ISO 9001:2026 Changes and the Transition from ISO 9001:2015

ISO 9001:2026 in Brief

Published 16 September 2026, replacing ISO 9001:2015 and its 2024 climate change amendment
Same clause structure, same numbering, no new mandatory documents or records
Around fifteen clauses have requirements added or strengthened

ISO 9001:2026 - What Changed from ISO 9001:2015

ISO 9001:2026 is the first full revision of the quality management standard since 2015. The headline for anyone already certified is that the shape of the standard has not moved. Clause 4 is still context, clause 8 is still operation, and the numbering you already know still points at the same subjects. There are no new mandatory documents and no new mandatory records.

What has changed is the weight given to a handful of ideas. Quality culture and ethical behaviour now appear as things top management has to promote. Risks and opportunities, which sat together in one clause, are now handled separately. The planning of changes asks more of the organisation than it did. And the climate change amendment issued in 2024 is now part of the standard itself rather than a bolt-on.

How Much Has Actually Changed in ISO 9001:2026

Less than the word revision suggests. An organisation running an effective quality management system to ISO 9001:2015 will already be doing much of what the 2026 edition asks for, because most of the additions describe good practice that was implied before and is now written down.

The areas most likely to need attention are the review of context and interested parties, the records covering risks and opportunities, the process for managing change, the management review agenda, and what staff are made aware of. Those are the five places where a 2015 system tends to be thinnest against the new wording.

At audit the first thing worth looking at is the interested parties work. The 2026 edition asks the organisation to determine which interested party requirements will actually be addressed through the quality management system, not just to list who the interested parties are and what they want. A register that stops at the list is the most common gap I would expect to see against the new wording.

The second is the separation of risks and opportunities. Where a single register mixed both and gave them the same treatment, the evidence of separate analysis, evaluation and action is what an auditor will be looking for.

ISO 9001:2026 Changes Clause by Clause

The following clauses carry added or strengthened requirements in the 2026 edition. Every other clause is unchanged in substance.

Clause 4.1 Context - the organisation must determine whether climate change is a relevant issue. This came in with the 2024 amendment and is now part of the standard
Clause 4.2 Interested parties - a new requirement to determine which interested party requirements will be addressed through the quality management system. Interested parties can have requirements related to climate change
Clause 5.1.1 Leadership and commitment - top management must promote quality culture and ethical behaviour, and promote opportunity-based thinking alongside risk-based thinking and the process approach
Clause 5.2 Quality policy - the policy must take account of the context of the organisation and support its strategic direction, and must be implemented, understood and applied
Clause 5.3 Roles and responsibilities - reporting on opportunities for improvement is now a responsibility in its own right, and the integrity of the system must be maintained when changes are planned and implemented
Clause 6.1 Risks and opportunities - split into 6.1.1 determining risks and opportunities, 6.1.2 actions to address risks and 6.1.3 actions to address opportunities. Each must be determined, analysed and evaluated, and risks can include disruption to the provision of products and services
Clause 6.3 Planning of changes - planning must now also cover the availability of information, how the change will be communicated, how its effectiveness will be monitored and evaluated, and how the results will be reviewed
Clause 7.1.4 Environment for the operation of processes - the note now covers preventing burnout and emotionally protective factors, and recognises that the working environment can be influenced by quality culture
Clause 7.1.6 Organisational knowledge - knowledge must be retained, applied and shared to the extent necessary
Clause 7.3 Awareness - people doing work under the organisation's control must be aware of the organisational quality culture and ethical behaviour
Clause 8.2.1 Customer communication - includes providing information about contingency actions, including any related to disruption of the provision of products or services
Clause 8.2.4 Changes to requirements - changes must be communicated to relevant interested parties
Clause 9.1.3 Analysis and evaluation - the effectiveness of actions taken on risks and the effectiveness of actions taken on opportunities are now evaluated separately
Clause 9.3.2 Management review inputs - a new input covering changes in the needs and expectations of interested parties, plus separate inputs for the effectiveness of action on risks and on opportunities
Clause 10.1 Continual improvement - previously numbered 10.3. The old 10.1 General clause has been merged into it as part of a restructure of clause 10

Outside the numbered requirements, clause 3 now carries a small set of core terms and definitions, Annex A has been rewritten to explain the intent of each clause without adding requirements, and Annex B has been removed.

Quality Culture and Ethical Behaviour in ISO 9001:2026

This is the genuinely new idea in the 2026 edition, and it runs through three clauses rather than sitting in one. Top management has to promote it under Clause 5.1.1. The working environment can be influenced by it under Clause 7.1.4. And people working under the organisation's control have to be aware of it under Clause 7.3.

The standard does not define a quality culture as a document or a programme, and there is no requirement to produce either. What it asks for is that the organisation's own expectations around quality and ethical behaviour are set from the top and are known to the people doing the work. For most organisations that means the quality policy, the induction, and whatever handbook or code of conduct already exists, all saying the same thing.

