ISO 9001:2026 is out: what changes and how to plan your transition

2026-09-30 8 min readBy the ICS technical team

On 16 September 2026, ISO published the sixth edition of ISO 9001, the most widely used quality management standard in the world. It replaces the 2015 version, the one most certified companies in Panama were audited against. If your organization is already certified or on its way, the first piece of news is reassuring: this is not a new standard. The structure, the process approach and the logic of the system stay the same. The second piece of news is that there are concrete changes, and it is better to learn about them before an auditor points them out.

What changes in practice

These are the changes with the most impact on a system that is already up and running:

• Risks and opportunities, each on its own. The 2015 version handled them in a single requirement, and in practice most companies ended up with a risk matrix and not a single opportunity identified. The new edition splits them into two subclauses (6.1.2 for risks and 6.1.3 for opportunities), so auditors will expect concrete actions on both fronts.
• Quality culture and ethical behaviour. Top management must now explicitly promote a quality culture and ethical behaviour (5.1.1), and people must be aware of it (7.3). A poster on the wall will not do: auditors will look for it in interviews and in how decisions are actually made.
• Climate change, within the context. The 2024 amendment already required organizations to determine whether climate change is a relevant issue and to consider what interested parties expect about it. The 2026 edition builds this into the text of the standard. For many companies the conclusion will be short, but it has to have been analysed, and you should be able to show it.
• Closer alignment with other ISO standards. ISO 9001:2026 fully adopts the harmonized structure shared by management system standards. If your company also works with ISO 14001 or ISO/IEC 27001, integrating the systems becomes easier.
• A rewritten explanatory annex. Annex A, which is informative, has been rewritten to explain the structure, concepts and terminology. It adds no obligations, but it leaves less room for interpretation.

What does not change matters too. The standard remains technology-neutral: topics such as artificial intelligence were discussed during the revision but did not become specific requirements. Each organization decides how to address them within its own context.

How long is the transition?

Deadlines are not set by the standard itself but by the international accreditation system. The expected arrangement, as happened with the 2015 version (whose transition closed in September 2018), is a three-year period from publication, that is, until around September 2029. During that time ISO 9001:2015 certificates remain valid. Confirm the exact dates with your certification body.

There is a practical detail: certification bodies need to update their own accreditation before they can audit against the new edition, so in the first months most will keep certifying to the 2015 version. If your company is about to certify, there is no point in stopping to wait: a 2015 certificate will remain valid during the transition, and the upgrade can be done later during an audit that is already scheduled. That said, it makes sense to design your system with the 2026 changes in mind from now on.

What to do if your company is already certified

A sensible order, from least to most effort:

1. Get the standard and compare it with your system.A gap analysis between the 2015 and 2026 versions tells you exactly what to adjust and what already complies. In most cases, the list is short.
2. Update risks, opportunities and context.Review your matrix so it includes opportunities with concrete actions, and keep a record of your analysis of interested parties and climate change.
3. Prepare management and staff.Quality culture and ethical behaviour are audited by talking to people. Management must be able to explain how it promotes them, and staff should recognise it.
4. Train your internal auditors.The guideline for auditing management systems, ISO 19011, also has a new 2026 edition. An internal audit against the new requirements is the best rehearsal before the external one.
5. Schedule the transition audit.Include progress in the management review and agree with your certification body to combine the transition with a surveillance or recertification audit, making use of a visit you already have scheduled.

If you have not started implementing yet, use the 2026 edition as your reference from day one and you will not have to adjust your system twice. And if your company is also certified to ISO 14001, note that it published its own 2026 edition in April: you can plan both transitions together.

The most common mistake: leaving it to the end

Three years sounds like plenty of time, and that is exactly why it gets wasted. In the previous transition, many organizations left the change for the last few months and ran into fully booked audit schedules and little room to close findings. An early diagnosis costs little and turns the transition into an orderly process instead of a race against the calendar.