Integrated ISO Management System 9001 · 14001 · 45001
Bringing quality, environmental and health & safety management together into one practical system.
Three ISO standards do not need to mean three separate management systems.
The project brought quality, environmental and occupational health & safety requirements together within a single integrated framework, connecting risks, processes, responsibilities, audits, objectives and improvement activity.
The aim was not simply to organise documentation around ISO clauses. It was to create a system that could support everyday management, performance monitoring and continual improvement across the business.
Manufacturing
ISO 9001 · 14001 · 45001
Integrated Management System
One Framework
Control · Assurance · Improvement
Three standards shouldn't mean three separate management systems.
Integration without bureaucracy
Quality, environmental and health & safety requirements all influence the same business. The challenge was to bring them together without duplicating processes, multiplying documents or creating separate systems that people had to navigate depending on the standard.
01
Remove duplication
Common requirements needed to be managed once wherever possible, simplifying documentation, responsibilities, auditing and review rather than repeating the same process for each standard.
02
Connect the standards
Quality, environmental and occupational health & safety risks needed to sit within a common management framework while retaining the controls required by each discipline.
03
Make ISO operational
The system needed to work through normal business processes, ownership, evidence, objectives and performance monitoring, rather than becoming a separate collection of documents maintained primarily for audit.
The objective wasn't to build more ISO documentation. It was to build one management system the business could actually use.
Built around how the business works. Not around three sets of clauses.
One connected framework
The integrated system was structured around business processes, risks and responsibilities. Common requirements could then be managed consistently, while the specific quality, environmental and health & safety controls remained clear where they were needed.
01
Processes
Start with how work actually flows through the business, identifying the activities, interfaces and responsibilities that need to be controlled.
02
Risks & opportunities
Consider quality, environmental and occupational health & safety risks together, rather than assessing each discipline in isolation.
03
Controls
Translate those risks into practical operational controls, procedures, work instructions and evidence appropriate to the activity.
04
Ownership
Make responsibilities clear so that management-system requirements sit with the people and processes capable of controlling them.
05
Evidence
Retain proportionate evidence through operational records, inspections, monitoring, audits and other business information rather than creating records simply for certification.
06
Review & improve
Use objectives, performance indicators, audits, management review and corrective actions to test whether the system remains effective and identify what needs to improve next.
The standards provided the requirements. The business processes determined how those requirements were actually managed.
A management system should help the business manage.
Turning requirements into routine
The next step was to move the integrated framework into normal management activity. Objectives, performance measures, audits, reviews and improvement actions created a cycle for checking whether controls were working and deciding where attention was needed next.
01
Objectives & KPIs
Performance measures gave management visibility across quality, environmental and health & safety activity, helping turn broad commitments into things that could actually be monitored.
02
Internal audit
Integrated auditing tested the management system across the three standards, identifying gaps, trends and opportunities for continual improvement.
03
Management review
Structured review brought performance, objectives, audit findings and improvement priorities back to management for evaluation and decision-making.
04
Action & follow-through
Findings and improvement opportunities were given ownership and tracked through to follow-up, creating a clearer connection between review and practical change.
Performance visibility
The IMS brought operational performance into the same management conversation.
Dashboard reporting was used to provide visibility across areas including incidents, non-conformities, audits, training, environmental performance and completed improvement activity. That meant the management system could be reviewed through evidence rather than relying only on whether documents existed.
Compliance provided the framework. Performance information made the system useful.
Improvement that could be tested, not assumed.
Building system maturity
Gap analysis and internal audit provided recurring checkpoints as the management system developed. The assessments identified weaknesses, created improvement priorities and provided evidence that the system was becoming more established over time.
2023 · Starting Point
68.09%
ISO 45001 gap analysis
An early health & safety management-system assessment provided a baseline and identified areas requiring further development.
2024 · Integrated Review
85.82%
Integrated gap analysis
The later integrated assessment covered the developing management arrangements across ISO 9001, ISO 14001 and ISO 45001.
2025 · System Review
91.03%
Management systems & processes
The subsequent audit showed a more mature framework while continuing to identify opportunities for further improvement.
Reading the figures
The scores show progression, but they are not presented as identical like-for-like measures.
The assessments were carried out at different stages and with different scopes. The value is therefore in the wider trend they demonstrate: weaknesses were being identified, actions were being taken and later assessment found a more developed management system.
The goal wasn't a perfect audit score. It was a system capable of finding weaknesses and improving them.
Findings only matter when something happens next.
Closing the loop
Audit findings, management review and performance information were used to create improvement priorities rather than simply being filed as evidence. Actions could then be owned, followed through and reviewed as part of the next management cycle.
Identify
Audits, reviews and performance monitoring highlight gaps, weaknesses and opportunities.
Prioritise
Findings are considered alongside risk, objectives and business priorities.
Own
Improvement activity is allocated rather than being left as an unowned audit observation.
Act
Improvements are implemented through normal management and operational activity.
Review
Progress is revisited through audit, performance review and management review.
Improvement in practice
The review cycle reached beyond ISO documentation into how the organisation actually operated.
The practical difference
The system created a clearer route from finding a weakness to deciding who would address it, reviewing progress and testing the result again.
Continual improvement stopped being an ISO phrase. It became part of the management cycle.
Less about maintaining ISO. More about managing the business.
The practical shift
Integration changed more than the structure of the management system. Common processes could be managed together, evidence became part of normal activity and performance information provided clearer visibility of where attention was needed.
Separate ISO requirements
Common controls
Shared requirements could be managed once across the integrated system, reducing unnecessary duplication.
Preparing evidence for audits
Evidence from normal work
Operational records, monitoring and review created evidence as part of everyday management rather than primarily for certification activity.
Isolated findings and actions
Clearer accountability
Audit findings and improvement opportunities could be allocated, tracked and revisited through the management cycle.
ISO documents as the focus
Better management visibility
Objectives, KPIs, audits and management review brought performance information together and helped identify priorities for further improvement.
The outcome
One framework connecting compliance, operational control and continual improvement, rather than three parallel systems competing for attention.
Integration should make management simpler. Not ISO more complicated.
One system with a purpose
The project demonstrates that an integrated management system works best when certification requirements sit behind the way the organisation already needs to manage risk, performance, accountability and improvement.
01
Start with the process
Understand how work actually happens first, then apply the relevant quality, environmental and health & safety requirements around those processes.
02
Manage common requirements once
Areas such as document control, competence, auditing, objectives and management review do not need three competing systems simply because three standards apply.
03
Use operational evidence
A stronger IMS uses information generated through normal business activity rather than creating unnecessary records purely to demonstrate compliance during an audit.
04
Build improvement into the system
Audits, performance monitoring and management review should identify weaknesses, create ownership and feed improvement back into the next management cycle.
The real outcome
A management framework capable of connecting quality, environment and health & safety while giving the business clearer control over performance and continual improvement.
Integrated Management System · ISO 9001 · ISO 14001 · ISO 45001
Running more than one ISO standard? Make them work as one.
If ISO 9001, ISO 14001 and ISO 45001 are being managed separately, integration can reduce duplication, simplify auditing and create a clearer management framework for risk, performance and continual improvement.
One System · Three Standards
Integrate the common requirements. Keep the controls that matter. Build a management system people can actually use.