ISO 9001:2026

ISO 9001:2026: what changed, and what you have to do about it.

The 2026 edition was published on 16 September 2026 and replaces ISO 9001:2015. ISO lists six main changes, the high-level structure held apart from one renumbering in Clause 10, and you have until roughly September 2029 to transition. This page is the whole picture, written by ISO consultants who audit these systems for a living.

Check your readiness — 60 seconds See the transition tracker
The dates

Three dates that matter.

16 Sep 2026ISO 9001:2026 published — the 2015 edition is withdrawn
Late 2026 – mid 2027Certification bodies accredited to audit against the new edition
16 Sep 2029Every ISO 9001 certificate must have transitioned to the 2026 edition

A three-year transition is anticipated in line with recent ISO management system revisions; exact arrangements are confirmed by the IAF and accreditation bodies at or around publication.

The delta

The six changes, and where they land.

ISO’s own foreword lists six main changes. This is what each one means in practice, clause by clause, and what an auditor will actually ask you to produce.

Clause 3

Core terms and definitions move into the standard

The 2026 edition brings a short set of core management system terms into Clause 3 itself. ISO 9000 is still the normative reference for the full quality vocabulary, so this is a convenience rather than a new obligation.

What an auditor will want to seeNothing to produce. It matters because your manual and procedures may quote 2015 definitions word for word, and some of that wording has moved.
Clause 4.1

Climate change is a named issue in your context

The 2024 amendment already required organisations to determine whether climate change is a relevant issue. The 2026 edition carries that into the body of the standard, and Clause 4.2 adds a note that interested parties can have requirements of their own about it.

What an auditor will want to seeThe determination, not a policy statement. Either climate change affects your organisation and the system reflects that, or you have recorded a reasoned conclusion that it does not.
Clause 5.1

Quality culture and ethical behaviour become a leadership duty

Top management has to promote both. This is the largest new evidence burden in the revision, because culture is not a document. It is a pattern of behaviour that has to be visible over time, which is a good deal harder to file. Note the pairing: the standard says quality culture and ethical behaviour. Where it uses the word integrity it means the integrity of the management system itself, which is a different thing.

What an auditor will want to seeDated records of what leadership actually does: walkarounds, briefings, surveys and their results, recognition schemes, and quality on the agenda where decisions get made. A signed statement of intent will not survive contact with a competent auditor.
Clause 6.1

Risks and opportunities, formally separated

Clause 6.1 is now subdivided: determining risks and opportunities, then actions to address risks, then actions to address opportunities, each in its own sub-clause. In 2015 most organisations recorded opportunities as an afterthought on the risk register, if at all.

What an auditor will want to seeDistinct records with their own owners, scoring and actions, plus evidence that opportunities were actually pursued rather than merely logged.
Clause 6.2

Objectives must be measurable, with no get-out

This one goes the other way to what most commentary predicted. The 2015 edition asked objectives to be measurable if practicable, and that qualifier has been deleted. Objectives shall be measurable. If you have been carrying a qualitative objective on the grounds that measuring it was not practicable, that argument has gone.

What an auditor will want to seeA number against every objective, monitored and updated as you go. If your register still leans on the old wording, expect that to be the first thing tested.
Clause 6.3

Management of change, strengthened

Planning of changes now runs through the purpose and consequences of the change, its impact on the integrity of the management system, resources, responsibilities, communication, how the effectiveness of the change will be monitored and evaluated, and how the results will be reviewed. In 2015 the clause stopped earlier and the loop was left open.

What an auditor will want to seeA change record that ends with an outcome, not an intention. Whatever you changed, something has to say whether it worked.
Clause 7.1.4

The working environment gets tied to culture

The environment for the operation of processes is one of the three places ISO says quality culture now shows up, alongside leadership and awareness. The social and psychological side of the working environment can be shaped by the organisation’s culture and ethical behaviour.

What an auditor will want to seeNo new register of its own, but the evidence you keep for culture has to reach the shop floor rather than stopping at the boardroom door.
Clause 7.1.6

Organisational knowledge: retained, applied and shared

The knowledge clause adds sharing to retention and application, and asks you to weigh current knowledge against changing needs and trends, then decide how to get hold of what is missing.

What an auditor will want to seeA register of critical knowledge, who holds it, the risk of losing it, and how it is being captured. Most SMEs have exactly one person who understands the thing that would stop production.
Clause 7.3

Awareness now includes the culture itself

The awareness list gains an item. People doing work under your control have to be aware of the organisation’s quality culture and ethical behaviour, alongside the policy, the relevant objectives, their own contribution and the consequences of not conforming.

What an auditor will want to seeA code of conduct or ethics commitment that staff have actually acknowledged, and induction and refresher content that covers it. Attendance records are the evidence.
Annex A · Annex B

One annex rewritten, one removed

Annex A is not new. ISO 9001:2015 carried one, and it has been rewritten and expanded to around twelve pages of clarification on structure, terminology and intent. It adds no requirements. Annex B, which listed other ISO/TC 176 standards, has been removed.

What an auditor will want to seeNot auditable in itself, but it is what your auditor will have read. Worth reflecting in your manual where it settles an argument about intent.
Just as important

What did not change.

The structure is intact. ISO 9001:2026 keeps the Annex SL high-level structure, so clause numbering and alignment with ISO 14001, ISO 45001 and ISO 27001 are unchanged. An integrated management system stays integrated. Clauses 8, 9 and 10 see terminology tidying rather than new controls. There are no new artificial-intelligence requirements, no expanded ESG provisions beyond climate change, and no new supply-chain resilience clauses, whatever you may have read. If your 2015 system is genuinely working, this is a refinement rather than a rebuild.
The plan

How to transition, in six steps.

