ISO Compliance Insights & Best Practices

QHSE Policy: 8 Essential Commitments for 3 Standards (2026)

Last updated 19 September 2026

A QHSE policy is one document doing the job that three standards assign to clause 5.2, and it works only if it satisfies each of them on its own terms.

ISO 9001:2026, ISO 14001:2026 and ISO 45001:2018 all require top management to establish a policy that is appropriate to the organisation’s purpose and context, provides a framework for objectives, commits to satisfying applicable requirements and to continual improvement, and is documented, communicated and available — but each adds commitments of its own: quality to customer and applicable requirements; environment to the protection of the environment including prevention of pollution and to fulfilling compliance obligations; safety to providing safe and healthy workplaces, eliminating hazards and reducing OH&S risks, and consulting and participating with workers.

A combined policy that averages them fails all three audits. This guide sets out the eight commitments a QHSE policy has to carry to satisfy the three standards, the clause 5.2 mechanics they share, a structure and a worked example, the communication and review evidence an auditor asks for, and the errors that turn an integrated policy into a nonconformity in three management systems at once.

The QHSE policy: eight commitments across three standards — Shared: appropriate to purpose and context · framework for objectives · satisfy applicable requirements · continual improvement. Quality: customer requirements. Environment: protect the environment and prevent pollution · fulfil compliance obligations. Safety: safe and healthy workplaces · eliminate hazards and reduce risks · consult and participate with workers.

What clause 5.2 requires of a QHSE policy

Requirement	ISO 9001:2026 (quality)	ISO 14001:2026 (environment)	ISO 45001:2018 (OH&S)
Established by top management	Yes	Yes	Yes, with workers’ consultation in view
Appropriate to the purpose and context of the organisation	Yes — and supports its strategic direction	Yes — including the nature, scale and environmental impacts of its activities, products and services	Yes — including the nature and scale of its OH&S risks and opportunities
Framework for setting objectives	Quality objectives	Environmental objectives	OH&S objectives
Commitment to satisfy requirements	Applicable requirements	Fulfil compliance obligations	Fulfil legal requirements and other requirements
Commitment to continual improvement	Of the QMS	Of the EMS to enhance environmental performance	Of the OH&S management system
Standard-specific commitments	—	Protection of the environment, including prevention of pollution and other commitments relevant to context	Safe and healthy working conditions for the prevention of work-related injury and ill health; eliminate hazards and reduce OH&S risks; consultation and participation of workers and workers’ representatives
Documented information	Available and maintained	Maintained	Maintained
Communicated	Within the organisation; understood and applied	Within the organisation	Within the organisation
Available to interested parties	As appropriate	Available to interested parties	Available to interested parties, as appropriate

The 2026 editions of ISO 9001 and ISO 14001 kept the clause 5.2 structure; what changed around it — climate change as a context issue in clause 4, quality culture and ethical behaviour among leadership’s commitments in ISO 9001:2026 5.1 — belongs in the policy’s context and tone rather than as new required sentences. Our guides to ISO 9001:2026 changes and ISO 14001:2026 transition cover the editions.

The eight commitments of a QHSE policy

Meet customer and applicable requirements — quality’s core, and the phrase that makes the policy a QMS policy.
Fulfil compliance obligations and legal and other requirements — the environmental and safety wording, stated so both standards recognise it.
Protect the environment, including prevention of pollution — ISO 14001’s own words; “prevent pollution” alone is the 2004 wording and reads as dated.
Provide safe and healthy working conditions to prevent work-related injury and ill health — ISO 45001 5.2 b), verbatim in substance.
Eliminate hazards and reduce OH&S risks — 5.2 d), and the commitment auditors most often find missing from combined policies.
Consult and participate with workers — 5.2 e); a policy signed by top management alone, without the consultation the standard expects, is a finding.
Continually improve — all three, with the object stated (the management system and its performance).
Provide the framework for objectives — a sentence that says objectives are set, measured and reviewed under this policy, so clause 6.2 hangs off it.

Two additions are optional but sensible: a commitment relevant to context under ISO 14001 (climate change mitigation or adaptation, resource use, life-cycle perspective), and a commitment to quality culture and ethical behaviour that ISO 9001:2026 now names among leadership’s responsibilities.

