Building an Integrated Management System

When an organization implements a quality management system, adds an occupational health and safety management system, and then introduces an environmental management system, it may fall into a common trap: creating three separate systems within the same organization.

One policy for quality, another for health and safety, and a third for the environment. Three document-control mechanisms. Three audit programmes. Three management-review meetings. Three separate processes for managing risks, corrective actions, and training.

The result is not necessarily better management. It may instead produce more documents, more meetings, and greater overlap in responsibilities.

This is where an Integrated Management System (IMS) becomes valuable.

The fundamental idea is not to compress ISO 9001, ISO 45001, and ISO 14001 into a single file. It is to manage their common requirements through one organizational system while retaining the specialized requirements of each discipline where necessary.

ISO explains that management-system standards use a common harmonized structure, making it easier to operate one management system capable of meeting the requirements of multiple standards simultaneously.

What Is an Integrated Management System?

An Integrated Management System is an organizational framework that brings two or more management systems together within one coordinated method of managing the organization.

One of the most widely used models integrates:

• ISO 9001 for quality management.
• ISO 45001 for occupational health and safety management.
• ISO 14001 for environmental management.

Integration does not eliminate the distinct purpose of each standard.

Quality management addresses the quality of products and services, customer satisfaction, and process effectiveness. ISO 9001 defines requirements for establishing, maintaining, and continually improving a quality management system.

Occupational health and safety management focuses on hazards, risks, worker health, consultation and participation, compliance, emergency preparedness, and continual improvement in occupational health and safety performance.

Environmental management focuses on environmental aspects and impacts, environmental obligations, resource use, environmental performance, and continual improvement. The current edition is ISO 14001:2026, which has also strengthened alignment with other management-system standards.

The objective is therefore:

One organizational management system containing three specialized dimensions.

Why Can ISO 9001, ISO 45001, and ISO 14001 Be Integrated?

ISO management-system standards are built around a Harmonized Structure.

This structure provides a common clause sequence, shared core text, and similar fundamental concepts. It allows organizations to integrate multiple systems instead of operating each one as an isolated framework.

ISO explains that this common structure is particularly useful for organizations seeking to operate an integrated management system that meets the requirements of two or more standards.

The standards consequently share several management-system subjects, including:

• Organizational context.
• Leadership.
• Planning.
• Risks and opportunities.
• Competence and awareness.
• Communication.
• Documented information.
• Performance evaluation.
• Internal auditing.
• Management review.
• Nonconformity and corrective action.
• Continual improvement.

Integration should begin within this common area.

The Golden Rule: Integrate Common Processes, Not Clause Numbers

One of the most significant mistakes in IMS projects occurs when the implementation team opens the three standards and creates an enormous table showing that:

Clause 4 of ISO 9001 corresponds to Clause 4 of ISO 45001 and Clause 4 of ISO 14001.

Such a table can be useful for technical verification, but it is not the best way to build a functioning management system.

Start with the organization’s processes.

Ask:

• How do we manage risks?
• How do we approve documents?
• How do we determine competence requirements?
• How do we manage change?
• How do we address problems?
• How do we conduct audits?
• How does management review performance?

Then design each common process to accommodate the applicable quality, occupational health and safety, and environmental requirements.

True integration takes place in operations—not merely in a standards-correlation matrix.

Stage One: Diagnose Existing Systems Before Integration

If an organization already operates ISO 9001 and intends to add occupational health and safety and environmental management, it should not begin by building an entirely new IMS from the ground up.

Start by assessing the current state.

Determine:

• What operates effectively and should be retained?
• What can be expanded to serve all three systems?
• What has been duplicated?
• What needs to be redesigned?
• What practices exist but remain undocumented or disconnected?
• What controls are ineffective despite being formally documented?

For example, the organization may already have an effective document-control procedure under its quality management system.

Instead of creating one additional procedure for health and safety and another for environmental management, the existing procedure can be evaluated and expanded to cover all relevant documented information.

This is the first genuine opportunity to reduce administrative complexity.

Stage Two: Define the IMS Scope Clearly

Everyone should understand what the integrated system covers.

