Home/ISO certification/Integrated system
ISO 9001, 14001 and 45001: one system, three different deadlines
Quality, environment and health and safety are not three management systems. They are one system audited against three sets of requirements. The complication in 2026 is that the three standards are no longer moving together, and that changes the order you should do this in.
In short
- They share a common structure. All three use the harmonised structure, so clauses 4 to 10 line up: context, leadership, planning, support, operation, performance evaluation, improvement. Only the middle of each standard is genuinely different.
- Integration is worth real money, but less than people claim. The accreditation rules cap the audit time reduction at 20 percent, and you only get it if the system is genuinely integrated and your people can answer across all three standards.
- The three are no longer in step. ISO 14001:2026 and ISO 9001:2026 are both published with firm deadlines five months apart. ISO 45001 is still at draft stage with no publication date.
- That changes the sequence. If you were waiting to do all three together, stop waiting. Build the common core now against the two published standards, and add health and safety when its new edition lands.
- Nothing gets skipped. Integration reduces duplication, not scope. Every requirement of every standard still has to be audited.
The 2026 problem
The three standards are on three different clocks
For most of the last decade the sensible advice was to treat these three as a set. Two of them have now been revised, on timelines that do not line up, and the third has not been revised at all. Anyone planning an integrated system in 2026 is planning against three different dates, one of which does not exist yet.
These dates are not opinions. They come from the accreditation body that governs certificates, in documents marked mandatory for every accredited certification body.
- Now
- Both revised standards are publishedISO 14001:2026 in April and ISO 9001:2026 in September. ISO 45001 remains at Draft International Standard stage, with its ballot closed in August 2026 and no publication date announced.
- 31 Oct 2027
- ISO 14001: new certificates must be to the 2026 editionFrom this date, new and initial accredited certifications can only be issued against ISO 14001:2026.
- 31 Mar 2028
- ISO 9001: the same cut offNo new ISO 9001:2015 certifications can be issued after this date.
- 30 Apr 2029
- ISO 14001:2015 certificates expireThe transition period ends. Certificates not transitioned are withdrawn.
- 30 Sep 2029
- ISO 9001:2015 certificates expireFive months after the environmental deadline. Same consequence: withdrawn.
Two things follow from this. First, if you hold both certificates, your environmental transition is due five months before your quality transition, and most businesses will want to do them in one audit rather than two. That means working to the earlier date, not the later one. Second, waiting for ISO 45001 is now the wrong call. Nobody can tell you when the new edition publishes, and the two published deadlines will not move to accommodate it.
Our transition guides cover each one in detail: what changed in ISO 9001:2026 and what changed in ISO 14001:2026.
The honest limit
What stays separate, and always will
Clause 8, operation, is where the three standards stop looking alike. This is the technical heart of each one and it cannot be merged away. Anyone who tells you an integrated system is one document is selling you something.
Clause 8 and the specialist requirements
Three different technical cores
ISO 9001 deals with the things that make a product or service conform: design and development, control of externally provided processes, production and service provision, release, and the control of nonconforming output. Its question is whether the customer gets what was promised.
ISO 14001 deals with environmental aspects and impacts, compliance obligations, lifecycle perspective, and emergency preparedness. The 2026 edition broadens context to include biodiversity, ecosystem health, pollution and resource availability, and separates environmental aspects from business risk in its own clause. Its question is what your operation does to the world around it.
ISO 45001 deals with hazard identification, assessment of risks and opportunities, and above all worker participation and consultation. That last one has no equivalent in the other two standards, and it is the requirement most often failed. Its question is whether people go home unharmed.
So the realistic picture is a shared management framework with three specialist technical modules hanging off it. That is still a very large saving over three separate systems, but it is not one system in one binder.
Side by side
The comparison in one table
| Question | ISO 9001 | ISO 14001 | ISO 45001 |
|---|---|---|---|
| What it manages | Quality of products and services | Environmental performance | Occupational health and safety |
| Current edition | 2026, published September | 2026, published April | 2018, revision still at draft stage |
| Transition deadline | 30 September 2029 | 30 April 2029 | None announced |
| Last date for old edition certificates | 31 March 2028 | 31 October 2027 | Not applicable |
| Who usually asks for it | Customers, tender committees, almost every B2B buyer | Export buyers, large corporates, regulators, lenders | Contractors, oil and gas, construction clients, large employers |
| The clause that is unique to it | Design and development, control of nonconforming output | Environmental aspects, compliance obligations, lifecycle | Hazard identification, and worker consultation and participation |
| Hardest part in practice | Making the process approach real rather than paper | Identifying aspects honestly and tracking legal obligations | Genuine worker participation, not a signed attendance sheet |
| Can it share an audit | Yes. One audit, one team, up to 20 percent less audit time if the system is genuinely integrated. | ||
Transition dates are taken from the mandatory transition requirement documents issued by the accreditation body in 2026. They are not set by your certification body and they do not move.
