2026-09-21 · KeXinMaterials Editorial Team

ISO 9001 + ISO 14001 + ISO 45001 QMS / EMS / OH&S Management System Family Protective Case B2B Guide

ISO 9001:2015 (Quality), ISO 14001:2015 (Environmental), and ISO 45001:2018 (Occupational Health & Safety) are the three foundational management system standards. All built on Annex SL high-level structure. Required for any B2B organization. Below is the 2026 B2B procurement guide covering scope, editions, Annex SL alignment, integrated management system (IMS) approach, and protective case requirements for safety-critical + quality-critical equipment.

Three Management Systems + Annex SL Alignment

ISO 9001 + ISO 14001 + ISO 45001 share Annex SL high-level structure. Joint audit / IMS common approach.

ISO 9001:2015: "Quality management systems - Requirements". Edition 5. Replaces ISO 9001:2008.

ISO 14001:2015: "Environmental management systems - Requirements with guidance for use". Edition 3. Replaces ISO 14001:2004.

ISO 45001:2018: "Occupational health and safety management systems - Requirements with guidance for use". Edition 1. Replaces OHSAS 18001:2007.

Annex SL: ISO high-level structure (HLS) for management system standards. Defines common sections, sub-sections, and terminology. All new ISO MSS (management system standards) built on Annex SL.

Annex SL structure: 1 Scope, 2 Normative references, 3 Terms and definitions, 4 Context of the organization, 5 Leadership, 6 Planning, 7 Support, 8 Operation, 9 Performance evaluation, 10 Improvement.

Why Annex SL: Facilitates integrated management system (IMS) implementation. Reduces audit duplication. Enables combined audits. Improves organizational efficiency.

Common elements per Annex SL: Context (4) + Leadership (5) + Planning (6) + Support (7) + Operation (8) + Performance evaluation (9) + Improvement (10).

Differences per MS: ISO 9001 focuses on customer satisfaction + product conformity. ISO 14001 focuses on environmental protection + prevention of pollution. ISO 45001 focuses on OH&S risk prevention + worker safety.

ISO 9001 scope: Generic. Applicable to any organization regardless of type, size, or industry. Demonstrates ability to consistently provide products + services meeting customer + regulatory requirements.

ISO 14001 scope: Generic. Applicable to any organization. Demonstrates environmental management + pollution prevention + compliance with legal requirements.

ISO 45001 scope: Generic. Applicable to any organization. Demonstrates OH&S management + worker safety + prevention of work-related injuries + ill health.

Geographic adoption: Globally adopted. EU + US + Japan + Korea + China GB/T 19001/24001/45001. EU Regulation (EC) No 1221/2009 EMAS aligned with ISO 14001.

ISO 9001:2015 QMS + Customer Satisfaction

ISO 9001:2015 QMS. Process approach + risk-based thinking + PDCA. Customer satisfaction + product conformity.

ISO 9001:2015 QMS principles: Customer focus + Leadership + Engagement of people + Process approach + Improvement + Evidence-based decision making + Relationship management.

Process approach per ISO 216: PDCA cycle. Plan (process objectives + indicators) + Do (implement) + Check (monitor + measure) + Act (improve).

Risk-based thinking per ISO 230: Identify risks + opportunities. Address in quality management system. Preventive action + corrective action.

Context of organization per ISO 4.1: Internal + external issues. Interested parties + their requirements. Scope of QMS.

Leadership per ISO 5: Top management commitment + quality policy + roles + responsibilities + authorities.

Planning per ISO 6: Risks + opportunities + quality objectives + plans to achieve them + changes planning.

Support per ISO 7: Resources + competence + awareness + communication + documented information + control of documented information.

Operation per ISO 8: Operational planning + control + requirements for products + services + design + development + control of externally provided processes + production + service provision + release + nonconforming outputs.

Performance evaluation per ISO 9: Monitoring + measurement + analysis + evaluation + internal audit + management review.

Improvement per ISO 10: Nonconformity + corrective action + continual improvement.

