Skip to content
Standards & Compliance

ISO 9001:2026 Is Out: What Changed and a 90-Day Transition Plan

ISO 9001:2026 was published on 16 September 2026. Same structure, new requirements on quality culture, ethics, risks vs opportunities and climate. Deadlines, the translation trap, and a 90-day plan.

H
Hamze Zare Nasiri
September 28, 2026
ISO 9001:2026 Is Out: What Changed and a 90-Day Transition Plan

The sixth edition of ISO 9001 came out on 16 September 2026. ISO/TC 176/SC 2 had announced on 7 August that the final draft (FDIS) passed with overwhelming support and that this would be the publication date (committee announcement). Since then a lot of "what changed" pages have appeared. Many were written from earlier drafts, and most are selling a gap-analysis package.

This one tries to answer three plain questions. What actually changed, what the deadlines are, and what a team holding a 2015 certificate should do this quarter. There's also a section on a mistake we found in our own standards tool, because the same mistake is probably sitting in your document archive.

What changed, and what didn't

The structure is the same. ISO 9001:2026 still follows the Harmonized Structure, the same ten clauses you know from ISO 14001 and ISO 45001, so a well-run 2015 system does not start from zero. The changes sit inside the requirements. Going by the DQS clause summary, these are the ones that matter:

  • 5.1.1, quality culture and ethical behaviour: top management must actively promote both. In 2015 this lived mostly in the principles. Now it is a requirement, and auditors will ask for evidence.
  • 6.1, risks and opportunities split: actions on risks (6.1.2) and actions on opportunities (6.1.3) are separate subclauses. If your risk register has an "opportunities" column that has been empty for three years, expect a question.
  • 7.3, awareness: people need to know the organization's quality culture and the ethics behind it, not just the quality policy.
  • Climate change in clause 4: the February 2024 amendment that hit every management system standard is now in the main text. You have to determine whether climate change is a relevant issue. That is a documented decision, not necessarily an emissions programme (more detail).
  • A rewritten Annex A: the informative annex now explains terms and the intent behind requirements more clearly. If your team works from a translation, this annex will get more use than anything else.

What's missing from that list matters too. There is no new requirement for specific software, mandatory digitisation or new reporting to an outside body. Anyone who says the new edition forces you to buy a particular system is selling that system.

Deadlines: you have until September 2029, but not for everything

The International Accreditation Forum merged with ILAC at the start of 2026 into Global ACI. Its ISO 9001 transition document, as summarised here, sets two dates worth putting in the calendar:

  • 30 September 2029: the end of the three-year transition. After that, accredited certificates against the 2015 edition are no longer valid.
  • 31 March 2028: from this date, new and initial accredited certifications can only be issued against 2026.

The second date gets missed. A company working with a consultant toward a first certificate on 2015 right now is paying for a certificate with a short life. If you haven't reached your stage 1 audit, build against 2026 from today.

Each certification body also has to get accredited for the new edition before it can certify against it, and each one publishes its own transition schedule. So the most reliable planning input is a letter from your own certification body, not a general article (this one included). If nothing arrives before your next surveillance audit, ask.

The translation problem: which text is your team reading?

A lot of quality systems are not written in English. Procedures, work instructions and internal audit checklists often use the terminology of an official national translation of the 2015 edition. National translations of a new edition usually lag the ISO release by months, and until one exists, every consultant and QA department makes up its own wording for the new clauses.

That causes real trouble. One person writes "quality culture", another "culture of quality". One procedure says "ethical behaviour", another "professional ethics". When an internal auditor searches for a term and it only turns up in half the documents, you get either a fake nonconformity or a real one nobody sees. We've written about translation accuracy in bilingual standards before; the short version is to keep a one-page internal glossary for the new terms and keep the English clause text next to the translation, never instead of it.

A mistake we found in our own tool

Probe361's bulk import for standards (a CSV upload) updates records by standard code. For fixing a typo or adding a missing clause, that is exactly right. While getting ready for new editions, we realised the same logic means that if someone imports the new edition under the old code, the 2015 text is silently replaced by 2026.

During a transition that's the last thing you want. For three years organizations need both texts. This year's surveillance audit is still against 2015, while the gap analysis and new procedures point at 2026. If your tool or shared drive keeps only "the latest version", sooner or later someone shows the auditor a clause the auditor isn't working from.

Our fix was simple. Each edition is its own record with its own code, a "supersedes" field pointing at the previous edition, and a deprecated status on the old one instead of deleting it. Clauses also carry a modified flag and change history, so someone looking for 6.1 can see it split in two. If your documents live on a shared drive, you can do the same thing with folder naming. No special tool needed.

The first 90 days

  1. Week 1: ask your certification body in writing for its transition plan and which edition your next audit will use.
  2. Month 1: buy the official 2026 text from ISO or your national standards body and file it next to 2015. Don't overwrite either.
  3. Month 1: write the internal glossary for new terms. One page is enough. Give it to everyone who writes procedures.
  4. Month 2: run the gap analysis only on the clauses that changed: 4.1 (climate), 5.1.1, 5.2, 6.1 and 7.3. You don't need to rewrite the whole quality manual.
  5. Month 3: a trial internal audit on those clauses, and put the topic on the management review agenda. For quality culture, collect evidence: minutes, training records, a decision made for quality reasons.

If audit prep in your organization usually means hunting for compliance evidence at the last minute, compliance before the inspection looks at the documentation side of this. For engineers who need a specific clause mid-task, see finding the right clause while you're working.

Common questions

Is my 2015 certificate invalid now? No. It stays valid through the transition as long as you pass surveillance audits and move to 2026 before September 2029.

Is the transition audit separate and expensive? Certification bodies usually fold it into a surveillance or recertification audit and add time for the changed clauses. Ask yours for the details and the cost.

What does climate change mean for a small workshop? You may conclude it isn't relevant. Record that decision and the reason in your context analysis.

Should we wait for a translated edition? Not to start the gap analysis. The English text is the reference; when an official translation lands, align your glossary with it.

See Probe361

Standards clause by clause, in Persian and English, with each edition kept side by side.

View product

Share This Article