Article

ISO 9001:2026: What Has Changed and What Businesses Need to Do

ISO 9001:2026 has now been published, marking the sixth edition of the international Quality Management Systems standard. Published on 16 September 2026, the new edition replaces ISO 9001:2015 and begins the transition period for organisations currently certified to the previous version.

For businesses with an established QMS, however, this is not a reason to start again.

The September 2026 ISO-Cert Online bulletin describes the revision as an evolution of the standard businesses already meet, not a rebuild. The familiar ten-clause structure, process approach, Plan-Do-Check-Act (PDCA) cycle and risk-based thinking all remain. The changes are focused on a relatively small number of areas, with additional guidance provided through a new informative Annex A.

That means the first step is not rewriting every document in your QMS. It is understanding what has changed, checking how those changes apply to your organisation and making targeted updates where necessary.

ISO 9001:2026 Has Now Been Published

The sixth edition of ISO 9001 was published on 16 September 2026. The transition period then begins, with September 2029 identified as the transition deadline in the ISO-Cert Online bulletin. The bulletin also notes that an organisation’s existing ISO 9001:2015 certificate remains valid throughout the transition period.

This gives certified organisations time to prepare properly.

It is worth stressing that the new standard does not replace the whole management-system framework. The core approach remains familiar, which means a healthy ISO 9001:2015 system is already a strong foundation for the transition.

The bulletin summarises the position well: there is no need to overhaul your quality management system simply because the edition has changed. Businesses should be cautious of guidance suggesting that a complete rebuild is necessary.

For most organisations, the transition is therefore about identifying the areas affected, making sensible adjustments and demonstrating that those changes are working.

What Are the Key Changes in ISO 9001:2026?

The ISO-Cert Online bulletin identifies four areas where the requirements have substantive changes. None requires a wholesale rewrite.

1. Climate change is now explicit

Climate change has already been incorporated into ISO 9001 through the 2024 amendment, so this is not a brand-new 2026 requirement.

Organisations must determine and record whether climate change is a relevant issue for them, even where the conclusion is that it is not. The standard also recognises that interested parties may have climate-related expectations.

For businesses that have not yet addressed this in their context analysis, it should be treated as a priority.

The practical action is relatively straightforward: review Clause 4.1 and 4.2, document your conclusion and make sure the relevant context and interested-party information is reflected in your QMS.

2. Quality culture and ethical behaviour

The new edition explicitly requires top management to promote and demonstrate a culture of quality and ethical behaviour.

This does not necessarily mean introducing a major new programme.

The bulletin suggests that a light evidence trail may be sufficient, such as:

  • Quality culture and ethics referenced in leadership communications
  • Relevant statements in policies
  • Discussion during management review
  • Evidence that these expectations are communicated rather than simply written down

The important shift is that quality culture is now more explicit in the requirements. It is not enough for quality to sit solely with the quality manager; leadership should demonstrate its importance in the way the organisation is managed.

3. Risks and opportunities are separated

Clause 6.1 has been restructured so that the way an organisation treats risks is documented separately from how it identifies and pursues opportunities.

For organisations currently combining both in a single register, this is likely to be one of the most obvious practical changes.

The good news is that the underlying risk-based approach does not need to be rebuilt. In many cases, the main adjustment will be to how that information is structured and documented.

The key question is therefore not “Do we need a completely new risk system?”

It is: Does our current approach clearly distinguish how we manage risks from how we identify and pursue opportunities?

4. Awareness of culture and ethics

The awareness requirements have also been expanded.

People doing work under the organisation’s control should be aware of the quality culture and expected ethical behaviour, alongside the existing awareness requirements.

For many businesses, this could be addressed through a relatively small update to existing induction or training material.

What matters is that employees understand what the organisation expects and that there is evidence of that awareness.

ISO 9001:2015 vs ISO 9001:2026

The most useful way to look at the revision is not as “old standard versus completely new standard”, but as an established framework with targeted changes.

