Why it is usually quicker than starting from scratch
ISO 9001 and ISO 45001 share the same high-level structure: context, leadership, planning, support, operation, performance evaluation and improvement. An organisation that already runs ISO 9001 well has working processes for document control, competence, internal audit, management review and corrective action. Those processes can be extended to cover occupational health and safety rather than duplicated.
ISO 9001:2026 was published in September 2026. If you are certified to the 2015 edition, your certification body will confirm the transition arrangements for your certificate, and it can make sense to plan the quality transition and the ISO 45001 extension together.
Reviewing your existing system
We start by reviewing the system you have: its scope, how it is documented, how well internal audit and management review actually work, and how health and safety is currently managed alongside it. The output is a clear list of what can be reused as it is, what needs extending, and what ISO 45001 adds.
What can be shared
- Control of documented information and records
- Competence, training and awareness processes, extended to health and safety competence
- Internal audit, with the programme and auditor competence extended to health and safety
- Management review, with health and safety inputs added to the agenda
- Nonconformity and corrective action
- Purchasing and supplier controls, extended to contractor health and safety
- Management of change and risk-based thinking
What ISO 45001 adds
Some ISO 45001 requirements have no quality equivalent, and they are where integration projects most often fall short:
- Consultation and participation of workers, including non-managerial workers, in decisions about health and safety. This is a specific requirement, not a communication exercise.
- Hazard identification and risk assessment for occupational health and safety, using the hierarchy of controls.
- Legal and other requirements for health and safety, with a method of evaluating compliance.
- Emergency preparedness and response, planned and tested.
- Incident investigation, including near misses, feeding into corrective action.
- Contractor and procurement controls that address health and safety risk, not only supplier quality.
Integrating the documentation
The aim is one management system, not a quality manual with a health and safety manual attached. Procedures that already exist are extended, new ones are written only where ISO 45001 requires a process you do not have, and records are kept where people already keep them. Quality-specific requirements stay with your quality lead, and we do not provide ISO 9001 consultancy.
Internal audit and management review
The internal audit programme is extended to cover ISO 45001, with combined audits where the processes are shared and auditors briefed or trained on health and safety. Management review takes on the inputs ISO 45001 requires, such as consultation outcomes, incidents, compliance evaluation and objectives, so that one meeting covers both standards properly.
Implementation and certification readiness
Once the extended system has operated long enough to generate records, an internal audit and management review are completed and a readiness review is carried out. Many certification bodies can add ISO 45001 to an existing certification and audit the standards together, under the international rules for integrated management system audits (IAF MD 11). Check that your certification body is accredited by UKAS for ISO 45001 for your type of work. The certification decision remains entirely theirs.
Indicative fees for ISO 45001 implementation are on our ISO consultancy pricing page. Integrating with an existing ISO 9001 system is scoped individually after a review of what you already have.
If you also want environmental management, see ISO 14001 implementation and integrated management systems.
Why Featherstone Safety
Featherstone Safety Ltd is an independent UK occupational health and safety consultancy providing ISO management system consultancy and implementation support. Thomas Featherstone holds the NEBOSH International General Certificate in Occupational Health and Safety and IOSH Managing Safely, is a Technical Member of IOSH (TechIOSH), and has eight years in safety-critical work.
- Systems that match the work. We build processes around how your organisation actually operates, so they survive contact with an auditor and with day-to-day pressure.
- Independent of certification. We are not a certification body and we do not issue certificates. Certification decisions are always made by an independent, accredited certification body.
- Practical site experience. Recent work includes on-site health and safety advisory and observation support during the delivery and installation of a 300 tonne super grid transformer. That was health and safety advisory work, not ISO consultancy, and it is not an endorsement of our ISO services.
Read more about Thomas Featherstone or see our case studies.
Frequently asked questions
Can our current certification body add ISO 45001?
Often, yes, if it is accredited for ISO 45001 for your type of activity. Check its UKAS accreditation scope. Adding the standard to an existing certification usually means the standards can be audited together.
Will it take less time than a standalone ISO 45001 project?
Usually, because document control, internal audit, management review and corrective action already work. The health and safety-specific requirements still need to be built and evidenced, and that sets the pace.
Do we need a separate health and safety manual?
No. The aim is one integrated system. ISO 45001 does not require a manual, and duplicating documents makes the system harder to run and audit.
Should we transition to ISO 9001:2026 at the same time?
It can be efficient to plan both together. Your certification body will confirm the transition arrangements for your ISO 9001 certificate, and the ISO 45001 extension can be scheduled to fit.
Do you provide ISO 9001 consultancy?
No. We cover ISO 45001 and ISO 14001. The quality-specific elements of your system stay with your quality lead or quality consultant, and we work alongside them.