neighbours and workers |
| 5 | Leadership, policy, roles | One policy statement, or three short ones on a page; one responsibility chart |
| 6 | Risks, opportunities, objectives | One register with a column for the type of risk; one set of objectives |
| 7 | Competence, awareness, communication, documents | One training matrix; one document control process |
| 9 | Monitoring, internal audit, management review | One audit programme; one review meeting with a combined agenda |
| 10 | Nonconformity, corrective action, improvement | One process and one log for quality problems, environmental incidents and safety incidents |
What stays specific
Integration does not mean blending everything. Each standard has requirements with no equivalent in the others, mostly in clauses 6 and 8, and these need people with the right knowledge.
- ISO 9001: customer requirements, design and development, control of external providers, production and service provision, release, and nonconforming outputs.
- ISO 14001: environmental aspects and impacts, compliance obligations, a life cycle perspective, and emergency preparedness and response.
- ISO 45001: hazard identification and assessment of health and safety risks, consultation and participation of workers, emergency preparedness, and incident investigation.
Legal requirements deserve particular care. Environmental and health and safety law imposes obligations with penalties attached, and the register of those obligations must be kept by someone competent to interpret them.
Where the standards stand in 2026
All three are being renewed, which makes this a good time to integrate.
| Standard | Status |
|---|---|
| ISO 9001 | New edition published on 16 September 2026; transition by 30 September 2029. See what changed. |
| ISO 14001 | New edition published in April 2026. Certification bodies expect a three-year transition; confirm the date with yours. |
| ISO 45001 | Under revision. A draft was released in 2026 and certification bodies expect the new edition in 2027. |
If you hold two or three certificates, plan the transitions together. Updating the shared core once, to the new wording, is far less work than doing it three times.
How to integrate in five steps
- Map what you have. List the documents, records, meetings and audits of each system side by side. Duplication will be obvious.
- Merge the core. Combine document control, training, internal audit, corrective action and management review first. These give the largest saving for the least risk.
- Combine risk and objectives. One register with quality, environmental and safety entries lets management see priorities across all three. Our article on risk-based thinking describes a simple format.
- Integrate at process level. Add environmental and safety controls to the operating procedure for each process, so that a work instruction covers how to do the job correctly, safely and without harm to the environment.
- Align the audits. Train internal auditors to audit a process against all three standards in one visit, and ask your certification body for a combined audit.
Benefits and trade-offs
| Benefits | Trade-offs |
|---|---|
| Less duplication of documents, meetings and audits | Auditors and coordinators need broader competence |
| One picture of risk for management | A weakness in a shared process, such as corrective action, affects all three certificates |
| Fewer conflicting instructions for employees | Specialist topics can be diluted if no one owns them |
| Combined certification audits can take less total time than separate ones | Combined audits are longer single events and need more preparation |
The trade-offs are manageable if you keep a named owner for each discipline inside the integrated system. Integration removes duplicate administration. It should not remove expertise.
Is integration right for you?
It is the sensible default if you hold, or expect to need, two or more of the standards, and if the same managers are responsible for the activities they cover. It is less attractive if the certificates cover different sites or business units with separate management, or if one discipline is so heavily regulated that it needs its own governance. If you hold ISO 9001 only and expect to add another standard within two years, build your system now so that the shared core is ready to extend.
Want a second pair of eyes? Chmltech helps Canadian organizations build, simplify and audit quality management systems. Book a strategy call or ask a question.
Sources
- ISO: ISO 9001:2026, what businesses need to know
- DQS: ISO 14001:2026 transition guide
- SGS: ISO 45001:2027 key updates and transition guidance
- DNV: Draft version of ISO 45001 released