The number
What integration actually saves, and what it does not
This is the part most articles get wrong, usually by quoting a saving of a half or more. The real figure is written down, it is capped, and it is conditional.
Audits of integrated management systems are governed by a mandatory accreditation document, IAF MD 11. It sets a starting point for audit duration, then allows that figure to be adjusted. Where the adjustment reduces the time, the reduction cannot exceed 20 percent of the starting point. There is no cap on increases.
What the 20 percent depends on
Three conditions, and your certification body judges all three
How far the system is genuinely integrated. Shared documentation, shared elements and shared responsibilities count. Three separate systems kept in three separate folders with a common cover page do not. The audit team confirms the level of integration at the stage one audit and adjusts the duration if your claim does not survive contact with the evidence.
Whether your people can answer across standards. If the auditor has to find a different person for every standard, the time saving disappears, because the audit stops being one conversation and becomes three.
Whether the certification body has auditors qualified in more than one standard. This one is not in your control. It is worth asking before you sign, because a body that has to send three specialists cannot give you the reduction.
Just as important is what the reduction does not touch. Every applicable requirement of every standard in scope still has to be audited. The audit plan must cover all areas and activities for each standard, and there must be enough time to audit each one completely and effectively. Integration removes duplicated effort. It does not remove scope, and a certification body that offers you a bigger discount than this is not one whose certificate will be worth much.
One more detail worth knowing: a nonconformity raised under one standard has to be considered against the others. An uncontrolled document is a quality finding, an environmental finding and a safety finding at the same time. Integration cuts both ways.
If you want to understand how audit duration is calculated before the integration adjustment is applied, our guide to what ISO certification costs walks through audit day calculation in full, including the estimator.
In practice
What an integrated system looks like day to day
Strip away the theory and integration comes down to a short list of things you stop doing three times.
- One policy. A single statement covering quality, environment and safety, signed by top management, rather than three near identical pages.
- One context and interested party analysis. One register, with columns for which standard each issue is relevant to.
- One risk and opportunity process. The method is shared even though the hazard register, the aspects register and the quality risk register stay distinct.
- One internal audit programme. Auditors check a process once against all three standards, rather than visiting the same department three times a year.
- One management review. One meeting, one agenda covering all three inputs, one set of minutes. This alone usually saves more management time than everything else combined.
- One corrective action system. One log, one form, one escalation route, one effectiveness check.
- One document control procedure and one competence and training framework.
What stays separate: the aspects and impacts register, the hazard identification and risk assessment, the compliance obligations register, the worker consultation arrangements, and the operational controls specific to each discipline.
Scope
Which of the three you actually need
Integration only makes sense for standards you genuinely need. Certifying to a standard nobody has asked for is an annual cost with no return, and the audit time for it is not discounted away.
A plain test
Start from who is asking
ISO 9001 on its own is right for most service businesses, traders, consultancies and smaller manufacturers. If the only thing your customers ask for is proof you can deliver consistently, one standard is enough. It is also the one to hold if you can only hold one, because it is the one tender committees name.
ISO 9001 and ISO 14001 together is the common pairing for manufacturers, exporters and anyone selling to large corporate buyers or into Europe. Environmental questions now arrive in supplier questionnaires as routinely as quality ones.
All three belongs to businesses where people are exposed to real physical risk, and where clients audit that: construction, engineering, oil and gas, chemicals, heavy manufacturing, logistics. In those sectors ISO 45001 is often a condition of being on the bidder list at all.
ISO 45001 on its own is rare but legitimate, usually where a contractor has been told to hold it for a specific client and quality certification is not part of the requirement.
Each of our service pages sets out what implementation involves: ISO 9001 certification, ISO 14001 certification and ISO 45001 certification.
Locally
What this means for a business in Pakistan
Three things are specific to the market here and worth saying plainly.
Most integrated systems here start as two, not three. Quality first because buyers ask for it, environment second because export customers and lenders ask for it. Safety is added when a client makes it a condition, and that is a perfectly sensible order rather than a compromise.
The transition deadlines apply here exactly as they do anywhere else. They are set by the international accreditation system, not by your local certification body, and an accredited certificate that has not transitioned by its deadline is withdrawn. If your certificate is accredited, the dates in this article are your dates.
Ask your certification body about auditor coverage before you commit. The 20 percent reduction depends partly on whether the body can field auditors qualified across more than one standard. Not every body operating here can, and it is a fair question to ask during quoting rather than after signing.
For the broader picture of how certification works locally, our complete guide to ISO certification in Pakistan covers accreditation, choosing a body and reading a quote.
Sequence
The order to do this in, given the three clocks
If you are starting from nothing, or transitioning an existing certificate, the calendar now makes the sequence fairly obvious.
- Step 1
- Build the common core against the published editionsContext, leadership, planning, support, performance evaluation and improvement, written once to satisfy both ISO 9001:2026 and ISO 14001:2026. This is the work that does not get wasted whatever happens to ISO 45001.
