ISO 9001:2026: what changes and how to prepare for the transition

ISO 9001:2026 was published on 16 September 2026 and replaces the 2015 version. If you have a certified quality management system, this means something very concrete: by a specific date your certificate will need to be updated to the new edition, or it will lose its validity. If you are thinking about getting certified now, the question is different: should you start with the 2015 version or go straight for 2026?

The good news is that the revision is an evolution, not a revolution. The structure remains the harmonised one shared by all management system standards, the underlying requirements do not change and the documentation you have built up over the years remains largely valid. The changes focus on a few points — quality culture, ethical behaviour, a clearer approach to risks and opportunities, change management — but these are points an auditor will check carefully, because they call for new evidence.

In this guide you will find the official status of the standard, the transition deadlines, the changes clause by clause, what stays the same, the impact on certified companies and new certifications, a six-step transition plan and the mistakes to avoid.

Is ISO 9001:2026 already in force? Publication and official dates

Yes: ISO 9001:2026 was published by ISO on 16 September 2026 and is the sixth edition of the standard. From that date it is formally the reference standard for quality management systems, although certifications to the 2015 version remain valid during the transition period.

In Italy the standard has been adopted as UNI EN ISO 9001:2026: UNI, the Italian standards body, has made it available in its catalogue, in Italian and English, since 16 September 2026. If your system refers to the national version of the standard, this is the reference to use in your updated documents.

Who decides the transition period

ISO publishes the standard, but it does not decide how long old certificates remain valid. That task falls to the international cooperation of accreditation bodies. Until 2025 this was the IAF (International Accreditation Forum); since 1 January 2026 IAF and ILAC have merged into a single organisation, Global ACI (Global Accreditation Cooperation), which has taken over their functions. Many guides still refer to "IAF rules": the substance is the same, only the name of the organisation has changed.

The deadlines to mark in your calendar

The Global ACI transition document (Global ACI-TECH-3-TR 2029-09-30, issued on 4 September 2026 and applicable from 16 September 2026) sets a transition period of three years, calculated from the last day of the month of publication. The key dates are:

• 31 March 2027: accreditation bodies must be ready to handle the new edition.

• 30 September 2027: deadline for accreditation bodies to complete their transition decisions on certification bodies for the 2026 edition.

• 31 March 2028: last date to obtain an initial certification to ISO 9001:2015. After that, new certifications are issued only to the 2026 edition.

• 30 September 2029: final deadline. ISO 9001:2015 certificates that have not been transitioned lose their validity.

One practical detail matters more than the dates themselves: until a certification body is accredited for the new edition, it cannot issue ISO 9001:2026 certificates. The timing of the first transition audits therefore depends on when your certification body completes its own transition, which must happen by 30 September 2027. Three years sounds like a lot, but audit calendars fill up towards the end: if you plan early, you choose the timing; if you wait, the timing chooses you.

What changes in ISO 9001:2026 compared with 2015

ISO 9001:2026 introduces targeted changes, concentrated on leadership, planning and staff awareness. There are no new clauses that overturn the framework, but several existing requirements become more explicit and therefore easier to verify in an audit. Here are the main changes, in clause order.

Quality culture and ethical behaviour (clauses 5.1 and 7.3)

This is the most significant change in conceptual terms. Top management must promote a quality culture and ethical behaviour within the organisation. The requirement is also reflected in awareness (7.3): people working under the organisation's control must be aware of the importance of quality culture and ethical behaviour.

What does this mean in practice? That it is no longer enough to state management's commitment in the quality policy. The auditor will look for concrete signs: how management communicates expectations, how nonconformity reports are handled without looking for someone to blame, whether there are clear rules on conflicts of interest or commercial pressures that could compromise quality, and how the right behaviours are recognised. Annex A, revised in the new edition, offers guidance on how to interpret these concepts, but it remains informative: the evidence has to be built on the reality of your company.