AreaISO 9001:2015ISO 9001:2026
Overall structureTen-clause structureRemains
Process approachCore principleRemains
PDCA cycleCore frameworkRemains
Risk-based thinkingEstablishedRemains
Climate changeAddressed through 2024 amendmentExplicitly incorporated into relevant context and interested-party considerations
LeadershipLeadership and commitmentGreater emphasis on quality culture and ethical behaviour
Risks and opportunitiesCovered under Clause 6.1More clearly separated
AwarenessExisting awareness requirementsIncludes awareness of quality culture and ethical behaviour
Annex ANo equivalent guidance annexNew informative guidance annex
TechnologyTechnology-neutralRemains technology-neutral

The bulletin also identifies several smaller refinements, including strengthened change-management expectations under Clause 6.3, terminology changes around documented information and an expanded set of terms in Clause 3. These are described as clarifications rather than major new burdens and can be addressed during normal document-review cycles.

Just as importantly, some frequently discussed topics have not become mandatory new requirements.

The bulletin states that ISO 9001:2026 remains technology-neutral and introduces no mandatory requirements specifically for AI, cybersecurity, ESG reporting or supply-chain resilience.

That distinction matters because organisations should base their transition planning on the published standard rather than on assumptions about what the revision “might” have introduced.

What Do the Changes Mean for Certified Businesses?

For an organisation currently certified to ISO 9001:2015, the message is relatively reassuring.

Your existing certificate remains valid throughout the transition period. The bulletin advises that there is no immediate need to make major changes beyond ensuring that the climate-change requirement is already covered in the context analysis.

The existing QMS should therefore remain the starting point.

For most organisations, the transition review is likely to focus on:

  • Context and interested parties
  • Leadership and quality culture
  • Risks and opportunities
  • Employee awareness
  • Change management
  • Relevant documented information
  • Internal audit arrangements
  • Management review

The new informative Annex A is also worth reading. The bulletin makes clear that it is guidance only, creates no new requirements and cannot itself be used as the basis for a non-conformity. However, it can help organisations understand how the requirements are interpreted, particularly around quality culture and risk/opportunity thinking.

ISO 9001:2026 Transition Timeline

The ISO-Cert Online bulletin provides the following timeline:

DateMilestone
February 2024Climate-change amendment published and already applicable
August 2025Draft International Standard released
16 September 2026ISO 9001:2026 published and transition begins
Around mid-2027First 2026 certificates expected to become available once certification bodies complete their own accreditation
September 2029Transition deadline and withdrawal of ISO 9001:2015

The bulletin describes this as an expected three-year transition window and notes that certification bodies are progressing through their own accreditation arrangements before they can issue 2026 certificates.

For businesses, that means there is time to plan. It also means there is little reason to leave everything until the final year. The bulletin notes that certification-body capacity may become tighter as the September 2029 deadline approaches, so early planning can provide greater flexibility around audit timing.

What Should Businesses Do Now?

You do not need to complete the full transition immediately.

However, there are several sensible actions to take now.

1. Check climate-change considerations

Confirm that climate change has been assessed and documented within your context analysis and relevant interested-party considerations.

2. Review quality culture and ethics

Add quality culture and ethical behaviour to your next management review and record the discussion. Consider whether leadership communications and policies reflect these expectations.

3. Carry out a light gap check

Review the four main areas of change and identify where your existing QMS already meets the new requirements and where a targeted update is needed.

4. Review your risk and opportunity records

If risks and opportunities currently sit together in one register, check whether the new Clause 6.1 structure requires them to be separated.

5. Update awareness material

Add quality culture and ethical behaviour to relevant induction and training records.

6. Plan your internal audit

Include the new topics within your internal audit scope and allow enough time to gather evidence before the transition assessment.

7. Speak to your certification body

Find out how and when your organisation will transition and whether the assessment can be aligned with an upcoming surveillance or recertification audit.

The bulletin specifically recommends this approach because combining the transition with a scheduled audit can be more efficient than arranging a separate visit.

How Steve’s Team Can Support Your Transition

For organisations that would prefer help reviewing their QMS, ISO-Cert Online can support the transition process.

The company states in its September bulletin that, as the certification body, it is updating its own accreditation to the 2026 edition and will contact certified clients in good time to plan their transition. It expects this to normally be combined with the next recertification audit so that it fits the existing certification schedule.

ISO-Cert Online also recommends that existing clients regularly check the ISO-Cert Unite Portal Messages Board, where further updates on the transition and other certification matters will be issued.