- Step 2
- Work to the earlier of your two deadlinesIf you hold both certificates, aim at the environmental date of 30 April 2029, not the quality date of 30 September 2029, so that one transition audit can cover both.
- Step 3
- Add the specialist modulesEnvironmental aspects and compliance obligations, then the quality operational clauses. These are the parts that need real work on the ground rather than in the document set.
- Step 4
- Add health and safety when you need it, not when the standard changesISO 45001:2018 is current and certifiable today. If a client requires it, implement it now against the current edition. If nobody is asking, build the common core so that adding it later is a short project rather than a new one.
The mistake to avoid is holding the whole programme hostage to a standard that has no publication date. The revision of ISO 45001 is at draft stage, and a draft is not a plan you can put in a calendar.
If the people who will run this need formal training, our training courses include lead auditor qualifications for ISO 9001, ISO 14001 and ISO 45001. An internal auditor qualified across more than one standard is also exactly what makes the integration reduction achievable.
Questions
Common questions
What is an integrated management system?
An integrated management system is a single management system that satisfies two or more standards at once, sharing documentation, processes and responsibilities rather than running each standard separately. The accreditation rules define it as a single system managing multiple aspects of organisational performance. The alternative, keeping separate systems for each standard and auditing them at the same visit, is a combined arrangement rather than a genuinely integrated one, and it earns a smaller reduction in audit time.
How much audit time does integration actually save?
Up to 20 percent. The mandatory accreditation document for integrated audits, IAF MD 11, sets a starting point for audit duration and allows adjustments, but states that where the result is a reduction it cannot exceed 20 percent of that starting point. The actual figure depends on how integrated your system really is, whether your people can answer questions across more than one standard, and whether the certification body has auditors qualified in more than one standard. Any provider promising a larger saving is not describing an accredited audit.
Can we certify all three standards in one audit?
Yes. One certification body, one audit team and one audit covering all three sets of requirements is normal practice, and it is what the integrated audit rules exist to govern. You still receive the applicable certificates, and every requirement of every standard in scope still has to be audited. The saving comes from auditing shared processes once rather than three times.
Should we wait for the new ISO 45001 before integrating?
No. The revision is at Draft International Standard stage, its ballot closed in August 2026, and no publication date has been announced. Meanwhile ISO 9001:2026 and ISO 14001:2026 are published with fixed transition deadlines in 2029 that will not move. Build the shared core now against the published standards. ISO 45001:2018 remains current and certifiable, so if a client requires it today you can implement it today.
Our ISO 9001 and ISO 14001 deadlines are different. Which one do we work to?
The earlier one. ISO 14001:2015 certificates expire on 30 April 2029 and ISO 9001:2015 certificates on 30 September 2029. If you hold both and want a single transition audit rather than two, plan against April 2029. Working to the later date means either two separate transition audits or a rushed environmental transition.
Do we need three separate manuals?
No, and none of the three standards has required a manual since 2015. What they require is documented information, and most of it can be written once: one policy, one context and interested parties register, one document control procedure, one competence framework, one internal audit programme, one management review and one corrective action log. What stays separate is the technical core of each standard, such as the environmental aspects register and the hazard identification and risk assessment.
Is an integrated system cheaper to maintain?
Usually yes, though the saving shows up more in internal effort than in the certification invoice. The audit fee reduction is capped at 20 percent, but running one management review instead of three, one internal audit programme instead of three and one corrective action system instead of three removes a great deal of duplicated management time across the year. That internal saving is normally the larger of the two.
What happens if we miss the transition deadline?
The accredited certificate is withdrawn. The transition requirement documents state that accredited certifications to the previous edition are no longer valid after the transition end date and shall be withdrawn. There is no grace period, and recovering afterwards means a new initial certification rather than a transition, which costs more and takes longer. If you decide not to transition, your certification body has to tell you in writing, and your certificate cannot be extended beyond the transition period.
Sources
- IAF MD 11:2023, Issue 3, Application of ISO/IEC 17021-1 for Audits of Integrated Management Systems, International Accreditation Forum
- Global ACI-TECH-3-TR 2029-09-30 (M), Transition Requirements for ISO 9001:2026, version 1.0, issued 4 September 2026
- Global ACI-TECH-3-TR 2029-04-30 (M), Transition Requirements for ISO 14001:2026
- ISO/TC 283, the committee responsible for ISO 45001, revision status and Draft International Standard ballot, 2026
- ISO 9001:2026 and ISO 14001:2026, published editions
Next step
Tell us which standards you already hold
Send us your current certificates and their expiry dates, or just tell us what your clients have asked for. We will tell you which transition is due first, whether integrating is worth it for your business, and what the work actually involves. No obligation, and no pressure to certify against a standard nobody has asked you for.
Ask about your transitionSee our certification services
We work with businesses across Pakistan, including Lahore, Karachi and Islamabad.