Risks and opportunities treated separately (clause 6.1)

In the 2015 version risks and opportunities were dealt with together, and many companies managed them in a single table in which opportunities were often an afterthought. The 2026 edition reorganises clause 6.1 into distinct sub-clauses, separating actions to address risks from actions to pursue opportunities. The new structure is 6.1.1 (determining risks and opportunities), 6.1.2 (actions to address risks) and 6.1.3 (actions to address opportunities).

The message is clear: opportunities are not "positive risks" to be noted for the sake of completeness, but must be analysed and turned into actions with an owner and a measurable outcome.

Climate change and interested parties (clauses 4.1 and 4.2)

The reference to climate change is not new in 2026: it was already introduced with the February 2024 amendment (ISO 9001:2015/Amd 1:2024), common to all management system standards. The new edition makes it a permanent part of the text. The organisation must determine whether climate change is a relevant issue for its context and, if it is, take it into account in the system. Interested parties, in turn, may have climate-related requirements.

Interested parties also feature in management review: clause 9.3.2 now requires you to consider changes in the needs and expectations of interested parties relevant to the quality management system, a step that links context analysis and management decisions more explicitly.

Change management and policy (clauses 5.2 and 6.3)

Planning of changes (6.3) has been strengthened: in addition to purpose, consequences, integrity of the system, resources and responsibilities, you must now determine how the effectiveness of changes will be monitored and evaluated, how they will be communicated and how their results will be reviewed. The quality policy (5.2) must take the organisation's context into account and support its strategic direction. Finally, Annex A has been modified to clarify the requirements, while Annex B of the 2015 edition has been removed.

What stays the same in the new ISO 9001

Everything that forms the backbone of the system remains unchanged: harmonised structure, process approach, PDCA cycle, risk-based thinking and customer focus. For a company with a living, well-maintained quality system, most of the work has already been done.

The ten-clause structure

Clauses 4 to 10 keep the same position and the same meaning: context, leadership, planning, support, operation, performance evaluation, improvement. Renumbering affects only a few sub-clauses. This means that your manual, procedures and forms do not need to be rewritten from scratch, just updated where the revision has touched them.

The harmonised structure is the same one used by ISO 14001, ISO 45001, ISO 27001 and the other management system standards. If you run an integrated system, this is good news: common changes (such as climate) are handled once for all schemes. If you want a refresher on how this common logic works and on the difference between standard, certification and certificate, you will find it in the guide ISO certifications: what they are, what they are for and how they work.

Operation (clause 8)

Clause 8, which describes how the company designs, produces and delivers products and services, undergoes minimal changes. Management of customer requirements, design and development, control of external providers, production control, release and control of nonconforming outputs remain substantially as before. It is the largest part of the standard and the one that usually carries the most operational documents: the fact that it remains stable greatly reduces the transition workload.

What is missing, despite expectations

During the revision there was a lot of talk about artificial intelligence, digitalisation, supply chain resilience and sustainability in the broad sense. The official summary of changes published by Global ACI lists no new requirements on these topics. So be wary of anyone offering "mandatory updates" on AI or ESG as part of the ISO 9001 transition: they may be useful strategic choices, but they are not requirements of this standard.

Certified companies and new certifications: what changes for you

The impact of ISO 9001:2026 depends on your starting point. A company that is already certified must plan a transition by 30 September 2029; a company starting now must choose which edition to certify against, knowing that the 2015 version will no longer be available for initial certifications after 31 March 2028.

If you are already certified to ISO 9001:2015

Your certificate remains valid during the transition. The move to 2026 takes place through a dedicated audit or, more often, by combining the assessment of the new requirements with a surveillance or recertification audit that is already scheduled. Combining the transition with an existing audit is generally the most efficient choice, but it leaves less leeway: if nonconformities on the new requirements emerge during that audit, you will need to close them before the updated certificate is issued.

