Running ISO 14001 and ISO 45001 as one integrated system

This page explains what the rules and common practice call for. Every site is different, and what a survey or a filing needs at your facility is something we work out with you after we see it.

An integrated management system supports two certificates with one system, and it costs less than pursuing each certificate on its own.

ISO 14001 is the international standard for environmental management systems, and ISO 45001 is the international standard for occupational health and safety management systems. Both standards use the same ten-clause structure, so a large part of the system is common ground that you build only once.

The two structures are close, but they are not identical. ISO 45001:2018 follows the High Level Structure (HLS) of Annex SL, the version in force before 2021. The Harmonized Structure (HS) replaced it in May 2021, and ISO 14001:2026 follows that one. They are close enough that one integrated system works, but the standards are one generation apart, and the differences fall right where integration plans go wrong. The clearest example is the clause titled "Planning of changes", which the newer structure adds and which ISO 45001 will not have until its next edition, expected in 2027.

Timing is the more pressing reason right now. ISO 14001:2015 was withdrawn on April 15, 2026, and the current edition is ISO 14001:2026. ISO 45001:2018 sits at ISO stage 90.92, "International Standard to be revised". A draft of the next edition (ISO/DIS 45001) was registered in April 2026 and went to a 12-week ballot in June 2026, and Edition 2 is expected in 2027.

That means two changes of standard inside roughly 3 years. Taking them one at a time as they arrive means two rounds of document revision, two rounds of retraining and two transition audits, so sequencing them deliberately is worth real money.

→ Transition to ISO 14001:2026 · ISO 14001 clause-by-clause guide · ISO 45001 clause-by-clause guide

What the two standards actually share

Count the "yes" rows, because that is the saving.

Two rows deserve a second look before you build. "Planning of changes" is in ISO 14001:2026 and not in ISO 45001:2018. Because it covers planning changes to the management system itself, a management of change process written for ISO 45001 does not automatically satisfy it. The context clause, meanwhile, now carries the climate amendment in both standards. An integrated system built from a 2015-era template will have a gap in both places.

Where the savings actually come from

One internal audit program. With one program you run 3 or 4 audits a year that cover both standards, instead of 6 or 8, and this is usually the largest saving that recurs every year. Both standards require you to select auditors and conduct audits so that the audit process is objective. Neither prohibits you from auditing your own work, but a one-person program gets close scrutiny on that point, now across two systems instead of one.

→ Independent internal audits for both standards

One management review. Both standards prescribe a list of inputs for the management review, and the two lists overlap a great deal, so hold one meeting, with one agenda and one set of outputs. Two separate reviews with the same eight people in the room are pure duplication.

One document control system. The clause on documented information (the standards' term for written records) is in effect the same in both. Companies that certify one standard at a time often end up with two document systems, and merging them later costs more than building one.

Certification body time. Certification bodies (also called registrars) generally price an integrated audit below the total for two separate audits, because they sample the shared clauses once. How much lower varies by certification body and by your scope, and we will not quote a percentage we cannot stand behind. Ask two or three certification bodies accredited by ANAB for both quotes. Have the surveillance audit years quoted too, not only the initial certification.

Ask about accreditation before you compare the numbers. With an accredited certificate, the certification body is itself audited against ISO/IEC 17021-1, the standard for certification bodies. That audit is performed by an accreditation body that signs the IAF Multilateral Recognition Arrangement, and in the US that body is ANAB. An unaccredited certificate is a document someone printed, and customers who ask for ISO certification usually mean the accredited kind. You can verify a certificate, and the certification body behind it, in the IAF CertSearch database.

→ ISO certification cost and timeline

Where an integrated system saves you nothing

We want to be candid about this part, because an oversold integrated system ends up worse at both jobs.

The aspects register and the hazard register are not shared. ISO 14001 has you identify your environmental aspects and impacts, while ISO 45001 has you carry out hazard identification and risk assessment. These are different tasks, with different inputs and different criteria for deciding what matters most, and one combined register does neither well. Keep them separate, but feed both from the same process map.

→ Building an environmental aspects and impacts register

Worker consultation has no environmental counterpart. Only ISO 45001 requires consultation and participation of workers. It is the clause most likely to stall the whole project, and an integrated system does not reduce that work by one hour.

→ ISO 45001 worker consultation and participation

The compliance obligations register is one register with two very different halves. One half comes from EPA and from ADEQ, the Arizona Department of Environmental Quality:

• Air permit conditions
• Hazardous waste generator status under the Resource Conservation and Recovery Act (RCRA)
• The Multi-Sector General Permit (MSGP) for industrial stormwater
• Oil spill prevention plans under the Spill Prevention, Control, and Countermeasure (SPCC) rule
• Chemical reporting under the Emergency Planning and Community Right-to-Know Act (EPCRA), sections 311, 312 and 313

The other half comes from OSHA and includes the substance-specific standards that your workers' exposures actually trigger. That is one process and one document, but the two bodies of law share almost no structure.

→ Building a US compliance obligations register · Toxics Release Inventory (TRI) reporting (Form R)

If you already hold AS9100, your case is different

If you already hold AS9100, you are not starting from zero, and nobody should quote you as if you were.

AS9100 is built on ISO 9001:2015, the quality management system standard, which uses the same Annex SL High Level Structure as ISO 45001:2018. That structure is one generation behind the Harmonized Structure in ISO 14001:2026, but it is close enough that the framework carries over. So you already have:

• A review of the context of the organization and of its interested parties
• Leadership and policy processes
• A competence and training system
• A working document control system
• An internal audit program, with trained auditors and a working method for keeping audits impartial
• A regular schedule of management reviews
• A corrective action process that people actually use

Adding ISO 14001 to that framework costs much less than building from scratch. What remains is the specifically environmental part:

• The environmental aspects and impacts register
• The compliance obligations register
• Operational controls tied to your significant aspects
• The evaluation of compliance
• The emergency elements that go beyond the plan you have now

The same holds for ISO 45001, with one honest exception: AS9100 gives you no head start at all on worker consultation.

This situation is common among Arizona aerospace and defense suppliers. Tell a certification body you hold AS9100 before it plans the audit.

→ Our work for aerospace manufacturers

Sequencing the two transitions

Here is a defensible plan, given where both standards stand:

1. Address ISO 14001:2026 first. The 2015 edition is already withdrawn, and your transition period is running. The renumbering is the work: Clause 6.1.4 is now "Risks and opportunities", planning action moved to Clause 6.1.5, and "Planning of changes" is a new clause.
2. While you revise, take clause numbers out of your own documents wherever nothing depends on them. A procedure that says "as required by clause 6.1.4" will be wrong twice in 3 years, while a procedure that describes what it does will not.
3. Follow the ISO 45001 revision through its ballot. If the timing works out, plan the second transition into the same round of document updates.

What we don't claim

We do not hold an ISO lead auditor credential, and we are not a certification body. Under ISO/IEC 17021-1, the standard for certification bodies, those are two different roles, and the standard keeps them apart in two different ways:

• One clause bars a certification body from providing management system consulting at all, with no time limit.
• Another clause treats internal audits by the certification body as a significant threat to its impartiality. The remedy is that the body does not certify that system for a minimum of 2 years afterward.

The first is an outright prohibition, and the second is a waiting period.

What we bring underneath an integrated system is the technical layer: air monitoring data, noise surveys and Form R, the annual Toxics Release Inventory (TRI) report. The standards require you to identify the legal requirements behind this kind of work and to evaluate your compliance with them.

→ ISO 14001 consulting · ISO 45001 consulting · Air monitoring surveys · Noise surveys