In the order that costs least. Step four is the one that cannot be rushed, which is the whole argument for starting in 2026 rather than 2028.

  1. Read the delta, not the standardSix changes matter. Everything else is terminology. Start by knowing which of them you already satisfy.
  2. Run a gap analysis and write it downEach new requirement against what you actually hold today, with an owner and a date. This becomes your evidence that the transition was planned, which is itself auditable.
  3. Build the missing registersQuality culture and ethics is the one almost nobody has. Climate, opportunities, change effectiveness and knowledge are usually partial rather than absent.
  4. Let them run long enough to be evidenceThis is the part that cannot be compressed. A culture register created the month before a transition audit proves nothing. Twelve months of dated entries proves everything.
  5. Brief your internal auditorsThey audit against the new clauses before your certification body does. Their findings are your last cheap chance to fix something.
  6. Book the transition assessmentCertification bodies are accredited from late 2026 through mid-2027. Capacity tightens as 2029 approaches, and the last year will be the worst time to be looking for a slot.
60-second check

How ready are you, actually?

Ten questions, straight out of what changed in ISO 9001:2026. Answer honestly. Nothing is sent anywhere, nothing is stored, and you get your score and your named gaps on this page.

01Climate change is recorded as an issue in your context analysis, with a decision on whether it affects your QMS.Clause 4.1 — fixed by: Climate Considerations register
02You can produce dated evidence of top management promoting a quality culture in the last twelve months.Clause 5.1 — fixed by: Quality Culture & Ethics register
03You have a code of conduct or ethics commitment that staff have acknowledged, and awareness training covers it.Clause 5.1 · 7.3 — fixed by: Quality Culture & Ethics register
04Your quality policy references your actual context and strategic direction, rather than only a commitment to continual improvement.Clause 5.2 — fixed by: Policies register, drafted from your SWOT & PESTLE
05Opportunities are recorded and pursued as their own records, separately from risks.Clause 6.1 — fixed by: Risk & Opportunity Register
06Every quality objective is measurable. The 2015 allowance for ones that were not practicable to measure has gone.Clause 6.2 — fixed by: Objectives & Targets planner
07When you make a planned change, you record whether it actually worked.Clause 6.3 — fixed by: Change Management register
08You have a register of critical organisational knowledge and who holds it.Clause 7.1.6 — fixed by: Organisational Knowledge register
09Induction and awareness training covers quality culture and ethical behaviour, not just the policy.Clause 7.3 — fixed by: Communication & Awareness register
10You could put all of the above in front of an auditor today without rebuilding anything first.Whole system — fixed by: the portal itself, with evidence attached to every record
0 of 10 answered

Every gap above has a register waiting for it in Compliance Cloud, built, templated and populated before you log in for the first time. You are filling in a system, not building one.

If you would rather not do it by hand

Every one of these has a register waiting for it.

Compliance Cloud is a consultant-managed ISO portal. Every client portal carries a live ISO 9001:2026 transition tracker: the gap analysis above, as a working register with owners, dates and evidence attached. You can open it, edit it, and hand it to an auditor.

Access the live demo What Compliance Cloud is
Questions

ISO 9001:2026, answered.

When is ISO 9001:2026 published?
ISO 9001:2026 was published on 16 September 2026, replacing ISO 9001:2015.
How long is the transition period?
A three-year transition is anticipated, in line with recent ISO management system revisions, giving organisations until around September 2029. Exact arrangements are confirmed by the International Accreditation Forum and the accreditation bodies at or around publication. Your ISO 9001:2015 certificate remains valid throughout.
Does our certificate become invalid in September 2026?
No. Certification to ISO 9001:2015 stays valid through the transition window. What changes is that every certificate must be on the 2026 edition by the end of it, and audits against the new requirements begin once certification bodies are accredited, which runs from late 2026 through mid-2027.
Is the clause structure changing?
Barely. ISO 9001:2026 keeps the Annex SL high-level structure, so alignment with ISO 14001, ISO 45001 and ISO 27001 is preserved and an integrated system stays integrated. One thing did move: Clause 10 is reordered, with continual improvement now at 10.1 and the old 10.1 General removed. Nonconformity and corrective action stays at 10.2, so most cross-references survive, but anything citing 10.3 needs changing.
Are there new artificial intelligence or ESG requirements?
No. Despite a lot of commentary to the contrary, there are no new artificial-intelligence or digital-transformation requirements, no expanded ESG provisions beyond climate change, and no new supply-chain resilience clauses.
What is the hardest part of the transition?
Quality culture and ethical behaviour under Clause 5.1, without question. Every other change is a register or a field on an existing record. Culture has to be demonstrated through dated evidence accumulated over time, which is why starting late is expensive and starting early is nearly free.
Can we leave it until 2028?
You can, and it will cost more. The evidence the new clauses ask for is historical by nature. Twelve months of leadership records cannot be produced in a fortnight. Certification body capacity also tightens as the deadline approaches. Organisations that start in 2026 will transition as part of a normal surveillance cycle; those that start in 2029 will be buying consultancy days at short notice.
What does Compliance Cloud do about it?
Every new and changed requirement has a register in the portal, and every portal carries a live ISO 9001:2026 transition tracker holding the full gap analysis, with the requirement, the register that evidences it, the owner and the due date. On our managed tiers the transition work is part of the service, with no separate fee.

Three years sounds like a lot. It is twelve months of evidence and two surveillance visits.

The clauses that changed ask for records that accumulate. Starting now costs almost nothing; starting in 2029 costs consultancy days at short notice, in a market where everyone else has left it late too.

Book a 9001:2026 readiness review Access the live demo

You’ll be speaking with a Consultant right from the start… not a sales team.