Quality Management
ISO 9001:2026: What Changes in the New Version and How to Plan the Transition
Eleven years is a long life for a standard. ISO 9001:2015 lived through a pandemic, two waves of broken supply chains and the arrival of artificial intelligence on the factory floor — with text written before any of it. In September 2026 the new version arrives.
If you hold a valid certificate, the first question is usually “how long do I have”. The short answer: you have time, but less than it looks. The long answer is this article — what we already know for certain from the final draft, what changes in practice, and what a sensible timeline looks like if you do not want the transition to catch you in its final month.
Key Takeaways
- Publication is expected on 16 September 2026. The Final Draft International Standard (FDIS) was approved by ISO in July 2026, after the DIS was approved with roughly 97% in favour at the end of 2025.
- This is not a revolution. The ten-clause Harmonized Structure stays — certified organisations will not be rewriting their systems from scratch.
- Climate change is now part of the main text of clause 4, rather than a separate 2024 amendment.
- New emphases: quality culture and ethical behaviour, a clearer split between risks and opportunities, and a quality policy tied to strategic direction.
- The transition period is expected to be three years from publication — that is, until autumn 2029 — but the final decision is announced by the IAF after the standard is released.
- Audits to the new version do not start immediately. Certification bodies first have to extend their accreditation, so the first ISO 9001:2026 certificates are realistically issued in 2027.
Where the standard stands today
Every ISO standard moves through clearly defined stages, and each one is public. For ISO 9001, the picture in August 2026 looks like this:
| Stage | When | What it means |
|---|---|---|
| DIS (Draft International Standard) | August 2025 | First public draft, open for comments from national bodies |
| DIS approval | December 2025 | Approved with around 97% in favour — a signal that the direction is uncontested |
| FDIS (Final Draft) | July 2026 | Technical content frozen; only editorial work remains |
| Publication | expected 16 September 2026 | The official ISO 9001:2026 |
| Transition rules | after publication | The IAF announces the deadline — three years is expected |
Why the FDIS stage matters: between FDIS and publication the content barely moves — wording is edited, requirements are not. Preparation started today will not be wasted.
What actually changes
If you are expecting an upheaval like 2015 — when the mandatory quality manual and the management representative disappeared and risk-based thinking moved to the centre — you will be disappointed, in a good way. ISO 9001:2026 is a standard of refinement, not of rewriting.
1. Climate change moves into the main text
In February 2024 ISO published a short amendment adding to clauses 4.1 and 4.2 the requirement to determine whether climate change is a relevant issue for the organisation’s context and whether interested parties have related requirements. In the new version that text is part of the standard itself, and sustainability takes a more visible place in the analysis of context.
In practice: if at your last audit you added one sentence to the context analysis “to keep the auditor happy”, that will no longer be convincing. Expect questions about how climate risk connects to your actual processes — supply, energy, raw materials, compliance.
2. Quality culture and ethical behaviour
This is the most discussed addition. The requirement appears in two places: in leadership (clause 5.1.1 — top management promoting a culture of quality and ethical behaviour) and in awareness (clause 7.3 — people in the organisation being aware of that culture).
The logic is obvious to anyone who has seen a paper-only quality system: procedures work only when people accept them. The difficulty is different — how do you demonstrate culture to an auditor? Realistic evidence is behavioural: how signals of a problem are treated, whether the bearer of bad news is punished, what happens to nonconformities nobody is obliged to report.
3. Risks and opportunities are no longer one sentence
In the 2015 version risks and opportunities were treated together, which produced a predictable result: almost every organisation managed risks and almost none managed opportunities. The new version separates the requirements into distinct sub-clauses, making it clear that actions on opportunities must also be planned and evaluated.
4. The quality policy is tied to strategy
Clause 5.2 gets more explicit wording: the quality policy must be appropriate to the context and strategic direction of the organisation. If your policy hangs framed on the wall and opens with “We strive for total customer satisfaction”, this is the moment to revisit it.
5. Digital technologies and organisational knowledge
The new version acknowledges that processes today are run by software. Digital technologies, including artificial intelligence, enter the consideration of context, while the requirements on organisational knowledge keep their emphasis on maintaining it systematically. For organisations already considering AI management under ISO 42001, this is the natural bridge between the two systems.
| Clause | Change | What you need to do |
|---|---|---|
| 4.1 / 4.2 | Climate change and sustainability in context | Update the context analysis with a meaningful assessment, not a token sentence |
| 5.1.1 | Promoting a culture of quality and ethical behaviour | Define how management demonstrates this and what records evidence it |
| 5.2 | Policy tied to strategic direction | Rewrite the policy so it reflects your real objectives |
| 6.1 | Separate requirements for risks and for opportunities | Add an opportunities register with owners, actions and evaluation |
| 7.3 | Awareness of the quality culture | Include the topic in training and in onboarding |
The transition period: how much time you really have
Practice at recent revisions has been a three-year transition from the date of publication. If that holds, ISO 9001:2015 certificates will remain valid until autumn 2029. The decision itself rests with the IAF (International Accreditation Forum) and is announced after the standard is published — so any date before that announcement is a forecast, not a fact.
