1. Decide whether an integrated system suits your business

A business in Bangladesh may begin with a quality management system because a customer requests ISO 9001. Later, an export buyer asks how the factory manages environmental impacts, or a new contract calls for evidence of occupational health and safety controls. Adding a separate handbook, audit calendar and management meeting each time can create duplicate work. An integrated management system puts shared processes under common ownership while keeping the technical controls for each standard visible.

Start with the decisions your organization needs to make. A garment manufacturer might need reliable shipment quality, better records for waste and energy use, and clearer controls for contractor work. A logistics provider could focus on shipment accuracy, fuel use and risks during loading. The same standards may apply to both businesses, but the processes, evidence and scope should reflect how each organization actually operates. Copying another company’s manual often hides the differences that matter during an audit.

Look for duplication before proposing integration. Compare the teams responsible for training, document updates, supplier reviews, incident reporting, corrective action and management meetings. If these teams already work together, one shared process may be easier to maintain. If different legal entities, contracts or sites have separate responsibilities, map those boundaries first. Integration can still work, but the system must explain which decisions are made centrally and which belong to each site.

The business case can be simple. List the meetings or registers that repeat the same work, estimate the time spent maintaining them, and identify decisions that would improve if information were reviewed together. Then record any cost of change, including training and changes to the audit programme. A shared process is worthwhile when it gives owners better evidence and fewer handoffs. It should also be easy for employees to explain without referring to three different versions of the same instruction.

If you are starting from scratch, use Technotex’s ISO certification in Bangladesh guide to understand the wider certification route. The following sections focus on how to design a workable system when quality, environment and occupational health and safety overlap.

2. Match each standard to a business need

The first decision is which standards support the organization’s work and commitments. ISO 9001 addresses quality management, including how the organization controls processes that affect customer requirements and its ability to deliver consistent outputs. ISO 14001 addresses environmental management, including environmental aspects, relevant obligations and controls. ISO 45001 addresses occupational health and safety management, with attention to hazards, risk controls and worker participation. Use the edition and applicable requirements confirmed for your project. The table below compares their purposes rather than prescribing a list of mandatory documents.

Quality examples include purchase specifications, incoming inspection, batch release and the handling of complaints. Environmental examples include identifying how an activity uses resources or generates waste, evaluating its significance and assigning controls. Occupational health and safety examples include how workers participate in identifying hazards, how contractors receive site instructions and how the organization reviews incidents. A combined system can use one form design or review calendar, provided each set of decisions remains traceable.

Decide which commitments are already in place. A customer may request a certificate for a manufacturing site, while an internal improvement programme may cover sites outside the proposed certification scope. Write down both objectives and distinguish them when planning. Internal implementation can be broader than the initial certification scope. Before quoting a certificate to a customer, check the exact location, activity and standard shown on the certificate.

The official ISO conformity assessment overview describes certification as independent assurance against specified requirements. Ask a certification body to explain the options for your scope and the applicable accreditation arrangements. ISO publishes standards. Certification decisions are made by the certification body following its applicable process.

Review the individual Technotex guides on ISO 9001 quality management, ISO 14001 environmental management and ISO 45001 occupational health and safety before choosing the standards to combine. Starting with a narrower scope can be sensible if teams lack the capacity to implement several systems at once. A staged implementation still benefits from a shared document structure and clear ownership, because later standards can build on those foundations.

3. Define the scope before writing procedures

Write a short description of the organization’s legal entity, activities, locations and interfaces. Include the functions that control work from a head office, the sites where work is performed and the services that are outsourced. The certification body can then discuss whether the proposed scope describes the organization’s activities accurately. Keep marketing language out of the scope statement. A reader should be able to understand which work it covers without guessing from a slogan.

For a factory, map the path from order acceptance through purchasing, receiving, storage, production, inspection and dispatch. Show where maintenance, waste handling, engineering changes and contractor access affect that path. At a service business, follow the customer request through scheduling, delivery, verification and complaints. A simple process map can show responsibilities that an organizational chart alone will miss.

Use the map to discuss boundaries. Suppose one site performs production and another performs finishing. If the proposed scope covers production only, identify who controls the finishing supplier and how the output is checked. If the work takes place at a customer’s site, discuss how the organization controls activities away from its own premises. If the head office sets purchasing requirements for several locations, name the team responsible for making sure those requirements reach the sites.

Review stakeholder requirements separately. Include customer specifications, site rules, contractual reporting and relevant obligations identified by the organization. Assign someone to check updates and record how changes are communicated. A scope discussion is also a good place to identify seasonal work, temporary operations and significant changes in equipment or premises. Those details can affect which records are available and where an audit needs to focus.

