Skip to main content
Guide · Updated

Integrated management systems: ISO 9001, ISO 14001 and ISO 45001

ISO 9001, ISO 14001 and ISO 45001 share the same ten-clause structure, which is why organisations run them as one integrated management system rather than three separate ones. This guide covers what genuinely integrates, what does not, whether a single IMS credential exists for individuals, and which PECB courses cover each standard.
By Harry Sidhu — ISO 27001 Lead Implementer · Director and Principal Consultant, Aegentra9 min readLast reviewed

What is an integrated management system?

An integrated management system (IMS) is a single management system that satisfies more than one standard at once. In Australia the usual combination is three: ISO 9001 for quality, ISO 14001 for environment and ISO 45001 for occupational health and safety. Together they are often described as QHSE or HSEQ.

The reason to integrate is not philosophical, it is operational. Run separately, three standards mean three policies, three internal audit programmes, three management reviews, three document control systems and three sets of corrective actions — most of which ask for the same thing in the same words. Integrated, they mean one of each.

Integration is what makes tender compliance affordable for a mid-sized contractor. It is common in construction, civil, facilities management, manufacturing, resources and logistics, where a principal may require all three before you can prequalify.

Annex SL: why these three integrate at all

The three standards integrate because ISO deliberately made them the same shape. Annex SL — the high-level structure — fixes the same ten clauses, in the same order, with shared text and shared definitions across ISO management system standards.

ClauseWhat it coversIntegrates?
4Context of the organisationYes — one context analysis, one interested-party register
5LeadershipYes — one policy can address quality, environment and safety
6PlanningPartly — objectives integrate, the risk work does not
7SupportYes — one competence matrix, one document control, one communication plan
8OperationNo — operational control is technical and standard-specific
9Performance evaluationYes — one internal audit programme, one management review
10ImprovementYes — one nonconformity and corrective action process

That table is the whole argument for integration, and also its limit. Five of the seven substantive clauses genuinely merge. Clause 6 and Clause 8 do not, and pretending otherwise is where most integrated systems fail their audit.

What is shared, and what is not

The framework merges. The technical content does not — each standard asks a different question of your operations.

StandardIts distinctive requirementCannot be merged with the others because
ISO 9001Customer focus, process approach, product and service conformityQuality risk is about meeting customer requirements, not harm
ISO 14001Environmental aspects and impacts, compliance obligations, lifecycle perspectiveAspects are assessed for environmental impact, under normal, abnormal and emergency conditions
ISO 45001Hazard identification, worker consultation and participationClause 5.4 worker participation has no equivalent in the other two, and cannot be delegated to a manager

Integration must preserve the different assessment criteria and evidence for quality risks, environmental aspects and occupational hazards. Records may be separate or integrated if each standard’s requirements remain traceable; the number of registers is not itself a conformity test.

Is there a single IMS certification?

This is the question that costs people money, so it is worth being precise. The answer differs depending on whether you mean the organisation or the individual.

For an organisation, effectively yes. A certification body can conduct one integrated audit against all three standards and issue certificates for each. You hold three certificates but you were audited once, which is where the saving comes from.

For an individual, no — not through PECB. PECB awards a separate credential per standard: an ISO 9001 Lead Auditor, an ISO 14001 Lead Auditor and an ISO 45001 Lead Auditor are three credentials, three courses and three exams. Some Australian providers run a five-day combined course and issue their own certificate of attainment covering all three; that is a different thing from a per-standard certification, and the issuing body differs.

Neither approach is wrong. But before you pay, ask any provider two questions: which body issues the certificate, and does it name one standard or three. The answers determine what it is worth on a tender response or a CV.

Which courses cover an integrated management system

Through Aegentra Academy each standard is a separate official PECB course, at three levels. Confirm the current format, price, inclusions and material access on each course page.

Course-material access, examination and retake deadlines, and any certificate-application deadline are separate. Confirm the material-access start date in your booking confirmation and check the deadlines recorded in myPECB before scheduling your examination. PECB’s partner-course policy sets a 12-month examination and included-retake cycle from purchase for Self-Study and eLearning, or from course completion for instructor-led training. A failed attempt does not restart that cycle. The first retake requires at least 15 days after the unsuccessful examination; booking rules and the recorded myPECB deadline also apply.

ISO published ISO 9001:2026 on 16 September 2026. The examples and course offers on this site include references to ISO 9001:2015. Confirm organisational transition arrangements with your certification body and the delivered course-material and examination edition with Academy before enrolment. Standard publication does not establish which PECB edition will be assigned, and no automatic upgrade or transition entitlement is promised. ISO 19011:2026 was published in May 2026. Verify which audit-guidance edition is referenced by the specific PECB course materials and examination before relying on a course-edition claim.