Consider the following questions:

• Does it include all organizational locations?
• Does it apply to one factory or several branches?
• Are all processes included?
• Which products, services, and activities fall within the scope?
• Who are the relevant interested parties?
• Which legal, regulatory, contractual, and other requirements apply to quality, occupational health and safety, and the environment?

Establish one clear scope for the Integrated Management System while explaining any justified differences between the scopes of the individual standards.

An ambiguous scope may later produce conflicting records, unclear responsibilities, and unnecessary auditing complexity.

Stage Three: Build One Process Map

Instead of maintaining:

• One process map for quality.
• Another for occupational health and safety.
• A third for environmental management.

Begin with a map of the organization itself.

It may include core and supporting processes such as:

• Sales.
• Design.
• Procurement.
• Production.
• Maintenance.
• Warehousing.
• Human resources.
• Other support services.

Then examine each process from three perspectives.

For example, within production:

• Quality perspective: What requirements ensure product conformity?
• Occupational health and safety perspective: What workplace hazards are associated with the process?
• Environmental perspective: What environmental aspects and impacts arise from it?

The process itself then becomes the center of management—not the standard.

This is a defining difference between an integrated system that works and three separate systems that have merely been combined administratively.

Stage Four: Develop an Integrated Policy Where Appropriate

There is little administrative value in asking employees to read three similar policies when the organization can communicate one clear and integrated direction.

An integrated management policy may cover the organization’s commitments to:

• Quality.
• The health and safety of workers.
• Environmental protection.
• Applicable legal and regulatory requirements.
• Continual improvement.

The policy must still satisfy the relevant requirements of each management-system standard.

The number of pages is not the issue. What matters is the clarity and adequacy of the organization’s commitments.

An organization may choose to retain certain policies separately for legal, regulatory, contractual, or operational reasons. Integration should never become an objective in itself.

Effective integration reduces complexity. It does not create new complexity in the name of integration.

Stage Five: Unify Risk Management Without Confusing Different Types of Risk

This stage requires careful design.

An organization can establish one organizational framework for managing risks and opportunities, but it should not combine every type of risk into a single matrix in a way that removes its technical meaning.

Quality risks may relate to:

• Product nonconformity.
• Service failure.
• Supplier failure.
• Delayed delivery.
• Inaccurate specifications.
• Process variation.

Occupational health and safety risks may relate to:

• Machinery.
• Hazardous energy.
• Hazardous substances.
• Working at height.
• Vehicle movement.
• Other activity-specific hazards.

Environmental aspects and risks may relate to:

• Waste.
• Emissions.
• Resource consumption.
• Spills.
• Discharges.
• Other environmental impacts arising from operations.

The governance structure, general methodology, escalation rules, responsibilities, and follow-up process can be unified while retaining the technical assessment tools required by each discipline.

The governing rule is:

Unified governance, with specialized assessment where necessary.

Stage Six: Establish One System for Documented Information

This is one of the areas in which an IMS can reduce administrative effort quickly.

Instead of maintaining three document-control procedures, three numbering systems, and three master document lists, establish one system for managing documented information.

The system should determine:

• How documents are created.
• Who reviews them.
• Who approves them.
• How revisions are controlled.
• How the correct version reaches the intended user.
• How records are retained and protected.
• How obsolete documents are prevented from unintended use.

These rules can then be applied to quality, occupational health and safety, and environmental documentation.

However, unification does not mean placing every record into the same form.

The organization may still need:

• A separate occupational health and safety risk register.
• A separate environmental aspects register.
• A specialized quality-inspection form.

These records serve different technical purposes.

The principle is to unify the control mechanism, not to force unrelated technical information into one document.

Stage Seven: Integrate Competence and Training Management

The quality department should not maintain one competence matrix while the health and safety function maintains another and the environmental function creates a third.

The organization can develop one institutional competency matrix linking each role to the requirements its holder must satisfy.

For example, a machine operator may simultaneously require:

• Operational competence related to product quality.
• Safety training related to machinery hazards.
• Environmental awareness related to waste or the materials being used.

From the employee’s perspective, these are not three separate systems.

They are the competence requirements of one job.