The key question to ask yourself is: when in my three-year cycle does the next suitable opportunity fall? A company with recertification in 2027 can make the transition coincide with recertification. A company with recertification at the end of 2029 cannot wait until then: it will have to transition during a surveillance audit or with a specific audit. The certification body assesses whether the transition audit needs additional audit time and must justify its calculation.

If you are about to get certified for the first time

Until 31 March 2028 it is still possible to obtain an initial certification to ISO 9001:2015. Does it make sense? In many cases it is better to set up the system directly on the 2026 requirements, even if the audit will still be against 2015: the differences are limited, and a system that already integrates quality culture, ethical behaviour and the separation between risks and opportunities will not need to be reopened a few months later.

If, on the other hand, you need the certification urgently — a tender, a customer that requires it as a qualification requirement — it can be reasonable to certify to 2015 now and plan the transition at the first suitable audit. The choice depends on the certification body's timing: ask explicitly when it will be accredited to issue 2026 certificates. To understand how to build the system from the ground up, the guide Quality management system: what it is and how to implement it with ISO 9001 covers process mapping, essential documents and roles.

If you have an integrated system

If you are also certified to ISO 14001, ISO 45001 or ISO 27001, you have an advantage: some changes, starting with climate and the harmonised structure, are common. It makes sense to coordinate the transitions, not least because ISO 14001 was itself revised in 2026 and has its own transition timetable. Planning a single gap analysis for all schemes avoids updating the same document three times.

How to prepare for the ISO 9001:2026 transition: a six-step plan

A well-managed transition follows six steps: gap analysis, document updates, training, internal audit, management review and transition audit. For an SME with a system already in place, the work can be spread over a few months without disrupting operations, provided you start with a written plan.

If you would rather not tackle it alone, this is exactly the work Complaion's dedicated Lead Auditor does with you: starting from the gap analysis, they build a tailored plan and support you step by step through to the transition audit.

Step 1: gap analysis on the new requirements

The starting point is to compare the current system with the 2026 text, clause by clause. Focus on the clauses affected by the revision: 5.1, 5.2, 6.1, 6.3, 7.3 and 9.3, plus 4.1 and 4.2 if you have not yet incorporated the 2024 climate amendment. For each requirement, note three things: what already exists, what is missing and what evidence will demonstrate conformity. The output is an action plan with owners and deadlines, not a list of good intentions.

A practical tip: buy the official text of the standard, in the UNI edition if you work in Italian. Summaries and comparison tables are useful for getting your bearings, but the audit is carried out against the text, and some nuances (for example how 6.1 now separates actions on risks from actions on opportunities) only become clear by reading it.

Step 2: update context, policy and documents

Update your context analysis with the assessment of climate change, if you have not already done so after the 2024 amendment, and your interested parties table, which you will also find as an input to management review. Review the quality policy so that it is consistent with the strategic direction. Split the risks and opportunities register into two distinct approaches, each with actions, owners and criteria for evaluating effectiveness. Formalise how you plan changes, with the new elements required by 6.3.

For quality culture and ethics you do not need a new manual. You need to define a few clear things: how management communicates expectations, how problems and misconduct are reported, and how they are tracked.

Step 3: training and awareness

Clause 7.3 requires staff to be aware of quality culture and ethical behaviour. In an audit this is checked by talking to people, not by reading course records. Plan a short training session for all levels, a more in-depth one for process owners and internal auditors, and keep the evidence. The point is not to have people recite a definition from memory, but for a department head to be able to explain what they do when a delivery is at risk of going out nonconforming under time pressure.

Step 4: internal audit on the new requirements

Before the external audit, check the updated system with an internal audit that explicitly covers the new or modified requirements. Internal auditors must know the 2026 edition: if your team was trained on 2015, plan a refresher. If you handle the transition with Complaion, the internal audit on the 2026 edition is carried out by your Complaion Lead Auditor, so you do not need to retrain internal auditors for it. Handle any nonconformities found through the normal corrective action process, so you will reach the external audit with proof that the system works, not just that it has been rewritten.