StandardFoundationLead ImplementerLead Auditor
ISO 9001 — qualityFoundationLead ImplementerLead Auditor
ISO 14001 — environmentFoundationLead ImplementerLead Auditor
ISO 45001 — health and safetyFoundationLead ImplementerLead Auditor

Delivery is self-paced online across Australia, with the exam sat under remote proctoring. Online training formats and booking arrangements are listed on each course page. Multi-seat pricing is quoted for teams.

How an integrated audit actually runs

An integrated audit is run to ISO 19011, with certification audits additionally governed by ISO/IEC 17021-1 — the same reference standards as any single-standard audit. What changes is the planning and the team.

  • One audit programme, one schedule. Clause 9.2 is common, so the programme covers all three and is risk-weighted across them rather than split evenly.
  • Shared clauses sampled once. Context, leadership, competence, document control, management review and corrective action can be sampled together where the evidence addresses each applicable standard. The audit must still cover the requirements of each standard.
  • Technical clauses sampled separately. Environmental aspects, hazard identification and product conformity each need their own evidence trail.
  • Team competence must cover every standard in scope. Under ISO/IEC 17021-1 the audit team collectively needs competence in all three. A course certificate alone does not establish that competence; the certification body determines the team’s competence and appointment.
  • Findings are raised against a specific standard and clause. A nonconformity written as "the IMS does not…" is not actionable. It has to cite which standard and which clause.

What order should you do them in?

If your organisation has already chosen, follow it. If you are choosing for yourself, the sequence that wastes least time:

  1. ISO 9001 first. if your role concerns quality and process performance. It also introduces the common management-system structure.
  2. ISO 45001 second if your role concerns occupational health and safety. Check the actual prequalification and legal requirements of the engagement.
  3. ISO 14001 where environmental performance appears in your tenders, licences or reporting obligations.

Familiarity with the common structure may help with later courses. Each standard still requires subject-specific study and competence; no fixed reduction in preparation time is promised.

What an integrated management system costs in Australia

Two different costs get confused here, so treat them separately.

Training an individual. Each PECB course is priced per standard and per level — see the course catalogue for current prices, delivery formats, examination inclusions and applicable conditions. Obtain a current quotation when comparing provider formats and inclusions.

Certifying the organisation. This is a separate project and a separate budget — gap analysis, building the system, internal audit, then Stage 1 and Stage 2 audits by an accredited certification body, with annual surveillance and three-yearly recertification. An integrated audit may reduce duplicated work; the certification body determines audit time and charges for the actual integration and scope. For a worked breakdown of one standard, see the ISO 14001 certification guide for Australia.

Certifying an individual does not certify the organisation, and vice versa. Providers are occasionally vague about this; they are entirely different purchases.

FAQs

Is there a single ISO 9001 + 14001 + 45001 certification?

For an organisation, yes in practice — a certification body can audit all three standards in one integrated audit and issue certificates against each. For an individual, no. There is no single credential that makes you an "IMS auditor" recognised across all three. Some providers issue their own combined certificate of attainment covering the three standards; PECB does not, and awards a separate credential per standard. Ask any provider precisely what certificate you receive and who issues it, because the answer differs a great deal.

What does Annex SL actually mean?

Annex SL is the common high-level structure that ISO applies to its management system standards. It fixes the same ten clauses in the same order — scope, normative references, terms, context, leadership, planning, support, operation, performance evaluation, improvement — along with shared text and shared definitions. That is why ISO 9001, ISO 14001 and ISO 45001 can share one management system rather than running as three. The clause numbers line up, so a single documented procedure can satisfy the same requirement in all three.

Can one internal audit cover all three standards?

Yes, and that is usually the point of integrating. Clause 9.2 is common to all three, so a single audit programme, one set of auditor competence records and one schedule can cover quality, environment and safety together. What cannot be merged is the technical content: an ISO 14001 audit has to test environmental aspects and compliance obligations, and an ISO 45001 audit has to test hazard identification and worker consultation. The framework merges; the evidence does not.

Do I need all three standards?

Choose standards relevant to your organisational objectives, risks, legal obligations and buyer requirements. Confirm the actual tender or contract instead of assuming that every organisation in a sector needs the same certification.

Is it cheaper to certify to three standards together?

An integrated audit may reduce duplicated work, but the certification body determines the audit time and fee based on the scope and level of integration. Each standard still requires appropriate evidence and competence. Individual PECB course and credential requirements remain separate.

Which standard should I train in first?

Start with the standard relevant to your current role or organisational project. ISO 9001 focuses on quality, ISO 14001 on environmental management, and ISO 45001 on occupational health and safety. Shared structure does not remove subject-specific learning requirements.

Train on the standard your buyers actually ask for.

Three PECB tiers per standard. Review each course’s examination package and conditional retake terms.