This manual sets out a quality, environmental, health and safety and information security system in one place, with Sections 6 to 8 giving each standard its own detail.

Effective IMS Manuals

The IMS1 manual is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:

• Manual reference and title
• Information-classification
• Version
• Page number / total pages

alphaZ documents - beautifully designed, tried and tested management system documents. No junk, jargon or unnecessary content. Simple and usable documents developed over 25 years through practical use in the real world.

Further Reading

Further guidance on integrated management systems:

• Integrated Management Systems
• Managing Information Security Risks
• ISO 27001 Annex A Controls
• ISO Standards knowledge base

How to Download

This manual is supplied within the ISO 9001 / 14001 / 45001 / 27001 Toolkit - click through to the toolkit for details. Every alphaZ ISO toolkit includes the IMS1 manual written for the standards it covers.

Need Help Implementing?

If you'd like hands-on help preparing your integrated manual and Statement of Applicability, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.

ISO 9001 / 14001 / 45001 / 27001 Integrated Management System Manual

The IMS1 Integrated Management System Manual for ISO 9001:2026, ISO 14001:2026, ISO 45001:2018 and ISO 27001:2022 carries every section of the IMS1 framework in full. Sections 1 to 5 hold the shared management system, Sections 6, 7 and 8 cover environmental, health and safety and information security management, and an IT systems network overview is added as Appendix iv.

Information security reaches into the common sections too. The scope section refers Annex A controls that do not apply to F-IMS26 Statement of Applicability, 1.5 sets out the information classification used across the documents, and problems, incidents and information security events are handled through one process in 5.2.

What the Manual Covers

• Sections 1 to 5 - the common framework of scope, context, documented information and legal compliance, leadership and planning, resources, operational processes, and monitoring, evaluation and improvement, with roles for the IMS Lead, Environmental Representative, H&S Lead and Information Security Lead
• Section 6 Environmental Management - environmental commitment and compliance obligations, aspects and impacts, incident prevention and environmental arrangements
• Section 7 Health & Safety Management - commitment and worker consultation, guidance and arrangements, the health and safety procedure, accident reporting, and hazard identification and risk assessment
• 8.1 Commitment to Information Security Management - the ISMS, the Statement of Applicability, the information security policy and awareness
• 8.2 Information Security Arrangements - user accounts and access, data and information assets, incidents, third parties and suppliers, software and systems, and cloud computing services
• 8.3 IT Equipment and Physical Security - network management, IT equipment and systems monitoring, physical security, and other arrangements such as passwords, technical vulnerabilities and remote working
• 8.4 Information Security Risk Management - the risk assessment process and threat intelligence, risk treatment, risk review, and monitoring and measurement
• 8.5 Information Security Procedures and Policies - the topic-specific policies held in PP-8-100 and what each one covers

The Appendices

• Appendix i - External File References - folders and a registers key that includes the information security risks register, IT equipment register, hazard and risk assessment register and environmental performance register
• Appendix ii - IMS Folder Filing System - the suggested IMS folder, with folders for environmental and health and safety records
• Appendix iii - Terms and Definitions - general terms followed by environmental, health and safety and information security terms
• Appendix iv - IT Systems - Network Overview - a network diagram to change to your own network, or delete

Who Needs an ISO 9001 / 14001 / 45001 / 27001 Integrated Manual?

Organisations certifying to quality, environmental, health and safety and information security standards together use this manual as the single top-level document for all of them. It suits SMEs whose work involves both site activity and customer data, where one set of registers, one audit programme and one management review are far easier to keep current than separate manuals.

Included in the ISO 9001 / 14001 / 45001 / 27001 Toolkit

This manual is part of the ISO 9001 / 14001 / 45001 / 27001 Toolkit, where it is supplied with the IMS1 Manual Guidance and the registers, forms, policies and procedures it refers to.

Using the Manual

Much of Section 8 is referred to from F-IMS26 Statement of Applicability, so edit it with care and change the Statement of Applicability to match. Redraw the network diagram in Appendix iv for your own network, or delete it with its reference in 8.3.1 if there is no network. Elsewhere, yellow text marks the placeholders and instructions to complete, and the Responsibility field at the top of each section names who runs that process.

Related Documents

IMS1 Guidance covers each section, with the clauses and Annex A references behind it. PP-8-100 Information Security Policy Procedure holds the topic-specific information security policies listed in 8.5, F-IMS22 Interested Parties Register and F-IMS23 Opportunities and Risks Register hold the context, interested parties and key risks, and I-C-IMS Implementation Checklists and I-C-IMS Evidence Folders Checklist help check the system and its evidence before certification.