Last updated 6 October 2026
Yes, you can audit ISO 14001 together with ISO 9001, ISO 45001 and FSSC 22000. ISO 14001:2026 recognises combined audits in the notes to its definition of audit, and the standards behind them share a common clause frame. Audit the shared elements once, but keep a separate objective, criteria, competent auditors and findings for each standard, and protect the time the environmental trails need.
At a meat processing plant in the Free State I reviewed an “integrated” internal audit that had covered three standards in one day. The ammonia plant room got ten minutes, spent looking for condensation dripping near exposed product. Nobody asked what happens to the ammonia, or to the water used to knock it down, if a valve fails. One room held a food safety hazard, a worker safety hazard and a significant environmental aspect, and the audit saw one of them.
Learn to run combined audits without losing the environmental trail in ISO 14001:2026 Internal Auditor, which has a lesson on combining with ISO 9001 and ISO 45001. You build an audit programme and run two audits on a case site. About 14 hours online, R3 850 on a limited period special, normally R4 670.
What is a combined audit, and does ISO 14001:2026 allow it?
A combined audit examines two or more management systems at the same time. ISO 14001:2026 allows it, and the notes to the audit definition in clause 3.4.1 name combined audits alongside first, second and third party audits.
FSSC 22000 is built on ISO 22000, which uses the same clause frame as ISO 14001, ISO 9001 and ISO 45001. A combined audit is not the same as an integrated management system. A site can run one integrated SHEQ manual and still audit each standard separately, or run four separate systems and audit them together. The audit decision belongs in the programme. Clause 9.2.2 asks the programme to set methods, and a combined audit is a method. ISO 19011:2026, the guidance on auditing that Annex A.9.2 points to, gives guidance that applies when one audit covers more than one discipline.
The practical case is strong on South African food sites. The same SHEQ manager often owns all four systems. Process owners are tired of being interviewed four times a year about the same competence records. A well planned combined audit respects their time and shows how the systems connect.
Which elements can you audit once for all the systems?
The system elements that every standard shares: context, policy, roles, competence, documented information, internal audit, management review and corrective action. Audit the process once, then check the content each standard adds.
| Shared element | Audit once | Then check separately for ISO 14001:2026 |
|---|---|---|
| Context and interested parties | The method for finding issues and interested parties | Environmental conditions in 4.1, requirements that become compliance obligations in 4.2 |
| Policy | Approval, communication, availability | Commitments to protect the environment, meet compliance obligations and improve (5.2) |
| Competence and awareness | Training records, competence matrix, induction | Competence for work with significant aspects, awareness of those aspects (7.2, 7.3) |
| Documented information | Document control, versions, retention | Aspects, compliance obligations, risks and opportunities available as documented information |
| Internal audit | The programme and reporting route | Objective, criteria and scope for each environmental audit (9.2.2) |
| Management review | Meeting, attendance, minutes | Every input in 9.3.2 and every result in 9.3.3 |
| Corrective action | The process for causes and effectiveness | Mitigating adverse environmental impacts (10.2 a) 2)) |
The second column saves the time. The third column is where combined audits go wrong, because the auditor confirms the shared process and assumes the content follows. For how the systems fit together on one site in the first place, see ISO 14001 vs ISO 9001 vs ISO 22000.
Where do the standards pull apart?
At the core of each one. ISO 14001 manages environmental aspects, ISO 45001 manages occupational health and safety hazards, FSSC 22000 manages food safety hazards, and ISO 9001 manages conformity of products and services. Each has its own risk method, its own legal requirements and its own emergencies.
Take the ammonia plant again. For food safety, the question is product contamination. For ISO 45001 it is worker exposure, and the Major Hazard Installation Regulations 2022 under the Occupational Health and Safety Act 85 of 1993 may apply. For ISO 14001 it is a release to air, fire water or contaminated runoff reaching the stormwater system, and the emergency response under clause 8.2 that was planned from the situations determined in 6.1.2. One piece of plant, three separate audit trails.
The same split shows up in the legal registers. A food plant’s food safety legal register will not hold the trade effluent permit, the waste classification records or the borehole water use. If the combined audit samples one legal register, make sure it is the right one for the trail you are on.
How do you plan a combined audit?
Write an objective for each standard, build the route around processes, give time by environmental importance rather than by clause count, and staff the team so every discipline has a competent auditor.
- Write a separate audit objective for each standard. Clause 9.2.2 a) requires one for each ISO 14001 audit, and writing one for each other standard keeps every trail focused.
- List the criteria for each standard, including procedures, permits and customer requirements.
- Map the processes in scope and note the significant aspects, health and safety hazards and food safety hazards each one carries.
- Allocate time by importance. An effluent pit, a boiler and a hazardous waste store need environmental time that a quality trail will not give them.
- Assign auditors so each discipline has someone competent, and nobody audits their own work.
- Plan the route by process, and mark which trails are shared and which are separate.
- Agree how findings will be reported: per standard, with the clause of each standard named.
- Schedule a short team huddle at midday to check no discipline is being squeezed.
Step 4 is the one I see skipped. Quality and food safety trails fill the day because the auditor knows them best. The ISO 14001 internal audit programme article explains how to rank environmental importance so the time follows the risk.