The Integrated Management System should reflect this operational reality.

A unified competency-management process may cover:

• Role requirements.
• Required qualifications.
• Technical skills.
• Health and safety competence.
• Environmental awareness.
• Training needs.
• Training delivery.
• Evaluation of learning.
• Verification of competence.
• Refresher-training requirements.

Stage Eight: Integrate Nonconformity and Corrective-Action Management

A problem may originate from:

• A customer complaint.
• An occupational health and safety incident.
• An environmental noncompliance.
• An internal audit finding.
• A product or service failure.
• A legal or regulatory issue.

The administrative method for handling these cases can follow one common process:

Record the case → Contain the problem where necessary → Analyze the cause → Define the action → Assign an owner and deadline → Verify implementation → Evaluate effectiveness

The organization does not need three different administrative mechanisms for the concept of corrective action.

However, the technical investigation and analysis will vary according to the type of event.

An injury incident is not the same as a customer complaint, and an environmental spill is not the same as a defective product.

Once again:

Unify the management process without eliminating technical specialization.

Stage Nine: Implement an Integrated Internal Audit Programme

One of the greatest benefits of an IMS is the transition from three separate audit programmes to one process- and risk-based integrated audit programme.

Instead of auditing the procurement department three times—once for quality, once for health and safety, and once for environmental management—the organization can conduct one audit of the procurement process covering the applicable requirements of all three systems.

During a single audit, the auditor may review:

• Supplier evaluation from a quality perspective.
• Relevant occupational health and safety requirements for contractors, purchased equipment, or hazardous materials.
• Environmental criteria applied to procurement where relevant.
• Documented information and approvals.
• Process risks and controls.
• Previous nonconformities and corrective actions.

In May 2026, ISO published ISO 19011:2026, the current edition of its guidance for auditing management systems. It addresses audit principles, the management of audit programmes, and the conduct of management-system audits.

IAC’s training materials also establish that its IMS approach uses integrated auditing instead of unnecessarily repeating separate audit programmes for each management system.

An integrated audit should nevertheless be designed carefully. It requires auditors who collectively possess the competence needed to assess the applicable quality, occupational health and safety, and environmental requirements.

Stage Ten: Conduct One Management Review That Supports Decision-Making

One of the clearest forms of unnecessary administrative complexity is holding:

• A quality management-review meeting.
• A health and safety management-review meeting.
• An environmental management-review meeting.

Often, the same people attend all three meetings and discuss interrelated issues.

A mature IMS can use an integrated management review.

During this review, leadership examines one organizational picture:

• Are customers satisfied?
• Are processes achieving their intended results?
• What are the principal risks and opportunities?
• How is occupational health and safety performance developing?
• Are there compliance issues?
• How is environmental performance changing?
• What were the audit results?
• Which problems are recurring?
• What resources are required?
• What decisions must management make?

The purpose is not to close a clause in three separate standards. It is to provide management with one coherent picture for decision-making.

The review should still ensure that all relevant inputs and required outputs of the applicable standards are addressed.

Stage Eleven: Build an Integrated Performance Dashboard

Integration does not mean combining all indicators into one number.

It means establishing one management dashboard that enables leadership to review performance in a balanced and coordinated way.

The dashboard may include separate indicators for:

• Quality.
• Occupational health and safety.
• Environmental performance.

Each indicator should have:

• A clear definition.
• An owner.
• A target.
• A measurement frequency.
• A reliable data source.
• A performance trend.
• A defined response when performance deviates.

IAC’s IMS training methodology identifies integrated performance indicators as a practical output, alongside the process map, IMS documentation structure, requirements-integration matrix, and integrated audit model.

In this context, integrated indicators mean that management reviews them through one performance-management system. It does not mean turning a safety indicator into a quality indicator or combining technically unrelated measurements.

What Should Be Integrated, and What Should Remain Specialized?

