Paul Brothwood: ISO 9001, ISO 14001 and ISO 45001 Audits
The result remains one of my proudest achievements from my time in construction. It demonstrated what a small organisation could achieve when leadership, employee involvement and disciplined management systems worked together.
Building an integrated management system
ISO 9001 focuses on quality management, ISO 14001 addresses environmental management and ISO 45001 covers occupational health and safety.
These standards have separate requirements, but many management activities support all three. Leadership, objectives, risk management, competence, document control, internal audits, corrective action and continual improvement run across the complete organisation.
We therefore treated them as one integrated management system rather than three separate collections of policies.
This reduced duplication and made responsibilities clearer. A single operational process could consider quality, environmental and safety requirements together. Managers had a clearer view of how one decision affected several areas of performance.
Integration also made the system easier for employees to understand. People did not need to identify which standard applied before taking action. They needed to understand the required outcome, the relevant risks and the controls expected of them.
Quality management in practice
ISO 9001 is often associated with procedures and records. Its real value comes from understanding customer requirements and delivering a consistent service.
For a construction and hire business, this included clear quotations, suitable equipment, accurate records, competent employees, reliable delivery and prompt action when problems arose.
Customer feedback supported this work. Complaints, service issues and operational delays provided evidence of where the system needed attention.
A complaint should not be treated as an isolated inconvenience. It often points towards a weakness in communication, planning, responsibility or process control. Resolving the immediate problem is only part of the response. The organisation also needs to understand why it happened and prevent a repeat.
The audit result showed that quality management had moved beyond written procedures. Auditors found evidence of controls being applied through daily operations.
Environmental responsibility
ISO 14001 helped us identify how business activities affected the environment and where stronger controls were required.
Our environmental work covered waste, energy use, materials, pollution prevention and compliance obligations. We also examined environmental risks associated with equipment, storage, transport and construction activity.
Preventing water pollution was one area requiring clear controls. Employees needed to understand what substances presented a risk, how they should be stored and what action to take following a spill.
Training supported these arrangements, but leadership remained essential. Environmental procedures achieve little if managers ignore poor practice or treat sustainability as a task for one department.
My later work as a Chartered Environmentalist strengthened my belief that environmental management should form part of operational decision-making. It should influence purchasing, planning, project delivery and performance reviews.
Health and safety leadership
ISO 45001 places strong emphasis on leadership, worker participation, hazard identification, risk management and continual improvement.
Construction presents significant risks. Work at height, vehicles, equipment, manual handling, substances and changing site conditions all require effective control.
Policies provide direction, but safe performance depends on what happens at the workplace. Employees need suitable training, equipment, supervision and clear routes for raising concerns.
Managers also need to listen. The people carrying out the work often identify practical risks before they appear in formal reports.
Employee involvement helped us understand where procedures worked and where changes were needed. It also strengthened ownership because safety was discussed as part of daily work rather than treated as a separate compliance exercise.
I explored this relationship further in Business Process Re-engineering and Health and Safety. Operational improvement should strengthen safety rather than trade it against speed or cost.
Preparing for an external audit
Successful audit preparation starts long before the auditor arrives. An organisation should not need to create a different version of itself for audit day.
Records should reflect normal activity. Employees should understand their responsibilities because they use them in their work, not because they have memorised an answer for an auditor.
Our preparation included reviewing objectives, legal obligations, risks, training records, internal audit findings, customer feedback and management actions.
We also checked whether previous actions had produced the intended result. Closing an action on a spreadsheet does not prove that a problem has been resolved.
Internal audits played an important part. They gave us an opportunity to identify weaknesses early, speak with employees and test whether written procedures matched working practices.
Finding a problem internally was not treated as failure. It gave us time to understand the cause and strengthen the system before it affected employees, customers or the environment.
The audit result
The external audit was conducted by Citation ISO Certification. It recorded 35 positive observations and no nonconformities.
The auditors recognised work across statutory compliance, risk management, training, customer service, environmental control and workplace safety.
At the time, I said the result reflected the diligence and commitment our employees brought to maintaining high standards. That remains my view.
The achievement belonged to the people applying the system every day. Employees maintained records, reported concerns, followed controls and suggested improvements. Managers provided direction and resources, but the system depended on participation across the business.
Zero nonconformities did not mean the work was finished. Certification requires continued attention. Risks change, legal duties develop, employees join the organisation and operational pressures create new demands.
Continual improvement after certification
Certification should provide confidence that a management system meets defined requirements. It should also support better performance.
Audit findings, incidents, near misses, complaints, environmental data and employee feedback all provide opportunities to improve.
Each improvement needs ownership and a clear purpose. The organisation should record the starting position, agree the required result and check whether the action worked.
This principle connects closely with my approach to ITIL 4 and operational improvement. Processes should support value and learning rather than exist solely to demonstrate compliance.
Project controls also support management system improvements. My article on PRINCE2 Project Management in Practice explains how clear responsibilities, defined stages and proportionate governance support delivery.
Management systems and leadership
Leadership was central to the audit result. Senior managers needed to understand the system, review performance and provide resources. They also needed to challenge poor practice.
Employees quickly notice when leaders discuss standards during audits but ignore them during operational pressure. Credibility comes from consistent decisions.
If safety is described as a priority, managers must support safe decisions when programmes are tight. If environmental performance matters, purchasing and operational choices must reflect it. If quality matters, recurring customer problems need proper investigation.
Leadership also means accepting evidence that something is not working. Defending an ineffective process protects the process rather than the organisation.
The strongest management systems make it easier for people to do the right work. They clarify responsibilities, provide reliable information and support action before a weakness becomes a serious failure.
Changes to the ISO standards
The audits at T Newman Hire Ltd took place against the editions applicable at the time.
ISO 14001:2026 has since replaced ISO 14001:2015. Organisations certified against the earlier edition need to agree their transition arrangements with their certification body.
ISO also states that ISO 9001:2026 is expected to replace ISO 9001:2015 in September 2026.
ISO 45001:2018 remains the published occupational health and safety standard, with a new edition under development.
These revisions reinforce the need to keep management systems active. Organisations should monitor changes, assess their effect and update processes before transition deadlines.
Applying the lessons today
The audit achievement took place during my time at T Newman Hire Ltd, but the lessons continue to shape my work as an Operations Manager at National Grid Electricity Distribution.
Utilities and construction share many operational demands. Safety, environmental performance, quality, competence, legal compliance and service reliability all depend on clear responsibilities and consistent leadership.
The scale and technical requirements differ, but the management principles remain familiar. Understand the risks, involve employees, use evidence, act on weaknesses and review whether improvements have worked.
An ISO certificate has value when the management system behind it improves daily decisions. The audit result matters because it showed that our policies, controls and employee involvement were working together.
Further Reading
Paul Brothwood: Chartered Environmentalist, Sustainability and Motorcycle Travel
Paul Brothwood: Business Process Re-engineering and Health and Safety
Paul Brothwood: PRINCE2 Project Management in Practice
Paul Brothwood: ITIL 4 and Operational Improvement
Paul Brothwood is an Operations Manager at National Grid Electricity Distribution and a Chartered Environmentalist. He writes about operational excellence, leadership, environmental management, ISO standards, project delivery, health and safety and continual improvement, drawing on experience across financial services, public service, construction and utilities.
Comments
Post a Comment