Skip to main content

Integrated management systems: ISO 9001, ISO 14001 and ISO 45001

Reviewed by the Aegentra Security Team — NV1-cleared ISO 27001 practitioners · Updated May 2026

ISO 9001, ISO 14001 and ISO 45001 share the same ten-clause structure, which is why organisations run them as one integrated management system rather than three separate ones.

What is an integrated management system?

An integrated management system (IMS) is a single management system that satisfies more than one standard at once. In Australia the usual combination is three: ISO 9001 for quality, ISO 14001 for environment and ISO 45001 for occupational health and safety — together often called QHSE or HSEQ.

The reason to integrate is operational, not philosophical. Run separately, three standards mean three policies, three internal audit programmes, three management reviews, three document control systems and three sets of corrective actions — most of which ask for the same thing in the same words. Integrated, they mean one of each. That is what makes tender compliance affordable for a mid-sized contractor in construction, civil, facilities management, manufacturing, resources or logistics, where a principal may require all three before you can prequalify.

Annex SL: why these three integrate at all

They integrate because ISO deliberately made them the same shape. Annex SL, the high-level structure, fixes the same ten clauses in the same order with shared text and shared definitions.

ClauseWhat it coversIntegrates?
4Context of the organisationYes — one context analysis, one interested-party register
5LeadershipYes — one policy can address quality, environment and safety
6PlanningPartly — objectives integrate, the risk work does not
7SupportYes — one competence matrix, one document control, one communication plan
8OperationNo — operational control is technical and standard-specific
9Performance evaluationYes — one internal audit programme, one management review
10ImprovementYes — one nonconformity and corrective action process

That table is the whole argument for integration and also its limit. Five of the seven substantive clauses genuinely merge. Clauses 6 and 8 do not, and pretending otherwise is where most integrated systems fail their audit.

What is shared, and what is not

The framework merges; the technical content does not. ISO 9001 asks about customer focus and product and service conformity. ISO 14001 asks for environmental aspects and impacts, compliance obligations and a lifecycle perspective, assessed under normal, abnormal and emergency conditions. ISO 45001 asks for hazard identification and, in Clause 5.4, worker consultation and participation — which has no equivalent in the other two and cannot be delegated to a manager.

The most common integration failure is a single risk register trying to hold quality risks, environmental aspects and workplace hazards in one table. An auditor will open it and find none of the three assessed properly. Keep one risk framework and three registers.

Is there a single IMS certification?

This is the question that costs people money, and the answer differs for the organisation and the individual.

For an organisation, effectively yes. A certification body can conduct one integrated audit against all three standards and issue certificates for each. You hold three certificates but were audited once, which is where the saving comes from.

For an individual, no — not through PECB. PECB awards a separate credential per standard: an ISO 9001 Lead Auditor, an ISO 14001 Lead Auditor and an ISO 45001 Lead Auditor are three credentials, three courses and three exams. Some Australian providers run a five-day combined course and issue their own certificate of attainment covering all three; that is a different thing, and the issuing body differs. Before you pay, ask any provider which body issues the certificate, and whether it names one standard or three.

Which courses cover an integrated management system

Through Aegentra Academy each standard is a separate official PECB course at three levels. Every enrolment includes the official PECB exam voucher, two exam attempts, the certification application fee and 12 months of access.

StandardFoundationLead ImplementerLead Auditor
ISO 9001 — qualityFoundationLead ImplementerLead Auditor
ISO 14001 — environmentFoundationLead ImplementerLead Auditor
ISO 45001 — health and safetyFoundationLead ImplementerLead Auditor

Delivery is self-paced online across Australia with the exam sat under remote proctoring. A live instructor-led online class or in-person classroom in Melbourne, Sydney, Brisbane, Perth, Adelaide or Canberra is available on request, and multi-seat pricing is quoted for teams.

How an integrated audit actually runs

An integrated audit runs to ISO 19011, with certification audits additionally governed by ISO/IEC 17021-1. What changes is the planning and the team.

What order should you do them in?

If your organisation has chosen, follow it. Otherwise: ISO 9001 first — most widely demanded in tenders and least technical, so it teaches Annex SL without also teaching environmental aspects or hazard assessment. Then ISO 45001 if you are in construction, civil, resources or manufacturing, where it is close to mandatory for prequalification. Then ISO 14001 where environmental performance appears in your tenders, licences or reporting obligations.

Preparation time drops sharply after the first — roughly half of each subsequent course is Annex SL structure you have already met.

What an integrated management system costs in Australia

Two different costs get confused here. Training an individual is priced per standard and per level — see the course catalogue. There is no separate exam fee at any level: the voucher, two attempts and the certification application fee are included. Five-day classroom IMS courses in Australia commonly run from around $2,750 to beyond $5,000 per person before travel.

Certifying the organisation is a separate project and budget — gap analysis, building the system, internal audit, then Stage 1 and Stage 2 audits by an accredited certification body, with annual surveillance and three-yearly recertification. An integrated audit costs less than three separate ones because the shared clauses are sampled once. For a worked breakdown of one standard see the ISO 14001 certification guide for Australia.

Certifying an individual does not certify the organisation, and vice versa. They are entirely different purchases.

Is there a single ISO 9001 + 14001 + 45001 certification?

For an organisation, yes in practice — a certification body can audit all three standards in one integrated audit and issue certificates against each. For an individual, no. There is no single credential that makes you an "IMS auditor" recognised across all three. Some providers issue their own combined certificate of attainment covering the three standards; PECB does not, and awards a separate credential per standard. Ask any provider precisely what certificate you receive and who issues it, because the answer differs a great deal.

What does Annex SL actually mean?

Annex SL is the common high-level structure that ISO applies to its management system standards. It fixes the same ten clauses in the same order — scope, normative references, terms, context, leadership, planning, support, operation, performance evaluation, improvement — along with shared text and shared definitions. That is why ISO 9001, ISO 14001 and ISO 45001 can share one management system rather than running as three. The clause numbers line up, so a single documented procedure can satisfy the same requirement in all three.

Can one internal audit cover all three standards?

Yes, and that is usually the point of integrating. Clause 9.2 is common to all three, so a single audit programme, one set of auditor competence records and one schedule can cover quality, environment and safety together. What cannot be merged is the technical content: an ISO 14001 audit has to test environmental aspects and compliance obligations, and an ISO 45001 audit has to test hazard identification and worker consultation. The framework merges; the evidence does not.

Do I need all three standards?

Usually not. Take the ones your buyers actually ask for. ISO 9001 is the most commonly demanded in tenders across most sectors. ISO 45001 is close to mandatory for construction and heavy industry prequalification in Australia. ISO 14001 appears in government, construction and resources tenders and increasingly in supply-chain questionnaires. Certifying to a standard nobody asks about is a cost with no return.

Is it cheaper to certify to three standards together?

For the organisation, generally yes — an integrated audit takes fewer auditor days than three separate audits because the shared clauses are only sampled once, and you maintain one management review and one internal audit programme instead of three. For individual training the saving is different: you still sit three exams, but the Annex SL structure means the second and third courses cover ground you have already met, so preparation time drops sharply after the first.

Which standard should I train in first?

Whichever one your organisation is certifying to first, or whichever your role needs. If there is no forcing reason, ISO 9001 is the usual starting point because it is the most widely required and the least technical, so it teaches the Annex SL structure without also teaching environmental aspects or hazard identification at the same time.