Organizations certified to ISO 9001:2015 have until 30 September 2029 to move to ISO 9001:2026. Three years sounds generous. In practice the window is shorter, because your certification body has to become accredited for the new edition first, and because the sensible moment to transition is at an audit you already have scheduled. This roadmap sets out the work in the order that causes the least disruption.
This article is based on ISO's announcement and on summaries published by certification bodies. It is not a substitute for the standard. Buy a copy of ISO 9001:2026 and confirm the requirements and your transition dates with your certification body.
The timeline you are working within
Count your audits. A three-year certificate has two surveillance audits and one recertification audit. Find which of them fall between mid-2027 and mid-2029, and pick one as your transition audit. If your recertification audit falls in that period, it is usually the natural choice, since the auditor reviews the whole system anyway. Leave at least one audit cycle in reserve in case findings need to be closed.
Step 1: Read the standard and run a gap assessment
Buy the standard and read Annex A first, since it explains the intent of each clause. Then compare your system to the changed clauses. For most organizations the gap assessment takes a day or two, because the changes are limited. Our article on what changed from 2015 lists them.
| Question | Where to look |
|---|---|
| Does our context review say whether climate change is relevant to us? | Context and interested-parties record (4.1, 4.2) |
| Can each member of top management explain how they promote quality culture and ethical behaviour? | Interview them (5.1.1) |
| Does the quality policy follow from our strategy and context? | Policy next to the strategic plan (5.2) |
| Do we plan actions for opportunities as well as for risks? | Risk and opportunity register (6.1) |
| When we change a process, do we communicate, monitor and review the change? | Two or three recent changes (6.3) |
| Do people know what quality culture and ethical behaviour mean here? | Induction and training records; ask a few employees (7.3) |
| Do our documents cite clause numbers that have moved? | Manual, procedures, audit checklists |
Step 2: Update policy, risk and change planning
Close the gaps with the smallest change that works. Resist the urge to rewrite the manual.
- Policy: revise it only if it does not connect to your strategy. One or two sentences usually do it.
- Risks and opportunities: add an opportunities section to your register, with an owner and action for each entry.
- Change planning: add three lines to your change form or procedure: who needs to be told, how the change will be monitored, and when it will be reviewed.
- Culture and ethics: agree with top management a short description of expected conduct and how leaders will reinforce it. If you already have a code of conduct, link it to the quality system.
- References: update clause numbers in documents and audit checklists.
Step 3: Train leaders, staff and internal auditors
Three groups need three different things. Top management needs an hour on what is now expected of them personally. All staff need a short awareness session on quality culture and ethical behaviour, recorded. Internal auditors need training on the new edition before they audit to it. The auditing guideline, ISO 19011, was itself revised in 2026, so this is a good moment to refresh auditor training more broadly; see internal audits that find real problems.
Step 4: Internal audit and management review to the new edition
Your certification body will expect to see that you have audited your own system against ISO 9001:2026 and that top management has reviewed the result. Run a full internal audit to the new edition, raise and close any findings, and hold a management review that covers the transition explicitly. Keep the records. They are the first thing the transition auditor will ask for.
Step 5: The transition audit
Agree the date and format with your certification body early. Transition can take place at a surveillance audit, at a recertification audit, or at a separate audit. Ask whether extra audit time will be added and what it will cost. After a successful audit and closure of any findings, your certificate is reissued to ISO 9001:2026.
Checklist
- Copy of ISO 9001:2026 purchased and read.
- Transition audit date agreed with the certification body.
- Gap assessment completed and actions assigned.
- Context review updated, including climate change.
- Quality policy checked against strategy.
- Risk register extended to opportunities.
- Change planning updated.
- Culture and ethics expectations agreed and communicated.
- Top management, staff and internal auditors trained, with records.
- Internal audit to the 2026 edition completed and findings closed.
- Management review held, covering the transition.
- Transition audit passed and certificate reissued.
Three mistakes to avoid
- Waiting until 2029. Auditor availability tightens near a deadline, and you lose your margin to close findings.
- Rewriting everything. Clauses 8 and 9 barely changed. A full rewrite adds cost and introduces errors.
- Treating culture as a document. An auditor will test it by talking to people.
Want a second pair of eyes? Chmltech helps Canadian organizations build, simplify and audit quality management systems. Book a strategy call or ask a question.
Sources
- ISO: ISO 9001:2026, what businesses need to know
- DNV: ISO 9001:2026 standard revision
- DQS: ISO 9001:2026 is here (transition)
- SGS: ISO 9001:2026 key updates and transition guidance
