ISO 45001 integrated management system: running safety with ISO 9001 and ISO 14001 without diluting it

Can ISO 45001 run inside one system with ISO 9001 and ISO 14001?

Yes. ISO 45001 was written to the same clause skeleton as the quality and environmental standards, and most organisations that hold all three run them as one QHSE system with a single owner for each process. A supervisor who checks a finished part, segregates the offcuts and signs a hot-work permit does quality, environmental and safety work in one shift; three manuals make that three jobs.

The real question is what careless integration costs safety. Safety is usually bolted onto an older ISO 9001 frame. That works for document control and competence records; it fails when a quality-style risk register replaces the hazard register, or a customer-focused review leaves no room for incidents and worker concerns.

The common skeleton, and why the clause numbers do not all match

ISO's management system standards follow a template in Annex SL of the ISO/IEC Directives, the harmonised structure. It fixes the order of clauses 4 to 10 and much of their core wording, so policy, objectives, competence, documented information, internal audit, management review and corrective action read almost alike in each standard.

Two departures from the template are easy to see in ISO 45001. Clause 5 is titled Leadership and worker participation, and adds 5.4 on consulting workers and involving them in decisions. Clause 10 covers incidents alongside nonconformities. It is also a step behind: ISO 9001:2026 and ISO 14001:2026 follow the latest version of the structure, while ISO 45001:2018 was drafted to the earlier one. Management of change, for example, sits at 8.1.3 in ISO 45001, and its improvement clause keeps three sub-clauses where the 2026 editions now have two.

So organise the system by process, with a short cross-reference to each standard's clauses. When the revised ISO 45001 arrives, the cross-reference changes; the processes rarely do.

What ISO 45001 brings that quality and environment do not

Five features of ISO 45001 have no counterpart in the other two, and an integrated system must show each as clearly as a stand-alone one would.

• Workers in the decisions. Clause 5.4 expects consultation and participation of workers, non-managerial workers included, and clause 10.2 asks for their participation in incident investigation. A combined committee that only managers attend does not meet it.
• Controls in a set order. Clause 8.1.2 ranks responses to a hazard from elimination down to protective equipment. A risk matrix borrowed from quality planning has no such ranking.
• People who are not your employees. A worker is anyone doing work under your control, so agency staff and contractors fall inside the system, and 8.1.4 governs contractors and outsourcing.
• The right to step away. Awareness under 7.3 includes workers knowing they can remove themselves from imminent and serious danger, a point auditors often test by asking workers directly.
• Incidents, near misses included. Clause 10.2 treats any work-related occurrence that could have caused injury or ill health as an incident, to be reported, investigated with worker participation and fed back into the risk assessment.

The detail of each belongs to other guides in this series: the hazard identification guide, the contractor management guide and the legal register guide.

Mapping table: the ISO 45001 view of shared requirements

Clause numbers are those of ISO 45001:2018.

Running one document set, one audit programme and one review

Documents written around the work

Write one procedure per shared process and let job-level documents such as method statements and permits carry the safety controls in hierarchy order. The documentation guide sets out what ISO 45001 requires in writing and what is merely habit.

An internal audit programme that reaches the shop floor

Plan by process and site, then check the safety coverage: every shift, every high-risk activity and the contractors on site. Auditors from a quality background often trace an order to invoice and never reach the loading bay at night; pair or train them (see the internal audit guide).

A management review with the safety inputs visible

One meeting is enough if the agenda names the OH&S inputs separately: incident trends, the results of compliance evaluation, consultation and participation of workers, and the risks and opportunities from hazard review. The management review guide covers the record.

How the certification body audits an integrated QHSE system

Accredited certification bodies plan integrated audits under IAF MD 11: the time each standard would need alone, reduced for genuine integration, multi-standard staff and multi-qualified auditors, or increased for complexity, with the reasoning recorded. Ask to see it with the quotation.

Two OH&S rules apply whatever the integration. IAF MD 22 requires the ISO 45001 audit to observe operational activities, typically through a tour of the work sites, and limits sampling where sites carry different risks. IAF MD 5 bases OH&S audit time on effective personnel, contractors under your control included, and on the risk category of the work. A plant with a large contractor population will not see its safety audit time shrink simply because its documents are shared.

A weakness in a shared process, such as document control or corrective action, counts against every standard that uses it; a gap in worker consultation counts against ISO 45001 alone. The certification body guide explains how to confirm accreditation for all three standards in your sector.

Keeping the integrated system in step through three editions

The benefit of integration arrives over the certification cycle: once all three certificates sit with one body and the cycles align, you prepare for one surveillance visit a year (see the surveillance and recertification guide).

The next three years bring three edition changes. Global ACI has set the ISO 14001:2026 transition to end on 30 April 2029. The ISO 9001:2026 transition is expected to run to 30 September 2029, subject to confirmation by the accreditation bodies. For the safety standard, ISO's expected date for the new edition is the first half of 2027, and its transition terms are not yet set. A process-based system absorbs each as an update to the cross-reference and the processes affected; ask your certification body whether transitions can be assessed at scheduled audits, and see the ISO 45001 revision guide.

ISO 45001 integrated management system: questions buyers ask