If your business is certified to ISO 9001:2015, you may be wondering what needs to change with the publication of ISO 9001:2026 on 16 September 2026. Start with the system you have, check what already works, what evidence you can show and where a change is needed.
An ISO 9001:2026 gap analysis helps you compare your current quality management system (QMS) with the new edition. It identifies which requirements your existing processes already meet, where gaps or weak evidence remain, and which actions need attention first. This gives you a clear, prioritised plan to prepare your QMS for the transition without changing processes or documents that already work.
Existing certified organisations have until 30 September 2029 to transition under the published transition rules. For key dates and preparation steps, read our ISO 9001:2026 transition timeline. Confirm the applicable timing with your certification body.
What Is an ISO 9001:2026 Gap Analysis?
An ISO 9001:2026 gap analysis is a structured check of your current QMS against the published 2026 standard. It shows where your process already meets a requirement, where more evidence is needed and where you should take action.
To make the review easier to manage, use simple status labels to record each finding. These help you see which areas need further checks, where a gap remains and which actions should be prioritised:
- In place: The current process addresses the requirement, and suitable evidence supports it.
- Review: More evidence or a closer check is needed to confirm whether the requirement is met.
- Gap identified: The requirement is not fully addressed, or the process is not effective.
- Next action: Record the task, the person responsible and the target date are needed.
These labels are a practical tool, not an official ISO score or a replacement for an audit.
What Should an ISO 9001 Gap Analysis Checklist Include?
An ISO 9001 gap analysis checklist helps you record findings, identify actions and track progress towards meeting the requirements. It should capture the process reviewed, the evidence found, any gaps identified, the person responsible for each action, the target date and how you will check the action has worked.
Keep the checklist suited to your business. A small firm may need a simple record, while a multi-site company may need a more detailed review to cover different teams and processes.
What Should an ISO 9001:2026 Checklist Cover?
An ISO 9001:2026 checklist should help you check whether your current QMS meets the requirements of the revised standard. Review how your business manages key areas and whether you can show clear evidence of what happens in practice.
- Leadership: Leaders own quality and align it with business goals.
- Business context: Your QMS reflects business changes and customer needs.
- Quality culture and ethics: Staff value quality and know how to raise concerns.
- Risks and opportunities: Your business reduces risks and pursues improvements.
- Staff awareness: Employees know their roles and impact on quality.
- Suppliers: External providers are monitored based on their impact on quality.
- Internal audits: Audits check process performance and compliance.
- Continual improvement: Your business uses findings and data to drive improvements.
How to Compare the Old and New Editions
An ISO 9001:2015 to 2026 gap analysis should compare current controls with the new text, not assume each clause needs a new procedure. Keep what works and change only what the findings justify. Use the official ISO standard information and ISO transition guidance to check the ISO 9001:2026 requirements.
How to Plan an ISO 9001 Transition Gap Analysis
You can carry out an ISO 9001 transition gap analysis in seven steps:
- Confirm your QMS scope.
- Read the published standard.
- Gather procedures, records and results.
- Compare current controls with each relevant requirement.
- Record findings and evidence.
- Assign actions, owners and dates.
- Check results and agree the transition route with your certification body.
Compare existing controls with the ISO 9001:2026 requirements and test real practice, not just document names. A process may look sound on paper but fail in daily use. Another may already meet a requirement, even if a record needs clearer wording.
What Evidence Should You Gather?
Gather records that show how your system works: policies, work instructions, quality goals, customer feedback, complaints, supplier reviews, training, corrective actions, internal audits and management review notes. The evidence will depend on your work, risks and QMS scope. Talk to staff as well as reading records; they can show whether written steps match real practice.
How an ISO 9001 QMS Review Helps
An ISO 9001 QMS review helps you check whether your system still meets business needs and identify areas that need improvement. Look for outdated procedures, unclear responsibilities, recurring problems and controls that staff do not follow.
For example, if customer complaints keep recurring, previous corrective actions may not have fully resolved the cause. Review the records, find out why the problem continues and decide what further changes are needed. Use these findings to identify gaps, assign actions and improve how your QMS works.
ISO 9001:2026 Gap Analysis: 15 Questions to Ask
Use these 15 questions to compare your existing QMS with the ISO 9001:2026 requirements. For each question, record the evidence you reviewed, what it shows, any gaps you identify and the actions needed to address them next.
1. Does Our QMS Support Our Business Goals?
Check whether your QMS reflects your current services, customer needs and business plans. Review whether your quality objectives and processes support the organisation’s strategic direction.
2. Has Our Business Context Changed?
Review changes in markets, customer needs, technology, applicable regulations, suppliers, staff and company structure. Assess whether climate change is a relevant issue for your QMS, based on your organisation’s activities and circumstances.
3. Are the Needs of Interested Parties Up to Date?
Check whether customer, staff, supplier, regulator or owner needs have changed. Review them after major changes and as part of normal QMS checks. Keep the record current.
4. Do Leaders Take an Active Role in Quality?
Look for proof that leaders set goals, provide resources, review results and act on problems. Quality should not sit with one manager alone. Can leaders explain key risks and priorities?