Keep the scope statement, site list and process map consistent. If the organization adds a facility or changes activities, update the records before relying on the existing certificate for the new work. The ISO certification scope guide explains how to read scope wording and site details. For a quotation, send the same scope information to each provider so you can compare responses on the same basis.

4. Build common controls and keep technical evidence separate

Choose a small number of processes that can be shared across all selected standards. These often include document approval, competence tracking, communications, internal audit planning, corrective action and management review. Assign each shared process to a named owner and identify the teams that contribute evidence. A shared tracker should help an employee find the correct record and understand what to do with it.

For document control, create a register that shows the title, version, owner, approval date and place of use. A production instruction, waste collection procedure and contractor induction checklist can all follow the same approval process. The person reviewing each document should understand its subject matter. The shared approval route does not replace the technical review needed to make sure the instruction works. See the document control guide for a practical way to manage these records.

For competence, list the roles that affect each part of the system. A quality inspector, environmental monitoring coordinator and maintenance supervisor may all need evidence of competence, but they need different knowledge and experience. Use one training matrix if it helps managers spot gaps, then record the competence criteria and verification method for each role. A signature on a training attendance sheet can show that someone attended. A demonstration, observation or review of completed work may be more appropriate when the organization needs to establish competence.

For corrective action, use one register that can distinguish complaints, environmental issues and safety events. Record the affected process, immediate response, cause analysis, action, owner and method for checking effectiveness. A single issue can have implications for multiple standards. A recurring packaging fault, for example, can create customer complaints, waste and extra handling. Assign one person to coordinate the response and record which parts of the issue each team needs to address.

Keep sensitive records controlled. A safety investigation, personnel record or customer complaint may contain information that should only be accessible to specific roles. The shared tracker can show an issue reference and status while the supporting records remain restricted. Design permissions and retention around the purpose of the record. People should be able to perform their work without seeing unrelated personal or commercial information.

5. Build an evidence matrix that auditors and teams can use

An evidence matrix connects an activity to its controls, records and owners. A production manager should be able to use it in a normal week, and an auditor should be able to trace the sample identified in the matrix. Avoid listing a document if nobody can show how it is used. Include a completed record and the person who can explain the decision it documents.

Start with the areas where all three standards overlap. During purchasing, a quality team might check material specifications, an environmental team might review packaging or waste requirements, and a safety team might check the information needed before a chemical or piece of equipment arrives. One supplier approval workflow can contain all relevant checks. The form should distinguish what is evaluated for each supplier rather than asking users to tick generic boxes.

Add a field for the period or batch covered. A record should say whether it applies to a single shift, a month or a specific delivery. Keep source records linked from the matrix rather than copying everything into a central spreadsheet. When a document changes, a controlled link or reference number is easier to maintain than multiple copies sent by email.

Use simple readiness statuses such as planned, implemented, sampled and ready for review. Define them before using the matrix. Implemented could mean the instruction is approved and the team has started using it. Sampled could mean someone checked a completed record and traced it to the activity it describes. Ready for review should mean the owner can explain the result and identify any remaining action.

Try this example. An equipment servicing programme may affect product consistency, resource use and worker safety. In the quality column, note how maintenance is linked to process controls and rechecking after servicing. In the environmental column, record how used parts or oils are handled where relevant. In the safety column, link the applicable work instructions and verification records. The same maintenance event can then provide three different kinds of evidence without requiring three unrelated files. When a control is missing, create an action with an owner and a due date rather than marking the record complete.

6. Plan implementation in five checkpoints

A fixed calendar can be misleading because organizations start with different systems and levels of evidence. A sequence of checkpoints is easier to adapt. For each checkpoint, name a person responsible and define what must be ready before moving on. The progress bars below represent five planning checkpoints of equal weight. They show the structure of the plan and do not estimate compliance or certification likelihood.

First, agree the scope and appoint owners. Identify which standards apply, which site or sites are in scope and who will lead decisions for each area. Confirm that managers understand the resources needed and that workers can provide input where relevant. Keep a record of open scope questions to raise with the certification body.

Second, compare existing processes with the applicable requirements. Record evidence you can already show, gaps that need new controls, and records that exist but are difficult to retrieve. Set priorities based on risk and impact. The gap analysis guide describes how to turn an initial review into an action list.

Third, implement and collect evidence. Give each process owner enough time to use the controls during normal operations. If a new inspection or reporting process produces no records, ask whether the activity has occurred or whether the instruction is impractical. Test records during a typical shift and under different conditions where possible. An audit pack should represent real work, not a collection of blank templates.

