ISO 9001:2026: what actually changed

Published by Curavest on 26 October 2026. Sources checked 26 October 2026.

If you hold an ISO 9001:2015 certificate, you have until 30 September 2029 to transition, and the work is smaller than the coverage suggests. This page sets out what changed, what it means in practice, and the claims you should ignore.

What actually changed

The structure is unchanged. Clauses 4 to 10 remain, with the same numbers, so an existing quality management system does not need renumbering or rebuilding. The changes below are the substantive ones.

Quality culture and ethical behaviour

Leadership now explicitly includes promoting quality culture and ethical behaviour, and awareness extends to it. In practice this means being able to show that quality is valued rather than merely documented. A conversation with your team, not a new procedure.

Risks and opportunities separated

Clause 6.1 is now split into determining risks and opportunities, actions to address risk, and actions to address opportunity. This mainly clarifies existing practice; most systems already hold the thinking but not in that structure.

Planning of changes strengthened

Clause 6.3 now expects monitoring and evaluating effectiveness, communication of changes, and review of results. This is the change most likely to require a genuine procedural update, because it asks for evidence that a change worked.

Interested parties and context

Management review now takes account of changes in the needs and expectations of interested parties, and clause 4 references the context of the organisation more directly. Existing analysis usually covers this; it may need refreshing.

Climate change

The 2024 climate amendment is now embodied in the standard rather than sitting separately. The requirement is to determine whether climate change is a relevant issue for your quality management system. It is not a requirement to set environmental targets or implement environmental standards.

Annexes

Annex A has been expanded as guidance. Annex B has been removed. Annex A is informative. It helps you interpret the standard but imposes no requirements.

How much work is it?

The body that governs certification transitions summarises the changes as largely intuitive and practicable, attainable with reasonable effort. UKAS, the UK accreditation body, describes the revision as introducing targeted updates rather than fundamental change, with most changes relating to clarification, restructuring and drafting conventions.

For most businesses the answer is: a gap analysis against the new wording, then targeted amendments to the handful of procedures that touch the clauses above. It is not a rebuild. If you are told it is, ask which clause requires it.

The deadlines

Your certificate does not become invalid on publication. There is a three-year transition, ending 30 September 2029.

16 September 2026

ISO 9001:2026 published. The 2015 edition is withdrawn on the same day.

During 2026–2027

Certification bodies transition their own accreditation to the new edition.

From early 2028

Certification bodies stop accepting new applications against the 2015 edition.

30 September 2029

All certificates transitioned. Certificates to the 2015 edition cease to be valid.

The practical warning is capacity, not the date. Transition audits can be combined with a routine surveillance or recertification audit, so most organisations will fold the work into a visit they were having anyway, but the final year is the busiest. If your recertification falls in 2029, it is worth bringing it forward.

One caution when you talk to certification bodies: while a body's own accreditation to the new edition is pending, certification against ISO 9001:2026 should not be described as accredited. Your certification body will tell you where they are in that process.

Common misstatements to ignore

Alongside the artificial intelligence claim, several other requirements are widely attributed to the 2026 edition that are not in the standard. Treat any of these with suspicion:

• A mandatory business continuity plan.
• A required climate risk analysis.
• Software validation under clause 7.1.5.
• Digital skills requirements under clause 7.2.
• A new mandatory "process owner" role.

Most of this material was written before publication, forecasting what the standard might say. It still ranks in search results and still reads as though it describes the published text.

What we do about it

ISO 9001 Readiness covers transition as part of the work: a gap analysis against the new edition, targeted amendments rather than a rewrite, and internal audit before your certification body sees it. It is led by Alexandre Beltrão, a certified ISO 9001:2015 Lead Auditor.

Curavest prepares you for certification. The certificate itself is issued by an independent certification body. We do not issue them, and a consultancy that offered to would be undermining the independence the certificate depends on.

Sources. ISO catalogue entries for ISO 9001:2026 and ISO 9001:2015; ISO's guidance publication on ISO 9001 myths and facts; the mandatory transition requirements issued for certification bodies; and UKAS Technical Bulletin on the ISO 9001:2026 transition (Revision 1, 7 October 2026). Verified 26 October 2026. If a date here disagrees with your certification body's own letter, follow their letter and tell us so we can correct this page.