5. Can We Show a Positive Quality Culture?
Check how staff report errors, share ideas and respond to problems. Review team talks, training and lessons learned. A separate “quality culture procedure” is not automatically needed.
6. Do We Support Ethical Behaviour?
Check that staff know how to raise concerns and handle records honestly. Review how leaders respond to errors and whether data is reported fairly. Use normal work as evidence; do not create a policy just for an audit.
7. Do We Treat Risks and Opportunities Clearly?
A risk may block a result; an opportunity may improve it. Check how each is found, reviewed, owned and acted on. Avoid lists that no one uses.
8. Do We Act on Useful Opportunities?
Look for less rework, faster service, better feedback or stronger supplier performance. Ask, “What changed after we spotted this opportunity?” If nothing happened, find out why.
9. Are Our Quality Goals Clear?
Each goal should be useful, owned and reviewed. “Improve quality” is hard to track. “Cut repeat complaints by 10% by March” is clearer if realistic and assigned to an owner. Use measures that aid decisions.
10. Do Staff Know Their Role?
Ask staff how their work affects customers, how they report problems and which goals apply to them. Training records help, but staff must also understand what to do.
11. Do Documents Match Real Work?
Compare procedures and work instructions with real practice. Update items that are wrong, unclear or old. Do not change file names or dates just to show “2026”.
12. Do We Control Suppliers and Outside Services?
Review supplier choice, checks and responses to poor results. Focus on suppliers whose goods or services affect quality. Keep evidence of action when a supplier fails to meet an agreed need.
13. Will Our Internal Audits Cover the ISO 9001:2026 Requirements?
Review your internal audit criteria and plans against the relevant ISO 9001:2026 requirements. Check whether auditors understand the changes and whether audits test how processes work in practice, not just whether documents exist. Identify any gaps and address them before the transition assessment.
14. Does Management Review Lead to Action?
Check that leaders review results, feedback, goals, audits, problems, suppliers, resources and improvement. Record decisions, owners and follow-up. A useful meeting leads to action, not just minutes.
15. Can We Show Continual Improvement?
Find examples of improved processes, fewer repeat issues, or solved customer problems. Record what changed and whether results improved. This shows the QMS supports daily work.
ISO 9001 Gap Analysis UK: What Should SMEs Consider?
For UK SMEs, the review should reflect their business activities, customer requirements and target contracts. ISO 9001 certification is not a legal requirement for every UK business, but customers, supply-chain partners or tender conditions may require it.
For public contracts, read the buyer’s rules and supplier guidance under the Procurement Act 2023. It explains procurement duties; it does not mean every public contract requires ISO 9001. For UK SMEs, match the review to the business’s size, scope and risks.
What Should the Gap Assessment Report Include?
An ISO 9001 gap assessment report should record the requirement, evidence, finding, impact, action, owner, due date and proof needed to verify the result.
For example, a firm may record complaints but fail to review trends. It could set a monthly review, name an owner and check whether repeat complaints fall. The report should drive action, not just list clause numbers.
What Should You Do When You Find a Gap?
Once you identify a gap, follow these steps: identify, assess, prioritise, assign, update, implement, record evidence and verify. Address issues that affect key controls, customers or requirements first. Then focus on unclear records, staff awareness and other areas for improvement. Set deadlines based on the impact of each gap and the level of risk involved.
What Mistakes Should Businesses Avoid?
Do not rewrite every document first or use a generic checklist without checking your own work. A signed form does not prove a process works. Do not leave findings without an owner, date or check. For UK SMEs, the aim is a clear QMS, not extra paperwork.
Do You Need to Rewrite Your Entire QMS?
Usually, no. Keep controls that work and change only what the findings justify. Some documents may need updates. For an overview of the revision, read our ISO 9001:2026: What Has Changed and What Businesses Need to Do article.
Conclusion: Turn Findings Into a Practical Plan
An ISO 9001:2015 to 2026 gap analysis is the starting point for your transition plan. Use the findings to prioritise actions, assign responsibilities and deadlines, update affected controls and check that changes work. Review progress with management and agree on the transition plan with your certification body. For support, visit ISO 9001 Certification.
Frequently Asked Questions
Is a Formal Gap Analysis Mandatory?
ISO transition guidance recommends assessing the current QMS, but does not require a separate document titled “gap analysis”. You must still meet the standard and follow the rules for your certificate.
What Is the Difference Between a Gap Analysis and an Internal Audit?
A gap review compares the system with the new requirements and lists actions. An internal audit tests whether processes meet audit criteria and work as planned.
When Must Certified Businesses Complete the Transition?
Existing ISO 9001:2015 certificate holders have until 30 September 2029 under the published rules. Confirm your plan with your certification body.
What Should an ISO 9001 Transition Checklist Include?
An ISO 9001 transition checklist should list requirements, evidence, findings, actions, owners, due dates and checks. It supports the work but does not prove certification.
How Should a Small Business Start?
Start with the scope of the QMS, the published standard and the records you already use. Check the main changes, speak to process owners and assign actions based on impact. This helps keep the work clear.