The decision can be simplified through the following distinction:Processes that can often be integratedAreas that usually require specialized contentOrganizational contextProduct- and service-specific quality risksGeneral governance and responsibilitiesHazard identification and occupational health and safety risk assessmentManagement of documented informationIdentification and evaluation of environmental aspects and impactsCompetence and training managementTechnical operational controls for each disciplineOrganizational communicationDiscipline-specific legal and regulatory requirementsManagement of changeSpecialized emergency arrangements where necessaryInternal auditingTechnical measurements and regulatory monitoringNonconformity and corrective actionSpecialized inspection and testing methodsManagement reviewRecords specifically required by a standard or applicable legislationContinual improvementAny procedure that cannot be unified without reducing effectiveness

The objective is not to achieve the highest possible percentage of integration.

The objective is to achieve the lowest practical level of complexity while preserving the effectiveness of every management-system discipline.

What Mistakes Make an IMS More Complicated Instead of Simpler?

1. Combining Documents Without Eliminating Duplication

Placing all procedures from the three systems into one large manual and calling it an IMS does not create genuine integration.

If the same activity still has multiple owners, approval paths, forms, and reporting methods, the duplication remains.

2. Trying to Use One Form for Everything

A shared form is useful when the underlying process is genuinely the same.

It becomes an administrative burden when it attempts to combine unrelated technical information merely to demonstrate integration.

3. Building the System Around the Quality or HSEQ Function

The IMS should be built around process owners and operational responsibilities.

The quality or HSEQ function may coordinate the system, but it cannot own every organizational process.

4. Treating the IMS as a Documentation Project

A genuine Integrated Management System should be visible in:

• Procurement.
• Production.
• Maintenance.
• Warehousing.
• People management.
• Operational planning.
• Management decision-making.

If integration exists only in manuals and procedures, the operational system remains fragmented.

5. Integrating Risks Until Technical Meaning Is Lost

Quality risks, occupational health and safety hazards, and environmental aspects can operate under common governance. They do not become one identical category of risk.

Each discipline may require different technical methods, scales, criteria, expertise, and controls.

6. Insisting That Everything Must Be Shared

Sometimes a specialized procedure is clearer and more efficient.

Effective integration is selective and purposeful. It does not force every activity into one common document.

Does an IMS Mean One Certificate?

A distinction must be made between the management system and the certification process.

An organization can operate one Integrated Management System covering several standards simultaneously. ISO’s harmonized structure was designed in part to facilitate this form of integration.

However, the structure of the external audit and the form, number, and scope of certificates depend on:

• The certification body.
• Its audit and certification arrangements.
• The scope of certification.
• The accreditation applicable to the certification activity.
• Other relevant requirements.

An IMS should therefore not be described as a separate “ISO certificate” in itself.

It is a method for managing several management systems within one integrated organizational framework.

ISO itself does not issue certificates to organizations. Where certification is sought, it is conducted by an independent certification body.

Can Management Systems Be Integrated Gradually?

Yes, and gradual integration is often more practical.

If an organization already has a mature ISO 9001 system, it can use that system as a foundation and expand its common processes to accommodate occupational health and safety and environmental requirements.

For example, the organization may develop its existing arrangements for:

• Documented information.
• Competence.
• Internal auditing.
• Corrective action.
• Management review.

These processes can be extended instead of being discarded and replaced.

However, the organization should conduct a Gap Analysis before integration to determine whether the existing processes are genuinely suitable or require redesign.

The existing system should not be allowed to constrain the new systems merely because it was implemented first.

What Are the Current Editions of the Standards in 2026?

This is an important consideration when building an IMS.

As of 17 August 2026, ISO 9001:2015 remains the current published edition of the quality management standard. ISO expects the revised edition to be published in September 2026, so organizations developing an IMS should take the approaching transition into account.

ISO 45001:2018 also remains the current published edition. ISO confirmed its review in 2024, and a new edition is currently at the Draft International Standard stage.

For environmental management, ISO 14001:2026 became the current edition in April 2026. It provides stronger alignment with the harmonized structure used across ISO management-system standards.

In addition, ISO 19011:2026 became the current edition of the guidelines for auditing management systems in May 2026.

Building an Integrated Management System in 2026 therefore requires active management of standards transitions, rather than relying entirely on older templates developed around previous editions.

