ISO 9001:2026 is weeks away. What changes, what doesn't, and what to do now

ISO 9001 has not been substantially revised since 2015. That is about to change.

In mid-April 2026, ISO/TC 176/SC 2 submitted the Final Draft International Standard for ballot within ISO and CEN. The FDIS received final approval in July. Publication of the sixth edition — ISO 9001:2026 — is expected in September 2026.

The FDIS stage is significant because it closes the technical content. Only editorial changes are permitted from here. So while the final text is not yet public, the shape of the revision is no longer speculative.

Two things follow. First, if you hold an ISO 9001:2015 certificate, there is no urgent action required — and no possibility of certifying against the new edition yet. Second, this is the right moment to understand what is coming, precisely so that you can prepare in proportion rather than react in a hurry next spring.

How we got here

The revision very nearly did not happen.

The full revision cycle is set at 36 months, coordinated by ISO/TC 176/SC 2/WG 29. More than 160 member countries contribute; over a million organisations hold ISO 9001 certificates. Thoroughness here is not bureaucracy — it is the reason the standard remains usable in a start-up and a multinational alike.

What is changing

Five themes have consolidated across CD2, the DIS and the FDIS. The final wording is not yet public, so treat clause references as indicative of direction rather than as quotable requirements.

Risks and opportunities become genuinely separate

Since 2015, clause 6.1 has covered "actions to address risks and opportunities" as a single obligation. In practice, most organisations built a risk register and treated opportunities as an afterthought — or as a rhetorical exercise performed the week before the audit.

The draft splits clause 6.1 into distinct provisions for actions addressing risks and actions addressing opportunities. The intent is to make opportunity management systematic without adding bureaucracy: a documented process for identifying, evaluating and acting on opportunities, with the same rigour applied to their linkage to objectives, changes and performance measurement.

This is the change most likely to generate audit findings in 2027 and 2028. An opportunity register that is genuinely empty is a defensible position if you can show a process that would have caught something. A register that exists only as a column in a spreadsheet is not.

Quality culture and ethical behaviour become explicit

There is no standalone "culture clause". Instead, culture appears in two targeted places: a requirement in clause 5.1.1 around promoting a culture of quality and ethical behaviour, and an addition to the clause 7.3 awareness requirements covering the organisation's quality culture and ethical behaviour.

Leadership is expected to model integrity and responsibility and to foster an open working environment — the kind of environment in which people report problems early rather than late.

This will be the hardest theme to audit well, and the easiest to audit badly. Culture is not evidenced by a poster. It is evidenced by whether nonconformities are raised by the people closest to the work, whether near-misses are recorded, whether speak-up channels are used, and whether management review actually discusses what people said.

Climate change is integrated rather than appended

Amendment 1:2024 added two lines to clause 4 across the ISO management system standards: the organisation shall determine whether climate change is a relevant issue in its context, and interested parties can have requirements related to climate change. Those additions have been folded into the body of the 2026 edition.

Worth being precise, because this is widely overstated: requirements have not expanded beyond the 2024 amendment. ISO 9001 is not becoming an ESG standard. Sustainability gains prominence in the treatment of context and interested parties; it does not acquire a new set of performance obligations. If you already handled Amendment 1:2024 properly, you have handled this.

Context connects to strategic direction

The draft introduces strategic direction as an explicit perspective in clause 5.2.1 — quality policy, objectives and actions aligned more directly with long-term business strategy. Digitalisation and artificial intelligence are relevant here as context factors: not as new requirements, but as issues an organisation would be expected to have considered when determining its context.

The underlying message is that context and strategy are not background material to be refreshed annually for the auditor. They are inputs to the management system.

Annex A is substantially rewritten

The informative Annex A — "Explanation of structure, terminology and concepts" — has been fundamentally revised, with QMS-specific terms embedded directly in the standard rather than requiring cross-reference to ISO 9000. This sounds procedural. In practice it is one of the more useful changes for anyone who has ever argued with an auditor about what "documented information" means.

