The revised ISO 9001 standard was published on 16th September 2026, replacing ISO 9001:2015, which has been the global benchmark for quality management for over a decade.
Existing certificates to ISO 9001:2015 will remain valid, and a transition period three years is expected (to September 2029), subject to confirmation by the International Accreditation Forum. There is no need for immediate action, but it’s a good time to start understanding what’s changing.
What is changing?
The good news is that ISO 9001:2026 does not introduce any major new requirements. The core structure (Annex SL) is unchanged, and the changes are best described as clarification and alignment rather than a significant overhaul. That said, there are three broad themes worth being aware of:
1. New requirements
The standard now explicitly references “quality culture” and “ethical behaviour” within the leadership and commitment (5.1), environment for the operation of processes (7.1.l4), and awareness (7.3) clauses. In practice, this means top management is expected to visibly promote quality culture and ethical decision-making, not just document a policy. Internal audit programmes must also now define audit objectives, in addition to scope and criteria.
2. Changed requirements
Risks and opportunities have been split into separate subclauses, giving opportunities equal standing rather than leaving them as an (often!) afterthought to risk. There’s a stronger focus on “disruption” – reflecting lessons learned from recent global events – including a requirement to communicate contingency actions to customers. Organisational knowledge requirements have also been broadened, and competence requirements for external providers now extend to organisations as well as individuals.
3. Administrative changes
Terminology has been simplified and standardised, for example, “conformance” becomes “conformity”. Annex A guidance has been substantially expanded, and climate change has now been formally integrated into the standard’s requirements for understanding organisational context and interested parties.
What should you do now?
While there’s no need to rush, organisations certified to ISO 9001:2015 should start thinking about:
- How you might evidence quality culture and ethical behaviour in your organisation.
- Whether your risk and opportunity processes give equal consideration to both.
- How you communicate contingency plans to customers when disruptions occur.
- Reviewing internal audit documentation and programmes to ensure objectives are defined alongside scope and criteria.
Get up to speed with our training
If you’d like to discuss what the revised standard means for your organisation specifically, get in touch with us.