Customer satisfaction per ISO 9.1.2 + ISO 9.3.3: Monitor + measure + analyze. Customer complaints + feedback. Customer perception of degree to which requirements met.

Quality manual: Per ISO 7.5. Documented scope + exclusions + procedures + interactions. Optional in ISO 9001:2015 (removed as requirement from ISO 9001:2008).

Internal audit per ISO 9.2: Plan + conduct + report + follow-up. Auditor competence required. Independent of area being audited.

B2B relevance: For B2B protective cases, require supplier ISO 9001:2015 certification + product conformity + quality plan + process control + corrective action.

ISO 14001:2015 EMS + Environmental Protection

ISO 14001:2015 Environmental Management System. Compliance obligations + life cycle perspective + environmental performance.

ISO 14001:2015 EMS: Environmental management + compliance with legal + other requirements + prevention of pollution + continual improvement.

Plan-Do-Check-Act + Annex SL structure: Same as ISO 9001 + ISO 45001.

Environmental aspects per ISO 6.1.2: Identify aspects + impacts. Significant aspects. Life cycle perspective.

Life cycle perspective per ISO 14001:2015 Annex A.4: From raw material acquisition + production + use + end-of-life treatment + disposal + recycling.

Compliance obligations per ISO 6.1.3: Identify + access + determine compliance status + communicate. Legal + regulatory + other requirements.

Environmental objectives per ISO 6.2: Measurable + monitored + communicated. Plans to achieve them.

Operational control per ISO 8.1 + 8.2: Implement controls + procedures. Outsource + procurement + design + emergency preparedness + response.

Emergency preparedness per ISO 8.2: Plan + respond + prevent + mitigate environmental impacts from emergency situations.

Environmental performance evaluation per ISO 9.1.1: Monitor + measure + analyze + evaluate. Compliance status + significant aspects + operational controls + emergency preparedness + others.

Internal audit per ISO 9.2: Plan + conduct + report + follow-up. Competent auditor.

Management review per ISO 9.3: Input + output. Include environmental performance + compliance + objectives + audit results + stakeholder feedback.

Continual improvement per ISO 10.3: Opportunities + corrective actions + prevent pollution + enhance environmental performance.

EU EMAS (Eco-Management and Audit Scheme): EU regulation (EC) No 1221/2009 aligned with ISO 14001. Stricter environmental performance + public statement. Voluntary EU scheme.

Carbon footprint per ISO 14064 + GHG Protocol: Greenhouse gas accounting. ISO 14064-1 (organization level) + ISO 14064-2 (project level). Often required alongside ISO 14001.

B2B relevance: For B2B protective cases, require supplier ISO 14001:2015 + environmental aspects + compliance obligations + life cycle perspective + carbon footprint.

ISO 45001:2018 OH&S + Worker Safety

ISO 45001:2018 OH&S Management System. Worker safety + consultation + participation + preventive culture.

ISO 45001:2018 OH&S: Prevent work-related injury + ill health + workers + workers representatives + safe + healthy workplaces + proactive prevention.

PDCA + Annex SL structure: Same as ISO 9001 + ISO 14001.

OH&S policy per ISO 5.2: Top management commitment + prevention + protection + worker health + safety + compliance + continual improvement.

Organization context per ISO 4.1: Internal + external issues + workers + workers representatives + other interested parties.

Hazard identification per ISO 6.1.2: Routine + non-routine + emergency. People (workers + visitors + contractors) + equipment + materials + environment. Hazards from outside organization + changes in processes + products + services.

OH&S risks + opportunities per ISO 6.1: Risk assessment + opportunity assessment. Significant OH&S risks.

OH&S objectives per ISO 6.2: Measurable + monitored + communicated. Plans to achieve them.

Worker consultation + participation per ISO 5.4 + 5.5 + 7.4 + 8.2 + 9.1 + 9.2 + 10.2: Non-managerial workers + workers representatives in decision-making. Equal with managers.

