ISO 45001 and ISO 9001 – how to integrate the systems and what are the benefits?

Many companies holding ISO 9001 certification are, at some point, faced with the question of ISO 45001. Sometimes it is a customer requirement, sometimes a workplace accident that has made management aware of gaps in health and safety management, and sometimes simply a strategic decision to systematise the area of occupational safety. In each of these cases, the same question arises: do we need to build a second, separate system – or can both standards be combined into a single integrated management system?

Why integration is possible – and what can and cannot be combined

ISO 45001 and ISO 9001 have been developed in accordance with the same High Level Structure (HLS) – a standardised framework of clauses used in all modern ISO standards. Both standards have identical clause numbering: organisational context (4), leadership (5), planning (6), support (7), operational activities (8), evaluation of performance (9) and improvement (10). This shared architecture was designed precisely to facilitate integration – and in practice, this means that many elements of the management system can be common to both standards without the need to create separate documents and procedures

What can be effectively combined? Documentation and records management, internal audits, non-conformity and corrective action management, management review, objectives and indicators, internal and external communication, and supplier oversight – all these elements can function as a single, coherent mechanism supporting both systems simultaneously.

What remains separate? Risk analysis in the two standards has a different focus: ISO 9001 concentrates on risks to product quality and customer satisfaction, whilst ISO 45001 focuses on risks to the health and safety of workers. Occupational risk assessment, hazard identification, the hierarchy of control measures and requirements for worker participation are specific to ISO 45001 and have no equivalent in ISO 9001. A company with both systems maintains a single integrated management system manual and a single audit schedule – whilst keeping a separate hazard register, procedures for workplace accidents and separate health and safety indicators.

What does a company gain from integration?

The benefits of operating an integrated management system are tangible and extend across several areas.

Reduced workload. A single internal audit covering both systems instead of two separate ones, a single management review instead of two, and a single set of documentation instead of two parallel sets of procedures – these represent real savings in time and resources, which are particularly noticeable in small and medium-sized enterprises, where responsibility for both systems often rests with the same person.

Consistency and elimination of contradictions. Separate systems managed by different departments and different individuals can generate conflicting requirements or procedures that, in practice, are mutually exclusive. An integrated management system eliminates this risk – decisions regarding quality and health and safety are made within the same process and by the same management.

Synergy of objectives. Quality and occupational health and safety are not conflicting objectives – although in many organisations they are managed as if they were. An integrated approach highlights the fact that eliminating quality non-conformities often goes hand in hand with reducing health and safety risks, whilst improving workplace ergonomics leads to both lower absenteeism and higher production quality.

One external audit instead of two. Certification bodies offer integrated certification audits covering both ISO 9001 and ISO 45001 (and, where necessary, ISO 14001 as well). The cost of such an audit is lower than the sum of two separate audits, and the time needed for preparation is shorter.

Are you considering ISO 45001 certification? Find out how we can help your company achieve it.