Step 5: management review

The review must take the transition into account: outcome of the gap analysis, status of actions, internal audit results, the effectiveness of actions on risks and opportunities and changes in the needs of interested parties, as the new 9.3.2 requires. It is also the moment when management concretely demonstrates its role in promoting quality culture. A box-ticking review, filled in just before the audit, is exactly what an attentive auditor spots straight away.

Step 6: transition audit

Agree with the certification body when and how to carry out the transition: at surveillance, at recertification or with a dedicated audit. Ask well in advance whether it is already accredited for 2026 and how much additional audit time it expects. Arrive with an organised file: gap analysis, updated documents, training evidence, internal audit report, management review minutes. If nonconformities emerge, closing them within the required timeframe is a condition for issuing the new certificate.

Time and effort: what affects the transition

There is no standard duration for the transition: it depends above all on the health of the current system. A living system, with internal audits and reviews done properly, needs a targeted update; a system that sits "in a drawer", maintained only for surveillance audits, risks turning the transition into a half recertification.

The factors that make the difference

The factors that most affect time and effort are:

• Maturity of the existing system: up-to-date documents, monitored indicators and closed corrective actions greatly reduce the work.

• Size and complexity: number of sites, processes, shifts and people to involve in training.

• Other certified schemes: an integrated system requires coordination, but allows common changes to be handled only once.

• Position in the three-year cycle: the date of the next surveillance or recertification audit determines how much time you really have.

• Dedicated internal resources: who is handling the transition, how much time they have available, and whether internal auditors need updating.

The financial commitment also depends on these factors and on any additional audit time required for the transition. A realistic assessment has to start from the company's specific situation: that is why it makes sense to ask for a tailored quote after an initial analysis, rather than relying on generic estimates.

When to start

The short answer is: now, with the gap analysis. Not because the deadline is imminent, but because a gap analysis takes little effort, immediately clarifies the scope of the work and lets you choose the timing of the audit calmly. If you put it off until 2029, you will be competing with thousands of companies for external auditors' available dates, with less leeway to close any nonconformities.

The most common mistakes in the transition to ISO 9001:2026

Transition mistakes almost always stem from two opposite attitudes: underestimating the changes because "not much changes anyway", or overdoing them by rewriting everything. Both cost time and produce a less effective system.

Rewriting all the documentation

The revision does not require you to redo your manual and procedures. Rewriting everything to "align with 2026" confuses staff, breaks version traceability and lengthens timescales with no benefit in the audit. Intervene only where the gap analysis shows a gap, and update references to the standard in an orderly way.

Treating culture and ethics as a document

The most common risk is to respond to the new requirement in 5.1 with a downloaded "code of ethics" signed by management. A document can be useful, but on its own it proves nothing. The auditor will look for consistency between what is written and what happens: how mistakes are handled, whether people feel free to report a problem, whether commercial priorities systematically override quality. This is evidence built over time, not the day before the audit.

Leaving opportunities in the risk register

Many companies will simply split the old register into two columns. The 2026 edition instead gives opportunities a sub-clause of their own (6.1.3): specific actions must be decided and their effectiveness checked, separately from risks. An opportunity without an action, an owner and a measured outcome is a note, not a requirement met.

Waiting for the last available window

If you schedule the transition at the last available audit before 30 September 2029, you have no margin: a major nonconformity not closed in time can cause the certificate to lapse, with direct consequences for tenders and customer qualifications. It is equally risky not to check whether your certification body is already accredited for 2026 when you book the audit.

How to manage the ISO 9001:2026 transition with Complaion

The transition to ISO 9001:2026 is a targeted update, but it requires method: a gap analysis carried out against the text, new evidence on quality culture and ethics, risks and opportunities managed separately and a timetable that does not force you to chase the last available date.