Fourth, check performance through internal audit and management review. Audit against all standards in scope, using people with suitable competence and objectivity. Record the areas reviewed, evidence sampled and findings. Bring the results to management and decide who will address open actions. Keep the scope and status of each finding clear, especially when one finding affects several processes.

Fifth, prepare for external assessment. Confirm the scope and schedule, identify contacts at each site, and make relevant records available. Review unresolved issues with the responsible owners. Technotex’s certification timeline guide explains why implementation time, audit arrangements and corrective actions can affect the overall schedule. Plan enough time for decisions and follow-up between checkpoints.

1. Define scope and ownership 20% 20% of planning checkpoints
2. Review gaps 40% 40% of planning checkpoints
3. Use controls and collect evidence 60% 60% of planning checkpoints
4. Audit and review 80% 80% of planning checkpoints
5. Prepare for external assessment 100% 100% of planning checkpoints

7. Use one audit programme with clear coverage

An integrated audit programme should identify which processes are audited, at which sites and against which requirements. Consider the significance of the process, changes since the last audit and results of previous reviews. A single visit to a warehouse can cover receiving accuracy, handling of waste materials and worker safety controls, provided the auditor has the competence and time to evaluate each topic. Record where coverage is split between auditors.

Create a schedule and a coverage matrix. For each planned audit, list the process, site, criteria and people responsible. Use the matrix to check that the programme covers the relevant requirements of each standard. If a shift or location has different operations, plan an appropriate sample. A meeting with a central process owner can establish how the procedure is designed. Checking records and speaking with the people performing the work helps establish how it is used.

During the audit, trace one piece of evidence from its source to the decision. For example, follow a customer complaint from receipt to investigation and any change to inspection or purchasing. Look for connected environmental or safety effects when relevant. If a failure created waste or required an unusual task, check whether the teams responsible were informed. Record findings precisely enough that another person can understand the issue and reproduce the trace.

A combined finding may require several owners. In the action register, name the person responsible for coordination and the teams responsible for their parts. Set a date to verify effectiveness after the change has been used. Closing an action because a procedure was revised gives little information about whether the same problem has recurred. The internal audit guide and audit nonconformity guide contain examples of evidence and follow-up.

Before the external audit, ask how the certification body proposes to evaluate the integrated system. Confirm the standards, programme and assessment arrangements in writing. The organization’s integration level and the certification body’s applicable rules can affect the audit plan. A joint visit is not automatically appropriate for every combination of standards or locations.

8. Hold one management review with decisions people can follow

A management review is a chance for leadership to evaluate how the system works and decide what needs to change. Build a common agenda covering relevant performance information, changes, audit results, corrective actions and resource needs. Include the specific inputs and outputs that apply to each selected standard. One meeting can work if the agenda, supporting records and decisions show that each topic was considered.

Prepare a short briefing for each area. For quality, include information about customer feedback, process performance and product or service conformity as applicable. For environment, include relevant monitoring, progress against objectives and the status of obligations identified by the organization. For health and safety, include relevant incident information, control performance and worker participation. Keep detailed records available for questions while showing management the trends and decisions that need attention.

Avoid mixing numbers that measure different things. A reduction in customer complaints, a change in waste generation and the number of reported safety observations do not mean the same thing. Show the period, source and context for each figure. For example, fewer reported observations may reflect a change in reporting practice. Discuss how the information was collected before drawing conclusions from a change.

Write decisions in a form the process owner can act on. Record the issue, decision, person responsible, resources needed and follow-up date. If management decides to revise supplier approval, state which suppliers are in scope and how the change will be checked. If management decides to improve reporting, agree who will review the first set of records and how feedback will be collected. Keep open decisions visible until owners can show the outcome.

Use the management review guide to design an agenda and action record. Between reviews, track whether decisions were implemented and whether they changed performance. A short follow-up during an ordinary management meeting can be more useful than waiting until the next scheduled review to find out that a task stalled.

9. Compare quotations, certification decisions and ongoing checks

Ask each certification body to quote against the same written information. Provide the selected standards, site list, scope, organization size, shifts and relevant activities. Describe which processes are shared and which are managed separately. If you already hold a certificate, say which standard and sites it covers, and ask how the proposed work would relate to the existing programme. This helps you identify differences in scope rather than comparing the headline price alone.

Request a clear breakdown of the initial assessment and subsequent activities included in the offer. Ask about site coverage, travel, remote activity where applicable, reporting and charges for follow-up or changes. Find out whether translation or special scheduling would be needed. Compare the quoted assumptions with your procurement, production and shipment calendar so an attractive initial fee does not hide a practical scheduling problem.

