One system carrying every standard
Quality, environment, safety and food safety on one document set, one audit programme and one management review.
- Typical combination
- ISO 9001, 14001 and 45001
- Shared clauses
- Context, leadership, support, audit, review, improvement
- Integration review
- Two to three days across the existing sets
- Documentation
- Within a week of the gap analysis
- Why now
- 9001 and 14001 both moved editions in 2026
An integrated management system runs several standards through one set of documents and one set of management processes. The standards share a harmonized structure, so document control, internal audit, management review, competence and corrective action are written once and audited once.
- 01 Enquiry
- 02 Gap analysis
- 03 Plan
- 04 Build
- 05 Embed
- 06 Internal audit
- 07 Close out
- 08 Management review
- 09 Handover
One system carrying every standard sits at step 4 of the readiness cycle. You receive the documented management system.
Three binders, three audits, one process
The cost of separate systems is not storage. It is that the same purchasing process gets audited three times a year by three people asking about three clauses.
Separate systems drift. The quality procedure describes a supplier approval step the environmental procedure contradicts, and the safety file has its own contractor rules that nobody in purchasing has read. Each set is internally consistent and the three of them together describe a company that does not exist.
The other cost arrived this year. ISO 9001 and ISO 14001 were both revised in 2026. An organisation with one shared document set re-issues its management documents once. An organisation with three sets re-issues the same procedures twice, months apart, with all the version-control exposure that carries.
Integration is not merging three manuals into one enormous manual. It is deciding which processes are genuinely shared, writing those once, and keeping the discipline-specific parts separate where they belong. The aspects register stays environmental. The hazard register stays safety. Document control belongs to everybody.
What gets merged and what stays separate
| Element | Merged or separate | Why |
|---|---|---|
| Context and interested parties | Merged, with discipline-specific issues listed under one analysis. | One analysis, several lenses |
| Policy | Usually merged into one integrated policy, provided each discipline's commitments are explicit. | Merged, carefully |
| Document control and records | Merged. One master list, one retention rule, one template family. | Merged |
| Competence and awareness | Merged into one matrix covering quality, environmental, safety and food safety competence. | Merged |
| Internal audit programme | Merged. One schedule, one auditor pool, each process audited against every clause that applies to it. | Merged |
| Management review | One meeting with every standard's required inputs on one agenda, minuted so each is visibly covered. | Merged |
| Risk registers | Separate. Business risk, environmental aspects and OH&S hazards use different methods and different criteria. | Separate, deliberately |
| Operational controls | Separate where the discipline demands it, shared where the same work instruction serves two standards. | Case by case |
The merged set
A cross-reference matrix
Every document against every standard and clause it satisfies. This is what an auditor uses to navigate an integrated system, and its absence is what makes integrated audits painful.
One master list and one template family
The merged document set, versioned once, with a single approval route.
An integrated audit programme
One risk-weighted schedule where each audit covers every applicable standard for the process being audited.
One management review pack
An agenda carrying every standard's required inputs, so nothing is missing when the minutes are sampled.
A retirement list
The documents being withdrawn in the merge, which is the step that decides whether the old set quietly survives in someone's folder.
Merging without losing evidence
- 01
Inventory all three sets
Every document across every system, with what it actually does rather than what its title says.
- 02
Decide shared and separate
With your process owners. The argument is worth having once, properly, rather than being settled by whoever writes first.
- 03
Write the shared core
Document control, competence, audit, review and corrective action, written once to satisfy every standard you hold.
- 04
Retire the old set on a date
Withdrawn, not left accessible. A merge that leaves the old documents reachable produces the worst kind of finding.
- 05
Audit the merged system
One programme, first full cycle run across all standards, findings closed before any external audit.
Three document sets merged in one pass
A plant holds ISO 9001, ISO 14001 and ISO 45001 as three separate document sets, with three internal audit programmes and three management reviews.
We inventory all three sets and decide with the process owners what is genuinely shared. Document control, competence, internal audit, management review and corrective action are written once. The aspects register and the hazard register stay separate.
The audit programme becomes one schedule, where each process is audited once against every clause that applies to it. The management review becomes one meeting with every standard's required inputs on the agenda.
ISO 9001 and ISO 14001 both moved to 2026 editions, so both transitions happen in the same pass. The shared documents are re-issued once, the old sets are withdrawn on one cutover date, and the plant keeps a cross-reference matrix showing which document satisfies which clause of which standard.
Integration questions
Can we be audited for all standards in one visit?
Combined audits are normal practice and your certification body will tell you how they run them and how audit time is calculated. The certification decision is still taken per standard. What integration guarantees is that you are not preparing three times.
Does an integrated system mean one certificate?
No. Each standard is still certified on its own terms by your certification body, which decides how the certificates are issued. The integration is in how you run and document the system.
Is now a good time to integrate?
Unusually, yes. ISO 9001:2026 and ISO 14001:2026 both landed this year, so the shared documents are being opened anyway. Doing the merge during the transition costs less than doing it separately afterwards.
We only hold one standard today. Should we build for integration anyway?
If a second standard is likely within two years, yes. Building document control, audit and review to carry more than one standard costs almost nothing at the start and saves a rebuild later.
Will one integrated policy satisfy every standard?
It can, provided each standard's required commitments are explicit in it. A policy that says the right things about quality and mentions safety in a clause is where this goes wrong.
The standards involved
ISO 9001
Usually the anchor system that the others are merged into.
Read moreStandardISO 14001
Environment, with the registers that stay separate.
Read moreStandardISO 45001
Safety, with the worker participation evidence that cannot be merged away.
Read moreServiceInternal audit
One programme covering every standard per process.
Read morePart of one system
Every division keeps records to the same standard, so the second one you need works the way the first one did.
Start with the inventory
Two to three days across your existing sets tells you how much is genuinely duplicated.