What is not changing

• The Harmonised Structure. Ten clauses, same numbering, same core text as ISO/IEC 27001, ISO 14001, ISO 45001 and ISO 50001. Integrated management systems remain integrated.
• The process approach and PDCA. Untouched.
• Risk-based thinking as a foundation. Clarified, not replaced.
• Your existing system, if it works. ISO and every major certification body agree on this point: the 2026 edition is a targeted evolution. A well-functioning 2015 system will need adjustment, not reconstruction.

The transition mechanics — and one important constraint

Until ISO publishes the final standard, ISO 9001:2015 remains the only version against which certificates can be issued, maintained or renewed. New requirements take effect from the date of publication, not from FDIS approval.

Once published, the International Accreditation Forum is expected to confirm a transition period, historically three years — which would put the end of the transition around September 2029. That figure is not yet official. Neither is the publication date itself.

There is a second constraint that clients often discover late. Certification bodies cannot audit against the new edition the day it appears. Each body must complete auditor training and obtain an extension of its accreditation scope from its national accreditation body — DAkkS, in our case. Industry projections put certification-body readiness across late 2026 into 2027, with the first ISO 9001:2026 certificates realistically appearing in 2027.

The practical consequence: the transition window is shorter than the headline number. If the IAF confirms three years from September 2026, but accredited audits do not begin until mid-2027, the genuinely available window is closer to two years — and it will be crowded at the end, as every transition period is.

What to do before September

The temptation is to do nothing, or to do everything. Both are mistakes. A proportionate programme looks like this.

Now (before publication)

1. Brief the people who own the clauses. Twenty minutes on the five themes above for your quality function, process owners and top management. No documentation changes.
2. Run a light self-assessment. Where are you already strong — climate context, if you handled Amendment 1:2024; risk management, if your register is live? Where is there genuinely nothing to point at, which will usually be opportunity management and culture evidence?
3. Pick two or three focus areas. Not ten. Currency of risk and opportunity records, evidence of speak-up and near-miss reporting, and the connection between quality objectives and business strategy are the usual candidates.
4. Do not rewrite documentation against a draft. The FDIS is not the standard. Editorial changes are still possible, and any restructuring you do now may need redoing.

After publication (Q4 2026 onward)

5. Buy the standard and do a proper gap analysis against the published text, not against a comparison table produced by a third party.
6. Use your existing cadence as the anchor. Internal audit and management review are already scheduled. Add the revision as a standing agenda item rather than creating a parallel project.
7. Talk to your certification body about timing. Whether your transition audit happens as an extension to a surveillance visit or is combined with recertification changes the cost and the calendar. This is worth planning 12 months out, not three.

What this means if you certify with us

Proks Certification is DAkkS-accredited for ISO 9001:2015 (D-ZM-21753-01-00), recognised internationally through the IAF Multilateral Recognition Arrangement. We are tracking the revision through publication and will confirm our accredited scope extension and transition arrangements once the final text and the IAF transition resolution are available.

Two commitments in the meantime. We will not audit you against a draft — clients are assessed against the standard in force, and nothing else. And where the new themes overlap with what a good audit already examines, we will tell you what we see in your current surveillance visits, as observations rather than findings, so that the eventual transition audit contains no surprises.

If you hold an ISO 9001 certificate and want to walk through the revision against your specific system, get in touch. If you are considering ISO 9001 for the first time, certify against the 2015 edition now — a system built well transitions easily, and waiting for 2027 costs you two years of the benefit.

Sources

• ISO, ISO/FDIS 9001 — Quality management systems: Requirements (project page, Edition 6), iso.org/standard/88464.html
• ISO/TC 176/SC 2 committee updates, committee.iso.org/home/tc176sc2
• ISO 9001:2015/Amd 1:2024 — Climate action changes
• DQS, "ISO 9001 Revision 2026 — overview of upcoming requirements and changes"
• DNV, "Revision of ISO 9001 — Quality Management System"
• SGS, "ISO 9001:2026 — Key updates and transition guidance"
• TÜV Rheinland, "Revision of ISO 9001 coming in 2026"

Last reviewed: 3 August 2026. ISO/FDIS 9001 is a draft in the approval stage and is not the published standard. Clause references and content descriptions reflect the DIS and FDIS stages and may change before publication. This article will be updated when the final edition and the IAF transition resolution are available.

‍