This is exactly where most organisations make the mistake of assuming they have three calm years. They do not, for two reasons.
First: certification bodies cannot audit to the new version from day one. They must train their auditors and extend their accreditation — a process that takes months. The realistic window in which ISO 9001:2026 certificates are issued at scale opens in 2027.
Second: transitions are normally carried out at a planned surveillance or recertification audit. If your next suitable audit is this autumn and the one after that is a year later, your real opportunities are two or three, not unlimited.
A seven-step transition plan
- Wait for the official text, but do not sit still. Buy the standard as soon as it is published — working from a draft, even a final one, is not a basis for certification.
- Run a gap analysis. Compare the existing system against the new requirements clause by clause. For most organisations this is half a day to a day of work.
- Update the context analysis. Climate, sustainability, digital technologies — specific to your business, not generic.
- Separate risks from opportunities. If you have one table today, make it two — with owners, deadlines and evaluation of the effect.
- Review the quality policy and objectives. Tie them to the company’s strategic goals rather than to general aspirations.
- Train your people. Internal auditors first — they need to be able to check the new requirements at the internal audit, before the external one arrives.
- Talk to your certification body early. Ask when it will be accredited to the new version and at which audit it plans your transition. Their calendars fill up.
Who will feel the change most
- Organisations with a “system for the auditor”. If your documentation lives separately from the actual work, the culture and awareness requirements will be uncomfortable — they are verified through conversations with people, not through folders.
- Manufacturers with energy-intensive processes. The climate aspect of context will require real analysis rather than a declaration. For them the link to ISO 50001 becomes practical.
- Organisations with integrated systems. Anyone running an integrated management system alongside ISO 14001 must plan both transitions together — the new ISO 14001 has been in force since April 2026.
- Companies bidding for public contracts. Here certificate validity is an eligibility condition, not a matter of prestige. See which certificates are mandatory in public procurement.
Three mistakes that repeat at every revision
Mistake 1: “We will leave it for the last year.” At the previous transition the final months were chaos — certification bodies had no free dates and companies accepted any terms to avoid losing a valid certificate. History repeats itself precisely.
Mistake 2: Rewriting all the documentation. It is unnecessary. The changes are specific and are addressed with targeted corrections. A consultant offering you “a new system” is usually selling volume, not a solution.
Mistake 3: Transition without training. If the documents are updated but nobody in the organisation knows what “quality culture” means, the auditor will establish that with two questions to a random employee.
The transition to ISO 9001:2026 is easier when it is planned
We run the gap analysis against the new version, update only what needs updating and train your internal auditors — without rewriting a system that already works.
Conclusion
ISO 9001:2026 does not change the philosophy of the standard — it remains what it has been since 2015: process approach, risk-based thinking, committed leadership. What changes is the level of proof. The standard accepts fewer declarations and looks for more traces of actual behaviour: how management reacts to a problem, how the organisation sees itself in a changing world, what it does with opportunities and not only with risks.
For an organisation with a working system, the transition is a few weeks of distributed work. For an organisation with a paper system, it will be the moment the difference shows. If you are not sure which group you are in, start with audit preparation or review our ISO 9001 services.
Frequently Asked Questions
When is ISO 9001:2026 published?
Publication is expected on 16 September 2026. The Final Draft International Standard (FDIS) was approved by ISO in July 2026, after the DIS was approved with around 97% in favour at the end of 2025. Small shifts in the date are possible, but the technical content is already frozen.
Will my ISO 9001:2015 certificate become invalid?
Not immediately. A three-year transition period from publication is expected, which means until autumn 2029. The final deadline is announced by the IAF (International Accreditation Forum) after the standard is released. Once the transition ends, certificates to the 2015 version lose their validity.
Do I have to rewrite my whole quality system?
No. The ten-clause structure is retained and most requirements are unchanged. The work is targeted: updating the context analysis, separating risks from opportunities, reviewing the quality policy and adding quality culture to training.
When can I certify to the new version?
Not on publication day. Certification bodies must first train their auditors and extend their accreditation to the new version — a process that takes months. Realistically, the first ISO 9001:2026 certificates are issued in 2027. Ask your certification body about its own timetable.
What does the “quality culture” requirement mean?
The new version requires top management to promote a culture of quality and ethical behaviour, and employees to be aware of it. It is demonstrated through behaviour rather than documents: how problem signals are treated, how nonconformities are managed and whether people can speak openly about mistakes without fear.
Can I still certify to ISO 9001:2015 now?
Yes, certification to the 2015 version remains possible until the end of the transition, but it makes sense only if it is urgent — for example a public procurement deadline. If you have time, it is wiser to build the system so that it also meets the new requirements.
How does this combine with the ISO 14001:2026 transition?
The new ISO 14001 was published in April 2026 and has its own three-year transition. Organisations with an integrated system should plan both transitions as one project and one audit — the shared clauses (context, leadership, planning) are updated once, not twice.