ISO 14001 and ISO 45001 certification: environmental and safety management systems explained.

What ISO 14001 covers

ISO 14001 is the international standard for an EMS (environmental management system): a framework for managing environmental responsibilities, complying with relevant legal requirements and continually improving environmental performance. It applies to organisations of any size and sector. In practice you look at your activities, products and services, from energy, water and materials to waste, emissions and spills, decide which impacts are significant and control them.

ISO 14001:2026, the fourth edition, was published in April 2026. ISO describes it as building on the existing framework with a clearer structure, easier navigation and stronger alignment with today's environmental priorities. If you hold a certificate to the 2015 edition, ask your certification body about its transition timetable; if you are starting now, build to the 2026 edition.

What ISO 45001 covers

ISO 45001 is the international standard for an OH&S (occupational health and safety) management system. ISO lists its key elements as leadership commitment, worker participation, hazard identification and risk assessment, legal and regulatory compliance, emergency planning, incident investigation and continual improvement, organised around the Plan-Do-Check-Act cycle. It replaced the earlier British standard OHSAS 18001.

ISO 45001:2018 is still the current edition. ISO expects to replace it with a revised edition, planned for publication as ISO 45001:2027, so build to the 2018 edition now and plan for a transition once the new one is out. ISO notes the standard is especially valuable in higher-risk industries such as construction, manufacturing and mining.

One integrated system with ISO 9001

ISO 9001, ISO 14001 and ISO 45001 share ISO's harmonized structure, so they can run as one integrated management system. ISO explains that its management system standards are laid out the same way and can share identical text, terms and definitions (set out in Annex SL), which helps organisations meet two or more standards with a single system.

The shared clauses cover context, leadership, planning, support, operation, performance evaluation and improvement, so one set of processes can serve all three: one document control, one internal audit programme, one management review and one corrective action process. Our ISO 9001 certification guide covers the quality side.

The certification path

The certification path is the same as for ISO 9001: build and run the system, complete an internal audit and management review, then pass a two-stage audit by an accredited certification body. ISO does not certify organisations itself, and certification is optional; you can use either standard without being certified.

1. Set the scopeDecide which sites, activities and workers the system and certificate cover.
2. Identify aspects, hazards and obligationsList significant environmental aspects, work hazards, and the laws, permits and other requirements that apply.
3. Plan controls and objectivesAssign owners and build controls into daily work, such as permits to work, waste handling and inspections.
4. Run it and keep recordsTrain people, consult workers, investigate incidents and track environmental and safety data.
5. Internal audit and management reviewAudit every requirement, fix what you find and have management review performance.
6. Stage 1 and Stage 2 auditsThe certification body checks readiness, then implementation and effectiveness, before deciding on certification.

After certification, ISO notes that certified organisations usually have surveillance audits annually and a recertification audit every three years. In Australia and New Zealand, check that the certification body is accredited for each standard you need; JAS-ANZ's public register shows accredited bodies and the schemes they are accredited for.

How the standards relate to the law

Neither standard replaces your legal obligations. Both build legal compliance into the system, but the obligations themselves come from legislation: work health and safety laws (occupational health and safety laws in Victoria), environmental laws and any licences or permits you hold.

Safe Work Australia notes that Standards are not laws: conforming with a Standard does not automatically mean you have complied with WHS laws, because other reasonably practicable controls may still be needed, although a court may consider a relevant Standard. An ISO 45001 certificate shows an auditor found your system conforms; on its own it does not show you have met your legal duties. Confirm those with your state or territory regulator, and get legal advice where needed.

Is it worth it, and where to start

Certification is worth it when customers, tenders or head contractors ask for it, or when you need a structured way to manage significant environmental or safety risks. If nobody asks and your risks are low, applying the standards without certification, or simply meeting your legal duties well, may be the better use of time.

If you already hold ISO 9001, extend that system rather than building parallel ones, and ask certification bodies whether they can audit the standards together. For manufacturers, recording inspections, incidents and training where the work happens makes every audit easier; manufacturing ERP explains how those records fit into production systems. Optivise AI's Certification & Compliance service prepares integrated ISO 9001, ISO 14001 and ISO 45001 systems around how the business works and coordinates accredited certification bodies.

Accredited certification bodies issue certificates, so preparation by Optivise AI, or anyone else, is not a guarantee of certification, and it is not legal advice on your WHS or environmental duties. Scope and fees are agreed in each proposal.