For businesses that want to understand their position before their scheduled transition, ISO-Cert Online can also arrange a gap review against the 2026 requirements.

That can be particularly useful where a QMS has not been reviewed recently or where the organisation wants to identify changes early.

Download the September 2026 ISO 9001 Bulletin

Want the key changes in one place?

Download the September 2026 ISO 9001 Update Bulletin to see what has changed, what remains the same and what ISO-Cert Online recommends you do during the transition.

CTA: Download the September 2026 Bulletin

Start With a Review, Not a Rewrite

ISO 9001:2026 brings changes, but the September bulletin makes one point particularly clear: businesses with a healthy ISO 9001:2015 system do not need to start again. The familiar ten-clause structure, process approach, PDCA cycle and risk-based thinking remain in place.

The practical task is to identify the areas that have changed, review how they apply to your organisation and make proportionate updates.

Start with the climate-change requirement. Review quality culture and ethical behaviour. Separate risks and opportunities where necessary. Update awareness materials. Then give your revised processes enough time to operate before testing them through internal audit and management review.

With the transition period running towards September 2029, there is time to do this properly.

The best starting point is a clear understanding of where your QMS stands today.

Already certified to ISO 9001:2015? Contact ISO-Cert Online to arrange a gap review against ISO 9001:2026 and plan your transition.

Frequently Asked Questions

1. What is ISO 9001:2026?

ISO 9001:2026 is the sixth edition of the Quality Management Systems standard, published on 16 September 2026. It retains the existing framework while introducing targeted changes to improve clarity, leadership and quality culture.

2. What are the main changes in ISO 9001:2026?

The main changes cover climate change, quality culture and ethical behaviour, separate treatment of risks and opportunities, and awareness of culture and ethics. Other refinements affect change management, terminology and documented information.

3. Do businesses need to rewrite their entire QMS?

No, ISO 9001:2026 retains the familiar framework, and existing procedures, records and documented information remain the foundation. Businesses should make targeted changes where necessary rather than completely rebuilding their Quality Management System.

4. What should businesses do first when moving from ISO 9001:2015 to 2026?

Businesses should first review the published requirements, confirm climate change is addressed in their context analysis, check the four main changes and complete a light gap review to identify necessary actions.

5. When does the ISO 9001:2026 transition period end?

The transition period is scheduled to end in September 2029, when ISO 9001:2015 is withdrawn. The bulletin describes this as an expected three-year transition window following publication of the 2026 edition.

6. What happens to an ISO 9001:2015 certificate during the transition?

An existing ISO 9001:2015 certificate remains valid throughout the transition period. Businesses can use this time to prepare their QMS and coordinate transition arrangements with their certification body.

7. Does ISO 9001:2026 require risks and opportunities to be recorded separately?

Yes, Clause 6.1 is restructured so actions for risks are documented separately from identifying and pursuing opportunities. For businesses currently combining both in one register, the main change is documentation.

8. What is the new Annex A in ISO 9001:2026?

Annex A is an informative guidance annex covering Clauses 4 to 10. It does not create new requirements or provide grounds for nonconformities, but it helps explain quality culture and risk-opportunity thinking.


Steve Weaver - Director of ISO-Cert Online Ltd
Steve Weaver

Steve Weaver is a Director of ISO-Cert Online Ltd, an ISO Certification Body and consultancy provider focused on helping businesses grow through ISO management systems. With a background in engineering and a deep understanding of the certification industry, Steve leads a team that provides tailored solutions to help companies streamline their operations and achieve sustainable growth. He is known for his practical and pragmatic approach and his ability to connect ISO management systems to tangible business benefits.

Leave a Reply

Your email address will not be published. Required fields are marked *

Privacy Settings
We use cookies to enhance your experience while using our website. If you are using our Services via a browser you can restrict, block or remove cookies through your web browser settings. We also use content and scripts from third parties that may use tracking technologies. You can selectively provide your consent below to allow such third party embeds. For complete information about the cookies we use, data we collect and how we process them, please check our Privacy Policy
Youtube
Consent to display content from - Youtube
Vimeo
Consent to display content from - Vimeo
Google Maps
Consent to display content from - Google
Spotify
Consent to display content from - Spotify
Sound Cloud
Consent to display content from - Sound