Read the accreditation information for the proposed certification body and verify whether the relevant activity falls within its listed scope. When buyer acceptance matters, ask the buyer to explain the evidence it expects. Do this before making commitments. The Technotex accreditation and recognition page provides the route to review Technotex’s applicable scope. The certification cost guide gives additional budgeting questions.

During and after the assessment, maintain a record of findings, responses and the evidence used to verify effectiveness. Ask how decisions are communicated and who can clarify any conditions or unresolved questions. When a certificate is issued, compare the organization name, sites, standards and scope with the agreed wording. Use the Technotex certificate verification page for applicable Technotex records and keep a dated record of verification where your business needs it.

Plan how the system will stay current after initial certification. Keep the audit calendar, competence matrix and risk records up to date when people, equipment or activities change. Tell the certification body about relevant changes according to the applicable arrangements. The surveillance audit guide explains what to organize for later reviews. For an initial discussion about a combined assessment, contact Technotex with the proposed standards and sites.

10. Worked example for a Bangladesh apparel supplier

Consider an illustrative apparel supplier that cuts, sews, packs and dispatches from one facility. Its customers ask for consistent product quality and evidence of how the business manages waste and worker safety. The supplier already has inspection forms and a training record, but the records sit in different departments. Management wants to see problems early enough to decide which actions deserve resources.

The supplier begins by mapping a typical order from receipt to shipment. It identifies points where a change in a customer specification can affect cutting, inspection or packaging. It separately identifies environmental aspects and worker safety issues related to the same processes. The team assigns an owner to each control and agrees which evidence can be shared. For example, one receiving register can show the delivery reference, quality checks and any follow-up about packaging or handling, with separate technical records linked where needed.

The management team chooses a small pilot. It uses the shared corrective action register for one recurring issue involving rework. The quality team checks the defect trend, the production team explains when the problem occurs, and the environmental team reviews the effect on material waste. The maintenance and safety teams review any changes to equipment or work methods before the revised process is rolled out. Each team records its decision in the relevant record and uses the shared issue reference to connect the work.

For internal audit, the business selects orders from different production periods. The auditor follows customer requirements, checks the records used to control changes and examines whether the shared action was completed and verified. The audit report distinguishes the observations relevant to each standard. Management then decides whether to extend the approach to other lines or revise the process before further rollout.

When preparing a quotation, the supplier sends the certification body its proposed standards, legal name, process map and site details. It asks which information is needed to assess whether the integrated audit arrangement is suitable. This example is illustrative. A real supplier should base its own audit scope, evidence and technical controls on its operations and applicable requirements.

Frequently asked questions

What is integrated ISO certification in Bangladesh?

It is an approach to organizing and assessing a management system that addresses more than one ISO management system standard. Organizations can share processes such as document control and internal audits while keeping the requirements and evidence for each standard identifiable. The certification body determines the appropriate assessment and certification arrangements for the proposed scope.

Can a business combine ISO 9001, ISO 14001 and ISO 45001?

Yes. A business can design one management system that addresses quality, environmental and occupational health and safety requirements. Start by mapping shared processes and assigning owners. Confirm the scope, standards, sites and assessment options with the certification body before committing to a programme.

Does an integrated audit always mean a single certificate?

Certificate format and the arrangements for each standard depend on the certification body and the agreed scope. Ask what documentation will be issued and how the relevant standards and sites will be identified. Confirm whether the result meets any acceptance criteria specified by your buyer.

Can we add a standard after our first certification?

A business can implement another management system standard after starting with one. Keep the boundaries and technical controls clear as you add the new requirements. Discuss assessment options with the certification body, including whether the work can be coordinated with a planned visit.

How should we prepare for a combined audit?

Keep a current site list, process map, responsibility matrix and evidence register. Check coverage for every applicable standard, and make sure the people who operate key controls can explain their records. Complete planned internal checks and management review, and document how open findings are being addressed.

Will an integrated system lower the cost or audit time?

Costs and audit time depend on the organization, scope, sites, applicable rules and integration level. Compare quotations using the same scope information and ask which assumptions affect the price. A shared system can reduce duplicate work internally, but any external audit saving must be confirmed for your circumstances.

What happens when a finding relates to two standards?

Record the affected process and identify which requirements are involved. Give the action a single coordinating owner if that makes the response easier to manage. Link supporting evidence for each requirement and verify that the action addresses the problem across the relevant areas.

Is certification the same as product approval?

Management system certification covers the management system and the activities and sites in its stated scope. Product approval, testing or product certification can involve separate requirements. Check what evidence your customer or tender calls for and verify that the certificate or other document matches that requirement.