How to Build an Integrated Management System for ISO 9001, 14001 and 45001
An integrated management system (IMS) unifies ISO 9001:2015 (Quality), ISO 14001:2015 (Environment) and ISO 45001:2018 (Health & Safety) into a single coherent framework instead of running three parallel sets of policies, procedures, records and audit schedules. Integration is made possible by Annex SL, the high-level structure ISO applies to every management system standard, which prescribes a common 10-clause framework covering context, leadership, planning, support, operation, performance evaluation and improvement. Because all three standards follow this structure, overlapping requirements — document control (Clause 7.5), internal audit (Clause 9.2), management review (Clause 9.3) and corrective action (Clause 10.1) — can be addressed through shared processes. Typical results include 30-40% audit cost reduction, roughly 40% less documentation, a unified risk register and a single management review meeting. The 2026 revisions of ISO 9001 and ISO 14001 reinforce integration through shared climate change, digital readiness and data-driven decision-making themes.
If your organisation holds — or is working towards — more than one ISO certification, you already know the pain: separate documentation sets, separate audits, separate management reviews, and processes that don't quite talk to each other. An integrated management system (IMS) solves this by unifying ISO 9001:2015 (Quality), ISO 14001:2015 (Environment) and ISO 45001:2018 (Health & Safety) into a single, coherent framework.
With the 2026 revisions of ISO 9001 and ISO 14001 introducing shared themes — climate change, digital readiness, data-driven decision-making — there has never been a better time to integrate. Here is a practical guide to getting it done.
What Is an Integrated Management System?
An IMS brings multiple management standards under one roof. Instead of maintaining three parallel sets of policies, procedures, records and audit schedules, your organisation operates a single system that satisfies the requirements of all three standards simultaneously.
This is made possible by Annex SL, the high-level structure that ISO applies to all management system standards. Annex SL prescribes a common 10-clause framework: Clause 4 (Context of the Organisation), Clause 6 (Planning), Clause 7 (Support), Clause 9 (Performance Evaluation) and so on. Because ISO 9001, 14001 and 45001 all follow this structure, their overlapping requirements can be addressed through shared processes rather than duplicated ones.
The Business Case for Integration
Reduced audit burden: Three separate certification audits become one integrated audit. This means fewer audit days, lower certification body fees, and less disruption to operations. For a mid-sized manufacturer, this alone can save 30–40% of annual compliance costs.
Simpler documentation: Document control, internal audit procedures, management review agendas, corrective action processes — these are nearly identical across all three standards. An IMS replaces three versions of each with one.
Better risk visibility: When quality risks, environmental aspects and health & safety hazards sit in the same risk register, interactions between them become visible. A change in raw material supplier, for instance, may affect product quality (ISO 9001), generate new waste streams (ISO 14001) and introduce handling hazards (ISO 45001). An IMS captures all three dimensions in a single assessment.
Stronger leadership engagement: Senior management reviews one system, not three. Decisions about resource allocation, strategic direction and improvement priorities are made holistically rather than in silos.
Step-by-Step: Implementing an IMS
1. Conduct a gap analysis. Map your current processes against the requirements of ISO 9001, ISO 14001 and ISO 45001. Identify what you already have in place, where there are gaps, and — critically — where your existing systems overlap. The overlaps are your integration opportunities.
2. Identify shared processes. Using the Annex SL clause structure as your guide, list processes that serve more than one standard. Document control (Clause 7.5), internal audit (Clause 9.2), management review (Clause 9.3) and corrective action (Clause 10.1) are obvious candidates.
3. Write an integrated policy and set unified objectives. Replace three separate policies with one integrated statement covering quality, environmental and occupational health & safety commitments. Set SMART objectives and map each one to the relevant standard clauses.
4. Build your documentation structure. Create an integrated manual, unified procedures and a cross-reference matrix showing which standard clauses each document covers. This matrix is invaluable during audits.
5. Train, audit and certify. Ensure staff understand the integrated system and their roles within it. Train internal auditors across all three standards and plan audits by process rather than by standard. Once stable, invite the certification body for an external audit.
How the 2026 Revisions Support Integration
The upcoming revisions strengthen the case for integration. ISO 9001:2026 introduces climate change considerations into quality planning, requiring organisations to assess how climate risks affect product quality and supply continuity. ISO 14001:2026 deepens its life-cycle perspective and reinforces climate commitments. Both revisions emphasise digital readiness, knowledge management and data-driven improvement.
These shared themes mean that organisations running separate systems will find themselves duplicating climate assessments, technology evaluations and knowledge management processes across standards. An IMS handles these once, consistently.
ISO 45001 revision is expected in 2027, following the same harmonisation direction. Organisations that build their IMS now will be well positioned for a smooth transition.
Real-World Example: A Construction Firm
Consider a mid-sized construction company holding ISO 9001, ISO 14001 and ISO 45001 certifications. Under separate systems, the firm conducts three rounds of internal audits per year, maintains three document control registers, and holds three management review meetings — each producing its own set of actions that occasionally contradict one another.
After integrating, the firm runs a single cycle of process-based internal audits, maintains one document control system, and holds quarterly integrated management reviews. Documentation volume drops by roughly 40%. More importantly, when a project risk emerges, the integrated risk assessment covers quality, environmental and safety implications in one go.
Getting Started with Your IMS
Building an integrated management system is not about adding complexity — it is about removing it. The Annex SL structure already provides the blueprint. The 2026 revisions are reinforcing the connections between standards. The question is not whether to integrate, but when.
ISODraft's sector-specific document packages provide ready-made, interoperable templates for ISO 9001, ISO 14001 and ISO 45001. Rather than building your documentation from scratch, you can start with a professionally structured foundation and adapt it to your organisation. Explore the ISODraft document module.