Nobody needs a culture project. If your staff know what good work looks like where they are, and they know they can say when something is not right, you have most of it already. The job is making sure that shows up somewhere a new starter would see it.

Risks and Opportunities Are Now Separate in ISO 9001:2026

In the 2015 edition risks and opportunities were determined together and addressed together, and in practice a lot of systems treated opportunities as an afterthought in a register built for risk. Clause 6.1 now splits into three parts, and risks and opportunities each have to be determined, analysed and evaluated in their own right.

The separation carries through the rest of the standard. Reporting on opportunities for improvement is a named responsibility under Clause 5.3. The effectiveness of action on risks and the effectiveness of action on opportunities are evaluated separately under Clause 9.1.3, and they arrive at management review as separate inputs under Clause 9.3.2.

One addition is easy to miss. The 2026 wording notes that risks can include disruption to the provision of products and services, and Clause 8.2.1 now expects customers to be told about contingency actions where they relate to that disruption. Continuity thinking has arrived in the quality standard.

Planning of Changes and Climate Change in ISO 9001:2026

Clause 6.3 was short in the 2015 edition. It now asks the organisation to consider the availability of information for a planned change, how the change will be communicated, how its effectiveness will be monitored and evaluated, and how the results of it will be reviewed. A change review that stops at approval will not cover the clause as written.

On climate change, the position is simpler than it looks. The 2024 amendment already required organisations to determine whether climate change is a relevant issue under Clause 4.1, and to recognise that interested parties can have climate-related requirements under Clause 4.2. The 2026 edition absorbs that wording rather than extending it. An organisation that responded to the amendment when it landed has nothing further to do here.

What the ISO 9001:2026 Changes Mean for an Existing Quality Management System

Certificates issued to ISO 9001:2015 remain valid during the transition period. Transition arrangements are set by certification bodies rather than by the standard, so the timetable that applies to any particular organisation comes from its own certification body.

A sensible order of work is to start with the registers, because that is where the new wording bites hardest. The interested parties register needs a way of showing which requirements the quality management system is addressing. The risks and opportunities records need opportunities handled as their own line of work rather than as a column. The change review process needs the four extra considerations. The management review agenda needs its new inputs. Then the quality policy and the induction material need to carry the quality culture and ethical behaviour wording.

None of that requires a new document. It is a pass through documents that already exist.

Practical Compliance Guidance

The IMS1 manual carries the quality management system narrative that the clause requirements sit against, and the sections covering context, interested parties, planning and management review are the ones affected by the 2026 changes.

The alphaZ documents below are the ones most likely to need a pass when moving a quality management system from the 2015 edition to the 2026 edition.

alphaZ document	How to use it
ISO 9001 Management System Toolkit	The quality management system document set, updated for the 2026 edition of the standard. The starting point for an organisation building or reworking a system.
F-IMS22 Interested Parties Register	Records interested parties and their requirements. Needs to show which of those requirements are being addressed through the quality management system.
F-IMS23 Opportunities and Risks Register	Holds the determination, analysis and evaluation of risks and of opportunities, which the 2026 edition treats as separate exercises.
F-IMS38 Climate Change Review Register	Records the decision on whether climate change is a relevant issue and what came out of that review.
F-Q23 Change Review Form	Used when planning a change. Covers the information needed, how the change is communicated, and how its effectiveness is monitored and reviewed.
F-Q3 Management Review	Structures the management review inputs, including the new input on changes in interested party needs and the separate risk and opportunity inputs.
F-Q4 Staff Induction Record	Records what a new starter has been made aware of, which now includes the organisation's quality culture and ethical behaviour.

Note - all the above files can be downloaded with an alphaZ subscription.

Frequently Asked Questions

Does ISO 9001:2026 require any new documents or records?

No. The 2026 edition adds no new mandatory documented information. The documents and records the standard requires are the same ones the 2015 edition required, so the work is updating what already exists rather than producing anything new.

How long is the transition to ISO 9001:2026?

Transition periods for a revised standard are set through the accreditation and certification arrangements rather than in the standard itself. Certificates issued to ISO 9001:2015 stay valid during that period, and the dates that apply to a particular organisation come from its own certification body.

Has the clause numbering changed in ISO 9001:2026?

Only in clause 10. Continual improvement moves from 10.3 to 10.1, and the old 10.1 General clause has been merged into it. Clause 6.1 keeps its number but now has three sub-clauses. Everywhere else the numbering is the same as the 2015 edition.

Does a quality culture have to be documented?

There is no requirement to produce a quality culture document. Clause 5.1.1 asks top management to promote quality culture and ethical behaviour, and Clause 7.3 asks that people are aware of it. How that is evidenced is left to the organisation, and the quality policy, induction material and any existing code of conduct are the usual places it shows up.

Further Resources