Complaion supports you through the transition from start to finish. Your dedicated Lead Auditor carries out the gap analysis between the 2015 and 2026 editions on your specific situation, tells you what to update and what to leave as it is, and draws up a tailored transition plan with you. In the Complaion platform you update documents and evidence in a single space, keep deadlines under control with the compliance calendar and prepare for the transition audit, which can be combined with surveillance or recertification. Before that audit, your Lead Auditor carries out the internal audit on the new requirements, so you arrive with any nonconformities already closed. That way the system stays up to date after the transition too.

There is no one-size-fits-all route: we propose the most suitable path based on your company's situation. If you are already certified to the 2015 edition, we fit the transition into your audit cycle. If you are approaching certification for the first time, we assess with you which edition to build your system on. If you have several integrated standards, for example ISO 9001 and ISO 14001, we coordinate a single gap analysis and one update of the shared documents. If your deadlines are close, we set priorities with you so that you reach the audit with the evidence you need.

More than 1,000 clients already work with this approach: you can read about their experiences in our case studies.

If you want to understand how much work your transition really involves, explore the ISO 9001 certification service or book a free call with one of our Lead Auditors: we will analyse your situation and prepare a tailored quote.

Frequently asked questions about ISO 9001:2026

When was ISO 9001:2026 published?

ISO 9001:2026 was published by ISO on 16 September 2026. It is the sixth edition of the standard and replaces ISO 9001:2015. In Italy it is available as UNI EN ISO 9001:2026, in Italian and English. The transition period for already certified companies began on that date.

What is the deadline for moving from ISO 9001:2015 to 2026?

According to the transition document published by Global ACI, the organisation that took over the IAF's functions in 2026, ISO 9001:2015 certificates must be transitioned by 30 September 2029. After that date, certificates that have not been updated lose their validity. Initial certifications to the 2015 version are possible only until 31 March 2028. It is good practice to check the dates with your certification body.

Is my ISO 9001:2015 certificate still valid?

Yes, your ISO 9001:2015 certificate remains valid throughout the transition period, until its natural expiry or at the latest until 30 September 2029. To keep it beyond that date you need to pass a transition audit against the new edition. Scheduled surveillance audits continue as normal.

What are the main changes in ISO 9001:2026?

There are four main changes. Top management must promote a quality culture and ethical behaviour, and staff must be aware of them. Risks and opportunities are dealt with in separate sub-clauses. Climate change, introduced with the 2024 amendment, is permanently integrated into the context analysis. Planning of changes is more detailed. The ten-clause structure remains unchanged.

Do I need to redo all my quality system documentation?

No, you do not need to redo your documentation. ISO 9001:2026 keeps the same structure as 2015 and clause 8 on operation changes only minimally. You need to update the documents affected by the revision, typically context analysis, policy, risks and opportunities register, change management, training plan and management review minutes. A gap analysis shows exactly where to intervene.

Does the transition require a separate audit?

Not necessarily. The transition can take place during a surveillance audit, during the three-yearly recertification or with a dedicated audit. Combining it with an audit that is already planned is often the most efficient choice, but leaves less leeway to correct any nonconformities. In any case, the certification body assesses whether additional audit time is needed.

Should I get certified to 2015 now or wait for 2026?

It depends on how urgent it is. If you need the certificate soon for a tender or a customer, you can obtain it to 2015 until 31 March 2028 and transition later. If there is no urgency, it is better to build the system to the 2026 requirements from the outset and get certified to the new edition as soon as the certification body is accredited. Either way, it is worth setting up quality culture and separate management of risks and opportunities straight away.

Does ISO 9001:2026 introduce requirements on artificial intelligence or ESG?

No, ISO 9001:2026 contains no new specific requirements on artificial intelligence, digitalisation or sustainability in the broad sense. The only explicit environmental topic is climate change, to be considered in the context analysis if relevant. For AI governance there is a dedicated standard, ISO/IEC 42001.