Integrated Management Systems: Combining ISO 9001, 14001 and 45001

If your business holds one ISO certification or you're considering certification for the first time, you've probably come across the idea of an integrated management system (IMS). It's a practical approach that brings quality, environmental and health and safety management together under one framework rather than running them as separate systems.

For many UK businesses, the three most relevant standards are ISO 9001 (quality management), ISO 14001 (environmental management) and ISO 45001 (occupational health and safety). Each one adds value on its own, but combining them into an IMS can save time, reduce duplication and make the whole system easier to manage in practice.

This post explains what an integrated management system is, why the three standards work well together and what integration actually looks like on the ground.

What Is an Integrated Management System?

An integrated management system is a framework that covers the requirements of two or more ISO management system standards. Rather than maintaining separate documentation for each standard, you merge them into one cohesive system.

The reason this works so well is that ISO 9001, ISO 14001 and ISO 45001 all follow the same high-level structure, known as Annex SL (or the Harmonised Structure). This means they share common clause headings, core text and terminology. The structure looks like this across all three standards: context of the organisation (Clause 4), leadership (Clause 5), planning (Clause 6), support (Clause 7), operation (Clause 8), performance evaluation (Clause 9) and improvement (Clause 10).

Because of this shared architecture, elements like management review, internal audit, documented information control, competence requirements and risk-based thinking can be handled once rather than three times over. The discipline-specific requirements, quality control procedures, environmental impact assessments, hazard identification, then sit within that unified structure.

What Does Each Standard Cover?

Before looking at integration, it helps to understand what each standard brings to the table.

ISO 9001 — Quality Management. This is the most widely adopted ISO standard globally. It provides a framework for delivering consistent products and services that meet customer requirements. It covers areas like customer focus, process management, monitoring of customer satisfaction, control of nonconforming outputs and supplier evaluation. For most businesses, ISO 9001 is the starting point.

ISO 14001 — Environmental Management. This standard helps organisations manage their environmental responsibilities in a structured way. It covers things like identifying environmental aspects and impacts, setting environmental objectives, managing waste and emissions, monitoring environmental performance and complying with environmental legislation. With growing expectations around sustainability and net zero commitments, ISO 14001 is increasingly relevant across all sectors.

ISO 45001 — Occupational Health and Safety. This is the standard we work with most closely at DuoDynamic. It provides a framework for preventing work-related injury and ill health, improving OH&S performance and creating safer workplaces. Key requirements include hazard identification, risk assessment, the hierarchy of controls, worker consultation and participation, emergency preparedness and incident investigation. If you'd like a deeper look at what ISO 45001 involves, our blog on what ISO 45001 is and whether you need it covers the fundamentals and our post on ISO 45001 consultancy explains the certification process step by step.

Why Integrate?

Running three separate management systems means three sets of policies, three audit programmes, three management reviews and three lots of documentation to maintain. That's a significant administrative burden, especially for small and medium-sized businesses where the same people are often responsible for quality, environment and health and safety.Integration reduces that duplication in several practical ways.

Fewer audits, less disruption. With an IMS, you can have one combined audit that covers all three standards in a single visit. That means less time spent preparing, fewer days with auditors on site and often lower certification body fees.

One set of core documentation. Policies, procedures, objectives, management review records, training matrices, document control processes, many of these can be written once to cover quality, environment and H&S. You only need discipline-specific documents where the requirements genuinely differ (for example, a COSHH assessment is specific to health and safety, while a customer complaints procedure is specific to quality).

Consistent approach to risk. All three standards use risk-based thinking as a core principle. An IMS lets you manage risks holistically rather than in isolation. A single risk register can capture quality risks (such as product defects), environmental risks (such as pollution incidents) and OH&S risks (such as workplace injuries) in one place, making it easier to see the full picture and allocate resources where they're needed most.

Stronger leadership engagement. When top management reviews one integrated system rather than three separate ones, they get a clearer view of how the organisation is performing across quality, environment and safety. That leads to better-informed decisions and a more joined-up approach to continual improvement.

Simpler for your team. Workers and managers deal with one system rather than three. Training can cover quality, environmental and safety awareness together. Internal communication is more streamlined. And there's less risk of conflicting procedures or priorities pulling people in different directions.

What Does Integration Look Like in Practice?

Integration doesn't mean cramming everything into one massive document. It means designing your management system so that common processes are shared and discipline-specific requirements are clearly addressed within that shared structure.

Here's a practical example. Your internal audit programme would be planned once, covering all three standards. Auditors would review quality, environmental and H&S processes during the same audit cycle, using a combined checklist. The audit findings would feed into one management review, which considers performance across all three disciplines. Some areas that lend themselves naturally to integration include: documented information control (version control, approval, distribution), competence and training records, communication processes, management review and internal audit...

The International Organization for Standardization has published guidance on the integrated use of management system standards and the central message is that integration should make things simpler, not more complicated.

Do You Need All Three?

Not necessarily. Many businesses start with one standard and add others over time as the need arises. ISO 9001 is often the first because so many clients and supply chains require it. ISO 45001 tends to follow where there are significant workplace risks or where tenders demand it, particularly in construction and manufacturing. ISO 14001 is becoming increasingly important as clients, investors and regulators place more weight on environmental performance.

The good news is that if you've already implemented one ISO management system, adding a second or third is significantly easier than starting from scratch. The shared Annex SL structure means much of the groundwork, context analysis, leadership commitment, internal audit processes, document control, is already in place. The HSE also provides practical guidance on occupational health and safety management that complements the ISO 45001 framework.

For businesses in construction, the combination of all three standards can be particularly powerful. Quality management supports consistent project delivery, environmental management addresses waste, emissions and site impact and health and safety management protects workers on what are often high-risk sites. Having an IMS in place can also strengthen your position when bidding for public sector contracts, where multiple certifications are increasingly specified in procurement requirements.

Common Questions About Integrated Management Systems

Is there a single "IMS standard"? No. There's no standalone ISO standard for integrated management systems. Integration is an approach you take when implementing two or more existing standards (such as ISO 9001, 14001 and 45001). Your certification body audits each standard's requirements, they're simply assessed together during a combined audit.

Can I get certified to all three at the same time? Yes. Many certification bodies offer combined audits where they assess compliance with all three standards in one visit. This is often called a multi-standard or integrated audit. You receive separate certificates for each standard, but the audit process is streamlined.

Does integration make audits easier or harder? Generally easier. A combined audit is more efficient because the auditor can review shared processes (like management review and internal audit) once rather than repeatedly. The discipline-specific areas are still assessed individually, but the overall audit time is usually shorter than three separate audits would be.

What if we only want ISO 45001 for now? That's fine. You can implement ISO 45001 on its own and build it in a way that allows for future integration. If your system follows the standard clause structure, adding ISO 9001 or ISO 14001 later becomes a matter of extending what's already there rather than rebuilding from the ground up.

How DuoDynamic Safety Solutions Can Help

At DuoDynamic Safety Solutions, our core expertise is in ISO 45001, ISO 9001 and ISO 14001. Whether you're looking to implement on of the standards as a standalone system or integrate it with existing quality and environmental management arrangements, we can help you build something practical that works for your business.

If you'd like to talk through your options, get in touch for a no-obligation conversation.