A QHSE policy structure and worked example

Section	Content	Worked example (fabrication and installation contractor, 180 staff)
Scope and purpose	Who the policy binds, what the organisation does, the three systems it governs	‘This policy applies to all activities of [Company] at its Leeds works and on customer sites: the design, fabrication and installation of structural steelwork, and the management of quality, environmental and occupational health and safety performance.’
Context statement	The nature and scale of quality, environmental and OH&S issues	‘Our significant environmental aspects are energy use in fabrication, steel waste and transport emissions; our significant hazards are work at height, lifting operations and hot work; our customers require conformity to their specifications and to the relevant execution class.’
The eight commitments	One sentence each, in the standards’ own terms	‘We will provide safe and healthy working conditions for the prevention of work-related injury and ill health, eliminate hazards and reduce OH&S risks, and consult and participate with our workers and their representatives in doing so.’
Framework for objectives	How objectives are set and reviewed	‘Quality, environmental and OH&S objectives are set annually at management review, assigned to named owners and measured through our KPIs.’
Responsibilities	Top management’s accountability; everyone’s role	‘The Managing Director is accountable for this policy; every employee and subcontractor is responsible for applying it.’
Communication and availability	How it is communicated and to whom it is available	‘Communicated at induction and annually; displayed at the works and on our website; available to customers, regulators and the public on request.’
Approval and review	Signature, date, version, review interval	Signed by the Managing Director, dated, reviewed at each management review.

Communicating and evidencing the QHSE policy

Evidence	Why the auditor asks	Practical form
Approval	Top management established it	Signature and date of the most senior person in scope; minutes of the meeting that approved it
Worker consultation (ISO 45001)	5.2 e) and 5.4 require consultation on the policy	Safety committee minutes or a consultation record showing the policy was discussed before approval
Communication	‘Communicated within the organisation’ and, for quality, ‘understood and applied’	Induction records, briefing records, noticeboard photographs, intranet page; and the interviews — staff able to say what the policy commits to
Availability to interested parties	All three require it in some form	Website page; a customer or regulator request log
Link to objectives	Framework for objectives	The objectives register citing the policy commitment each objective serves
Review	Policy remains appropriate as context changes	Management review minutes covering the policy; version history

Our guide to the QHSE management review covers where the policy is reviewed; QHSE KPIs covers the measures the objectives framework produces.

QHSE policy errors

Averaging the three standards. “We are committed to quality, the environment and safety” satisfies none of them; each requires its own commitments in recognisable terms.
Missing 5.2 d) and e). Hazard elimination and worker consultation are the two ISO 45001 commitments combined policies most often omit.
A policy nobody can recall. ISO 9001 requires it “understood and applied”; an auditor who asks three operators and gets blank looks writes a finding regardless of the noticeboard.
Generic context. A policy with no reference to the organisation’s actual aspects, hazards and customers is not “appropriate to the purpose and context”.
Signed by the QHSE manager. Top management establishes the policy; delegating the signature undermines the clause it exists to satisfy. Our guide to the QHSE manager covers who does what.
Never reviewed. Editions changed in 2026; a policy dated 2019 that references ISO 9001:2015 is a finding under the 2026 transition.

Frequently asked questions

What must a QHSE policy contain?
The clause 5.2 requirements of ISO 9001, ISO 14001 and ISO 45001 together: appropriateness to purpose and context, a framework for objectives, commitments to satisfy applicable requirements and compliance obligations, to protect the environment including prevention of pollution, to provide safe and healthy working conditions, to eliminate hazards and reduce OH&S risks, to consult and participate with workers, and to continual improvement — documented, communicated and available to interested parties.

Can one policy cover all three standards?
Yes, and most integrated systems do it. The condition is that each standard’s specific commitments appear in terms its auditor recognises, not as a blended sentence. A single page is usually enough.

Who signs the QHSE policy?
Top management — the most senior person or body accountable for the organisation within the scope. A QHSE manager’s signature does not satisfy ‘established by top management’.

How often should it be reviewed?
At each management review at minimum, and whenever context changes: a new site, new activities, an edition change to the standards, or a significant incident. The 2026 editions of ISO 9001 and ISO 14001 are a reason to review it now.

Does the policy have to be public?
It has to be available to interested parties — as appropriate under ISO 9001 and ISO 45001, and without qualification under ISO 14001. A website page is the usual way; a request log is the fallback evidence.

Where this leaves you

Write the QHSE policy as eight commitments in the three standards’ own words, on a context statement that names your aspects, hazards and customers, signed by top management after consulting workers, communicated until people can repeat it, and reviewed at every management review. One page is enough; averaging is not.

References

ISO 9001 — Quality management systems — Requirements (iso.org) — Sixth edition, September 2026; clause 5.2 quality policy.
ISO 14001 — Environmental management systems (iso.org) — Fourth edition, April 2026; clause 5.2 environmental policy.
ISO 45001:2018 — Occupational health and safety management systems (iso.org) — Clause 5.2 OH&S policy, including 5.2 d) and e).

More on QHSE

The QHSE policy — you are here
QHSE management system: the complete guide
QHSE documentation: the four tiers
The QHSE manager: role and duties
QHSE management review: the three-standard agenda
Integrated management systems

The integrated QHSE policy template with the eight commitments, the separate quality, environmental and OH&S policy versions, the communication record and the policy review checklist are in the QHSE Documentation Bundles, or start with the free templates.

Governance Docs

Governance Docs LLC