ISO 9001:2026 Is Here: What the Revision Means for Your Certification

6 min read

For the first time since 2015, ISO 9001 is getting a real update. The Final Draft International Standard has cleared ballot, and ISO/TC 176/SC 2 — the committee that owns the standard — has set publication for September 16, 2026. If you’re certified today, or working toward certification, here’s what’s actually changing and what it means for you.

This isn’t a ground-up rewrite

Worth saying up front: ISO 9001:2026 sharpens and clarifies the existing standard rather than replacing it. The core structure — the Annex SL high-level framework shared across ISO management system standards — stays intact, so a certified QMS isn’t starting from zero. The changes are targeted at three areas where auditors and users have flagged ambiguity since 2015.

What’s actually changing

Leadership and quality culture (Clause 5.1). The revision adds explicit expectations around top management promoting a quality culture and ethical behavior, with new guidance on how leadership demonstrates this in practice — not just signing off on policy, but visibly modeling it.

Risk and opportunity management (Clause 6.1). The old, somewhat blended 6.1 requirement is now split into three distinct subclauses (6.1.1–6.1.3), separating how you identify risks and opportunities from how you plan actions to address them. This should make it easier to show an auditor a clean, traceable line from risk identified to action taken.

Climate change considerations. The 2024 amendment requiring organizations to determine whether climate change is a relevant issue for their QMS is now folded directly into the base standard, rather than sitting as a bolt-on amendment.

Your transition timeline

Once ISO 9001:2026 publishes, organizations get a three-year transition period, running through September 2029, to move from the 2015 version. Your current ISO 9001:2015 certificate stays fully valid during that window — nothing about your existing certification changes overnight. Registrars will start incorporating the 2026 requirements into surveillance and recertification audits on a rolling basis, so the practical deadline for most companies is whichever recertification cycle falls before the 2029 cutoff.

What to do between now and your next audit

There’s no need to rush a special audit or rewrite your QMS this month. What’s worth doing now is a light gap review ahead of your next surveillance or recertification audit: check that your leadership commitment documentation speaks to quality culture and ethics, confirm your risk register or risk process can be cleanly mapped to the new 6.1.1–6.1.3 structure, and note whether climate-related risks have been formally considered anywhere in your QMS. Catching these gaps on your own timeline is a lot less stressful than catching them mid-audit.