Plan your next combined audit with the environmental trails protected. Enrol in ISO 14001:2026 Internal Auditor: about 14 hours, a lesson on combined audits with ISO 9001 and ISO 45001, a finished audit programme and two practice audits. R3 850 while the special runs.
Who can lead a combined audit?
Someone competent in audit method who can manage a team. No single person needs to be expert in all four standards, but every discipline in the audit needs a competent auditor or a technical expert alongside one.
Clause 9.2.2 b) asks for auditors who make the audit objective and impartial, and clause 7.2 asks for evidence of their competence. On a combined audit that means looking at competence per discipline. A strong FSSC 22000 internal auditor with no environmental training can lead the team and the food safety trails, but should not be the person judging the aspects register. Pair them with someone who can.
On smaller sites a two person team often works: one person strong in food safety and quality, one in environment and health and safety. If only one auditor is available, split the combined audit over two days so the environmental trails get fresh attention. ASC also runs an ISO 9001:2026 Internal Auditor course for the quality side of the team.
How do you write findings in a combined audit?
One finding per requirement, with the standard and clause named. Where one cause breaks requirements in two standards, decide in the programme whether to raise one finding citing both or two linked findings, and apply the rule consistently.
Here is a finding from an ammonia trail written for the ISO 14001 side:
- Requirement: ISO 14001:2026 clause 6.1.2 requires potential emergency situations, including those that can have an environmental impact, to be determined. Clause 8.2 requires processes to prepare for and respond to them.
- Evidence: the ammonia emergency plan covers evacuation, gas detection and medical response. It does not address the fire water or wash water from knocking down a release, which drains to the stormwater channel behind the plant room.
- Statement: the environmental consequences of an ammonia release have not been determined or provided for in the emergency response.
The ISO 45001 trail might find the same plan sound for worker safety. Both conclusions can be true. Writing them separately stops the good one hiding the gap. For the full method, see the ISO 14001:2026 internal audit checklist, which lists the questions to carry into each environmental trail.
When does combining cost more than it saves?
When environment gets squeezed into the last hour, when the team has no environmental competence, or when a change at the site needs a focused audit that a combined day cannot give it.
I would not combine the first audit after a major change, such as a new effluent plant or a new boiler, or the audit before a transition visit. Certification bodies expect sites to move to the 2026 edition over about three years, ending around 30 April 2029. Confirm the dates with your own certification body. A focused ISO 14001 audit against the full 2026 text before that visit is worth more than another combined day. If your system is still on 2015, Transition to ISO 14001:2026 shows what has to change first. Not sure which ISO 14001 course fits your job? WhatsApp ASC on +27 61 483 0381.
Frequently asked questions
Can ISO 14001 and ISO 45001 be audited together?
Yes. ISO 14001:2026 recognises combined audits, and the two standards share a common clause frame. Keep separate objectives, criteria and findings for each standard.
Is a combined audit the same as an integrated management system audit?
No. A combined audit is a way of auditing several systems at once. An integrated management system is a way of running them. You can combine audits of separate systems or audit an integrated system one standard at a time.
Can FSSC 22000 be audited with ISO 14001?
Yes, as an internal combined audit. The food safety and environmental trails need separate time, criteria and competent auditors, because food safety hazards and environmental aspects are managed differently.
Do I need to be an auditor for every standard to lead a combined audit?
No. The lead needs audit method and team skills. Every discipline in the audit needs a competent auditor or a technical expert working with one.
How should findings be reported in a combined audit?
Name the standard and clause for every finding. Where one cause breaks two standards, follow the rule set in your audit programme, either one finding citing both or two linked findings.
Does a combined audit save time?
Usually, on shared elements such as competence, document control and management review. It loses time if environmental trails are squeezed and have to be audited again.
Which ASC course covers combined ISO 14001 audits?
ISO 14001:2026 Internal Auditor gives you the environmental audit skills that combined audits most often lack, then shows you how to combine with ISO 9001 and ISO 45001 without losing them.
R3 850 limited period special, normally R4 670. No VAT is charged, so the price shown is the price paid. Five or more learners: contact ASC for a team rate.
- About 14 hours over 6 modules and 31 lessons, self paced on phone or laptop
- Built on clause 9.2 of ISO 14001:2026 and ISO 19011:2026
- A lesson on combined audits with ISO 9001 and ISO 45001
- What makes an environmental audit different, and auditing each clause
- Build an audit programme, then plan and run two audits on a case site evidence pack
- Marked automatically the moment you submit, with a certificate of completion and verification code
- Is it for me? Yes if you audit or run audits across a SHEQ system and environment is your weakest trail.
- How long does it take? About 14 hours, in short lessons on your phone.
- Will it work at my site? Yes. Food plants, packhouses and restaurant groups are covered, and you can use your own site.
Need the environmental system built before you audit it? ISO 14001:2026 Understanding and Implementation builds it with you. All four courses are on the ISO 14001 training hub.
ISO 14001 is copyright and is not reproduced here. ASC is not affiliated with ISO.
Sources
- ISO 14001:2026, Environmental management systems, ISO
- ISO 19011:2026, Guidelines for auditing management systems, ISO
- ISO 45001, Occupational health and safety management systems, ISO
- Occupational Health and Safety Act 85 of 1993, Major Hazard Installation Regulations 2022