ISO 14001 and ISO 45001 Integrated Management System: A Practical Guide (2026)

An integrated management system (IMS) runs ISO 14001 (environment) and ISO 45001 (occupational health and safety) as one system: one context analysis, one policy, one risk register, one internal audit programme and one management review, with separate sections only where the two standards differ. Because both standards follow ISO’s common Harmonized Structure (clauses 4 to 10), most companies can implement both together in roughly the time it takes to implement one, and have them certified in a single combined audit.

This guide explains what changed in 2026, how the two standards fit together, how they connect with Indian environmental and safety law, a step-by-step plan, and the mistakes that cause audit findings.

What is new in 2026

• ISO 14001:2026 was published in April 2026, replacing ISO 14001:2015 and its 2024 climate change amendment. Changes are moderate: climate change and other environmental conditions are now built into the context analysis, there is a new clause on planning changes, a lifecycle note in environmental aspects, and operational control now covers all externally provided processes, products and services. Certification bodies have announced a transition period of about three years for existing certificates.
• ISO 45001 is under revision. The draft (DIS) ballot ran from 16 June to 8 September 2026 and the new edition is expected in 2027. Until it is published, ISO 45001:2018 with its 2024 climate change amendment is the standard you certify against.
• India’s labour codes came into force on 21 November 2025. The Occupational Safety, Health and Working Conditions Code, 2020 (OSH Code) now governs safety duties that earlier sat in the Factories Act and other laws, so your legal register needs updating.

If you are starting now, build to ISO 14001:2026 and ISO 45001:2018 (with the amendment), and design the system so the 45001 revision is a small update rather than a rebuild.

How the two standards fit together

Clause	Shared in the IMS	Specific to ISO 14001	Specific to ISO 45001
4 Context	One context and interested-parties analysis, one scope	Environmental conditions, climate change	Workers and their representatives
5 Leadership	One integrated policy, roles and responsibilities	Commitment to protect the environment	Consultation and participation of non-managerial workers
6 Planning	One risk and opportunity method, one objectives plan	Environmental aspects and impacts (lifecycle view)	Hazard identification and OH&S risk assessment
7 Support	Competence, awareness, communication, documented information	Environmental communication	Communication with contractors and visitors
8 Operation	Operational control, outsourcing, emergency preparedness	Waste, emissions, effluent, chemicals	Hierarchy of controls, management of change, contractors
9 Performance	Monitoring, compliance evaluation, internal audit, management review	Environmental monitoring data	Incident and health surveillance data
10 Improvement	One nonconformity and corrective action process	None	Incident investigation with worker participation

Where Indian law comes in

Both standards require you to identify your legal obligations (“compliance obligations” in ISO 14001, “legal requirements” in ISO 45001) and evaluate compliance regularly. Auditors look closely at this. For a typical Tamil Nadu manufacturing or warehousing unit, the legal register usually includes:

• Consent to Establish and Consent to Operate from the Tamil Nadu Pollution Control Board under the Water (Prevention and Control of Pollution) Act, 1974 and the Air (Prevention and Control of Pollution) Act, 1981, with their conditions and renewal dates
• Authorisations and returns under the Hazardous and Other Wastes (Management and Transboundary Movement) Rules, 2016, and obligations under the E-Waste (Management) Rules, 2022 and Plastic Waste Management Rules, 2016 where they apply
• Safety, health and welfare duties, registration and returns under the OSH Code, 2020 and the rules notified under it
• Fire safety requirements under the Tamil Nadu Fire and Rescue Services Act, 1985
• Employee coverage under the Code on Social Security, 2020 (ESI and employees’ compensation)

Certification does not replace any of these approvals. An IMS is a way of making sure they never lapse. For the monthly and annual labour filings, see our labour law compliance calendar for Tamil Nadu.

A worked example

Consider a 140-employee electronics assembly unit near Chennai with a contractor-run canteen and housekeeping team. Its customers ask for both ISO 14001 and ISO 45001. Implementing them separately would mean two policies, two risk registers, two audit programmes and two management reviews. As an IMS, the unit:

• runs one workshop to map context, interested parties and scope for both
• keeps one risk register with two tabs: environmental aspects (solder fumes, e-waste, diesel generator emissions, effluent) and OH&S hazards (ESD, chemical handling, forklift movement, ergonomics)
• writes one set of operational controls for chemicals that covers both spill prevention and worker exposure
• trains its contractors once on both environmental and safety rules
• holds one internal audit and one management review covering both standards

The certification body then plans a single combined audit, which usually needs fewer audit days than two separate audits.

Step-by-step implementation

1. Gap assessment (1–2 weeks): compare current practices, permits and records against both standards and the legal register.
2. Scope and context: fix the sites, activities and contractors in scope; identify interested parties and their needs (customers, regulators, neighbours, workers).
3. Integrated policy and roles: one policy signed by top management, with named owners for environment and for safety.
4. Risk and legal registers: environmental aspects and impacts, hazard identification and risk assessment, and a legal register with due dates.
5. Worker consultation: set up a safety committee or equivalent forum so non-managerial workers are consulted on hazards, controls and incident investigations, as ISO 45001 requires.
6. Operational controls and emergency plans: procedures for chemicals, waste, permits-to-work, contractors and mock drills.
7. Implementation and records (8–16 weeks in total for steps 2–7): run the system long enough to generate monitoring, training and incident records.
8. Internal audit and management review: one audit programme covering both standards, followed by corrective actions.
9. Certification audit: Stage 1 (readiness) and Stage 2 (effectiveness) by an independent certification body, then annual surveillance audits.

Vakil Labs provides the consulting, documentation, internal audit and audit coordination. Certification audits are arranged through our tie-up with Veritas International (a JAS Global Certifications brand); the certificate is issued by the certification body, not by Vakil Labs.

Common mistakes and red flags

• Two systems stapled together: separate manuals with an “integrated” cover page. Auditors notice duplicated or conflicting procedures.
• Expired consents: a lapsed TNPCB consent or fire licence is a compliance failure that the system was supposed to prevent.
• No real worker participation: safety decisions made only by managers are a frequent ISO 45001 nonconformity.
• Ignoring contractors: canteen, housekeeping, security and maintenance contractors often carry the highest risks.
• Generic risk registers: copied templates that do not match your actual processes.
• Climate change skipped: both standards now expect you to consider whether climate change is relevant to your organisation and record the outcome.
• Anyone promising a certificate in days: a credible certification needs a working system, records and an independent audit.

FAQ

Can we get ISO 14001 and ISO 45001 certified in one audit?

Yes. Most certification bodies offer a combined (integrated) audit when the system is genuinely integrated. You still receive a separate certificate for each standard.

We already have ISO 9001. Can we add these to it?

Yes. ISO 9001 uses the same structure, so quality, environment and safety can share one system. Our ISO 9001 certification guide explains the quality side.

Should we wait for the new ISO 45001?

Usually not. Certify to the current edition now and update when the new one is published; transition periods are normally long enough to plan for.

Does an office-only IT company need these standards?

Rarely as a legal requirement, but large clients and tenders sometimes ask for them. ISO 45001 also helps with office safety, travel and hybrid-work risks.

How Vakil Labs can help

We run the gap assessment, build the integrated documentation and legal register, train your team and contractors, conduct the internal audit and coordinate the certification audit. See our ISO 14001 certification consulting, ISO 45001 certification consulting and ISO certification consulting pages. Companies that also want labour, contractor and statutory compliance handled by one accountable team can use our Legal Retainer for Companies.

Contact us or call +91 99416 26224. Book a call with an advocate

This article is for general information only and isn’t legal advice.