A Simplified Structure for an Effective IMS

Instead of creating three independent systems, the organization can structure its IMS as follows:

Organizational Leadership and Governance

This establishes direction, accountability, policy, responsibilities, and decision-making arrangements.

One Framework for Context, Planning, Risks, and Opportunities

This provides common governance while allowing specialized evaluation methods where required.

The Organization’s Operational Processes

Quality, occupational health and safety, and environmental requirements are embedded within each applicable process.

One Support System

This covers:

• Competence.
• Awareness.
• Communication.
• Documented information.
• Management of change.

One Performance-Evaluation System

This brings together:

• Monitoring and measurement.
• Integrated internal auditing.
• Management review.
• Performance reporting.

One Improvement Framework

This governs:

• Nonconformity.
• Corrective action.
• Verification of effectiveness.
• Continual improvement.

Specialized tools and technical controls remain beneath this shared structure where necessary.

This is the practical meaning of an IMS:

One management system—not three systems stored beside one another.

What Is IAC’s Role in Building an Integrated Management System?

IAC’s official training catalogue identifies an Integrated Management Systems pathway designed to bring different management systems together within one organizational framework that reduces duplication and strengthens governance and consistency in decision-making.

The pathway includes the integration of shared processes such as:

• Risk management.
• Documented information.
• Internal auditing.
• Management review.

Its identified practical outputs include:

• An integrated process map.
• An IMS documentation structure.
• A requirements-integration matrix.
• An integrated audit model.
• Integrated performance indicators.

IAC approaches management-system development through its institutional methodology:

Objective Diagnosis → Tailored Design → Phased Implementation → Internal Capability Building → Impact Measurement

The objective is not to merge three procedure manuals. It is to build a system that process owners can use, manage, and sustain.

Frequently Asked Questions

Is It Better to Integrate ISO 9001, ISO 45001, and ISO 14001 From the Beginning?

If an organization is starting from the beginning and has made a clear decision to implement all three standards, designing the systems as an integrated framework may be more efficient than building three separate systems and attempting to merge them later.

If systems already exist, they should first be assessed to determine what can be integrated and what should be retained or redesigned.

Can the Organization Create One IMS Manual?

Yes, but having one manual is not a requirement for operating an Integrated Management System.

The determining factor is how the organization manages its processes, responsibilities, risks, documented information, auditing, performance, and improvement—not how many manuals it maintains.

Must All Procedures Be Shared?

No.

A common process should be integrated when doing so is logical and effective. A specialized technical procedure should remain separate when that arrangement provides greater clarity, control, or effectiveness.

Can One Internal Audit Cover All Three Standards?

Yes.

The organization can establish an integrated audit programme covering the requirements applicable to its different processes. ISO 19011:2026 provides a unified framework for managing and conducting management-system audits.

The programme should still ensure that the audit team has the necessary collective competence and that all relevant requirements are adequately covered.

Does an IMS Reduce the Number of Documents?

A well-designed IMS can substantially reduce duplication.

However, the objective is not to minimize documents at any cost. The organization must retain the documented information necessary to operate its management system and demonstrate its effectiveness, without maintaining repetitive copies that add no value.

Can an Organization Operate an IMS Without Certification?

Yes.

ISO explains that certification is not required for an organization to benefit from implementing management systems. An organization can establish and operate an IMS without applying to a certification body.

Conclusion

A successful Integrated Management System does not mean:

ISO 9001 + ISO 45001 + ISO 14001 = Three systems stored in one folder

It means:

One organizational system that manages common processes once while retaining the specialized requirements of each discipline wherever the organization needs them.

Begin with one process map.

Integrate the management of documented information, competence, change, auditing, nonconformity, corrective action, and management review.

Embed quality, occupational health and safety, and environmental requirements into operational processes instead of creating parallel administrative structures.

Retain specialized technical assessments, controls, measurements, and records where they remain necessary.

Through this approach, the IMS becomes a tool for reducing duplication and improving decision-making rather than an additional layer of administration.

To request an initial diagnostic session assessing the feasibility of integrating quality, occupational health and safety, and environmental management systems within your organization, contact IAC to evaluate the current state, identify the gaps, and develop an appropriate integration roadmap.