Hierarchy of controls per ISO 6.1.2: Elimination + substitution + engineering control + administrative control + PPE. Most effective = elimination. Least effective = PPE.

Operational control per ISO 8.1 + 8.2: Implement controls + procedures + outsourcing + procurement + design + emergency preparedness + response.

Emergency preparedness per ISO 8.2: Plan + respond + prevent + mitigate OH&S impacts from emergency situations. Include first aid + fire + spill + natural disasters.

Incident investigation per ISO 10.2: Investigate incidents + nonconformities + take corrective action + preventive action. Root cause analysis.

Performance evaluation per ISO 9.1: Monitor + measure + analyze + evaluate. Compliance + significant risks + controls + incidents + audits.

Internal audit per ISO 9.2: Plan + conduct + report + follow-up. Competent auditor.

Management review per ISO 9.3: Input + output. Include OH&S performance + compliance + risks + audit results + worker feedback.

B2B relevance: For B2B protective cases, require supplier ISO 45001:2018 + hazard identification + worker safety + emergency preparedness + incident investigation.

Integrated Management System (IMS) + B2B Procurement

IMS combines ISO 9001 + 14001 + 45001. Single integrated audit. Combined certification common.

Integrated Management System (IMS): Single QMS + EMS + OH&S system. Common policy + objectives + processes + procedures + audits + reviews. Reduces duplication + cost.

IMS benefits: Reduced audit cost (single audit vs 3) + reduced internal resource + consistent risk management + improved employee engagement + better customer trust.

Combined audit per ISO 22000 + Annex SL: Same auditor conducts all three. Saves 30-40% cost vs separate audits.

Combined certification: ISO 9001 + ISO 14001 + ISO 45001 (Triple). Plus ISO 27001 + ISO 22301 + ISO 20000 etc.

Audit structure: Initial certification audit (Stage 1 + Stage 2). Annual surveillance audits (1st year + 2nd year). Recertification every 3 years.

Audit cost: ISO 9001 EUR 15-50K (depends on employee count). Combined ISO 9001+14001 EUR 25-80K. Combined ISO 9001+14001+45001 EUR 35-120K.

Combined audit savings: 30-40% vs separate. Total saving EUR 20-60K over 3 years.

Common certification bodies: TUV SUD / TUV NORD / TUV Rheinland / DNV / LRQA / BSI / SGS / Intertek / DEKRA / Bureau Veritas. All accredited for ISO 9001 + 14001 + 45001.

Industry-specific: Some industries require additional MS standards. ISO/TS 16949 / IATF 16949 automotive QMS (replaces ISO 9001 for automotive). AS9100D aerospace QMS. ISO 13485 medical QMS. ISO 22000 food safety.

EU regulatory alignment: ISO 14001 + EU EMAS (Eco-Management and Audit Scheme). EU CSRD + ESRS. EU CBAM. EU Battery Regulation 2023/1542.

B2B procurement workflow: (1) Verify supplier ISO 9001 + 14001 + 45001 certification. (2) Verify scope of certification matches supplier activities. (3) Verify IMS approach + integrated audit. (4) Verify environmental aspects + OH&S hazards + controls + legal compliance. (5) Verify continual improvement + management review.

Common B2B mistakes: (1) Scope of certification too narrow. (2) Outdated certificate (3-year validity). (3) Missing surveillance audit. (4) Not verifying integrated QMS approach. (5) Ignoring environmental compliance obligations.

B2B recommendation: For B2B protective cases, require supplier ISO 9001:2015 + ISO 14001:2015 + ISO 45001:2018 + valid certificate + scope covering manufacturing + integrated management system + audit reports available.

FAQ

Related Articles

• Iatf 16949 Automotive Qms Protective Case B2B Guide
• Iso 13485 Medical Device Qms Protective Case B2B Guide
• Iso 27001 Information Security Management Protective Case B2B Guide
• Iec 62443 Industrial Cybersecurity Protective Case B2B Guide