ISO published the sixth edition of ISO 9001 on 16 September 2026. It replaces ISO 9001:2015, the edition that most certified organizations have worked to for a decade. If you hold a certificate, you have until 30 September 2029 to move to the new edition. If you are planning to get certified, you will soon be audited against it.
The short version: this is an update, not a rebuild. Certification bodies describe the changes as evolutionary. The structure, the process approach, the plan-do-check-act cycle and risk-based thinking all stay. The new material is concentrated in leadership and planning.
This article is based on ISO's announcement and on summaries published by certification bodies. It is not a substitute for the standard. Buy a copy of ISO 9001:2026 and confirm the requirements and your transition dates with your certification body.
What changed, clause by clause
| Clause | What changed | What to check in your system |
|---|---|---|
| 3 Terms | The terms shared by all ISO management system standards are now listed in the standard, with less reliance on ISO 9000. | Nothing to change. Use the new definitions when you train auditors. |
| 4.1, 4.2 Context | The climate change wording added by the 2024 amendment is now part of the text. | Your context review should record whether climate change is a relevant issue, and why or why not. |
| 5.1.1 Leadership | Top management must promote quality culture and ethical behaviour. | How do leaders show this in practice? An auditor will ask them directly. |
| 5.2 Quality policy | The policy must reflect the organization's context and support its strategic direction more explicitly. | Read the policy next to your strategy. Does one follow from the other? |
| 6.1 Risks and opportunities | Split into subclauses 6.1.1 to 6.1.3, with actions for risks and actions for opportunities addressed separately. | If your register lists only threats, add opportunities and the actions tied to each. |
| 6.3 Planning of changes | Requirements reinforced, with more emphasis on communicating, monitoring and reviewing changes. | Pick two recent changes and trace how they were planned and followed up. |
| 7.1.4, 7.3 Support | The work environment and awareness clauses now refer to quality culture and ethical behaviour. | Update induction and refresher training, and keep a record that people received it. |
| 8 Operation, 9 Performance evaluation | Minimal change: wording and layout. | Renumber references if clause numbers moved. |
| 10 Improvement | Continual improvement requirements consolidated. | Renumber references. |
| Annex A | Rewritten and expanded to explain the intent of clauses 4 to 10. It is guidance and adds no requirements. | Read it. It is the best free explanation of what auditors will look for. |
The two changes that need real work
Quality culture and ethical behaviour
These are now explicit requirements on top management, and people across the organization must be aware of them. This is the change most likely to produce audit findings, because it cannot be met with a document alone. An auditor will look for evidence in behaviour: what happens when someone reports a problem, how a missed shipment date is weighed against releasing product that is not right, and what leaders talk about when they walk the floor.
Practical evidence includes a short statement of expected conduct that people recognize, leaders who can describe how they reinforce it, a way to raise concerns without penalty, and examples of decisions where quality or honesty came before convenience.
Risks and opportunities, separately
The 2015 edition asked for "risks and opportunities" in one breath, and many organizations responded with a risk register and nothing else. The new edition separates the two. You will need to show that you look for opportunities, such as a new market, a better process or a new technology, and that you plan actions for them as deliberately as for threats. Our article on risk-based thinking in practice gives a worked example.
What did not change
- The ten-clause structure shared with ISO 14001 and ISO 45001.
- The process approach and the plan-do-check-act cycle.
- Clause 8, where most of your operating procedures sit.
- The standard remains technology-neutral. It adds no specific requirement about artificial intelligence or digital tools.
Who needs to do what
| Your situation | What to do |
|---|---|
| Certified to ISO 9001:2015 | Plan your transition for a scheduled surveillance or recertification audit before 30 September 2029. Do not leave it to the final year. |
| Working toward first certification | Build to the 2026 edition now. Certification bodies report that new certificates to the 2015 edition stop being issued in spring 2028, and a certificate issued to the old edition would expire with the transition period. |
| Not certified, but customers ask for conformance | Use the 2026 edition as your reference and tell customers which edition your system follows. |
The transition rules are set by the international accreditation community, now called Global ACI, and applied by your certification body. Our step-by-step transition plan sets out the work in order.
Key points
- ISO 9001:2026 was published on 16 September 2026. ISO 9001:2015 certificates stop being valid after 30 September 2029.
- Most of your system stays as it is. The work is in leadership (culture, ethics, policy) and planning (risks, opportunities, changes).
- Culture and ethics need evidence in behaviour, so start with your leadership team.
Want a second pair of eyes? Chmltech helps Canadian organizations build, simplify and audit quality management systems. Book a strategy call or ask a question.
Sources
- ISO: ISO 9001:2026, what businesses need to know
- DNV: ISO 9001:2026 standard revision
- DQS: ISO 9001:2026, key changes, timeline and transition checklist
- DQS: ISO 9001:2026 is here (transition)
- SGS: ISO 9001:2026 key updates and transition guidance
