ISO 9001:2026: Every Change from the 2015 Edition in Detail

Updated 30 September 2026. ISO 9001:2026 was published on 16 September 2026 [1][2], and on the same day Global ACI published the mandatory transition requirements [12]: three years, ending on 30 September 2029. The clause statements in this article rest on a copy of ISO/DIS 9001:2025(en) [11] and on the summary of changes in the Global ACI document [12] — the first primary source to name the changes in the published edition clause by clause. It corrected two earlier statements in this article: clauses 6.3 and 9.3.2 do change, and Annex A is not the standard’s first annex.

After eleven years the world’s most widely used quality management standard gets a new edition. On 16 September 2026 ISO 9001:2026 was published as the sixth edition, superseding both ISO 9001:2015 and the climate change amendment Amd 1:2024 [1][2]. This article sets out what actually changes, which parts create work — and what is being overstated in the current coverage.

Why revise at all

ISO reviews its standards periodically. On the reason for this revision ISO states that after a global consultation in 2023, a consensus confirmed that revising the standard would enhance its value and keep it aligned with the evolving needs of users [1]. The development track was extended to 36 months to accommodate a second Committee Draft stage — an indication of how contested individual points were during the process [2].

The sequence is worth noting: ISO 9000:2026, the fundamentals and vocabulary standard, was already published in May 2026 [3]. Terminology was settled first and forms the basis for the new requirements text. Anyone trying to understand the revision will find part of the answer there.

The clause comparison at a glance

Clause	ISO 9001:2015	ISO 9001:2026	Effort
3 Terms	reference to ISO 9000	more QMS terms defined in the text itself [10]	low
4.1 / 4.2 Context	climate change only via Amd 1:2024	climate change anchored in the text, incl. climate-related requirements of interested parties [1][9]	low to medium
5.1.1 Leadership	commitment of top management	plus: promoting quality culture and ethical behaviour; promoting continual improvement [9][12]	medium
5.2 Policy	policy appropriate to purpose	explicit account of context and strategic direction (5.2.1 e) [9][12]	low
6.1 Planning	risks and opportunities in one clause	restructured: 6.1.1 determining, 6.1.2 actions on risks, 6.1.3 actions on opportunities [9][12]	medium
6.3 Changes	planning of changes	plus: how the effectiveness of changes is monitored and evaluated, how they are communicated, how their results are reviewed [12]	low to medium
7.3 Awareness	policy, objectives, contribution, implications	plus: quality culture and ethical behaviour [9][12]	low
7.5 Documented info	control of documented information	Harmonized Structure phrasing (“shall be available”) [12]; no new requirement on evidencing effectiveness — see correction below	low
8 Operation	—	minor adjustments, mostly terminology [10]	low
9.3.2 Management review	inputs “taken into consideration”	inputs must be included; new: changes in the needs and expectations of interested parties [12]	low to medium
10 Improvement	—	leadership’s role more explicit [10]	low
Annexes	informative Annexes A (structure, terms) and B (other standards)	Annex A recast to clarify the requirements; Annex B removed [4][12]	none (informative)
Structure	High Level Structure	Harmonized Structure [9]	low

ISO summarizes the revision in three points of its own: clear separation of risks and opportunities for a more balanced approach, stronger emphasis on quality culture, values and ethical behaviour, and improved usability with closer alignment to other ISO management system standards [4].

The changes that actually create work

1. Quality culture and ethical behaviour (5.1.1 and 7.3)

This is the most demanding change in substance. Top management will have to demonstrate that it promotes a quality culture and ethical behaviour — a new item i) in 5.1.1, with a note that culture shows in shared values, attitudes and established practices [9][12]. The required awareness of personnel in 7.3 is extended accordingly [9][12].

The difficulty is practical. Culture is not a process with a defined input and output. An auditor can examine a procedure — not an attitude. Expect the burden of proof to shift onto observable proxies: how are inconvenient nonconformity reports handled? Is the effectiveness check on corrective actions performed seriously or ticked off? Are quality objectives actually defended when they conflict with delivery dates?

Assessment: organizations with a functioning error culture will be able to evidence it. Organizations without one will not create it through an additional document. A market for “quality culture certificates” will probably form — nothing of the sort is required by the standard.

2. Separating risks and opportunities (6.1.1 to 6.1.3)

In the 2015 edition risks and opportunities sit together in 6.1. In practice most organizations maintain a risk register and carry opportunities as a footnote at best. The new structure addresses exactly that: 6.1.1 for determining them, then separate sub-clauses for actions on risks (6.1.2) and on opportunities (6.1.3) [9][12].

Concretely: opportunities will need their own traceable treatment — identification, evaluation, derived actions — instead of riding along with the risk assessment. Anyone keeping a combined table today will have to separate it. That is manageable, but it is real work, and it can be prepared now.

3. Documented information as evidence of effectiveness (7.5) — correction after checking the standard’s text

DIN Media had previously described this as the most far-reaching change of the revision: documented information was said to serve more strongly as evidence of implementation and effectiveness [9]. Checking against ISO/DIS 9001:2025(en) [11] does not confirm that: the control points in 7.5.1 through 7.5.3 — identification, format, review/approval, distribution, retention, control of changes — stay the same in substance, and there is no new or strengthened clause on evidencing effectiveness. What changes is the phrasing: the revision adopts the Harmonized Structure wording under which documented information “shall be available”, and clarifies what that means [12]. That aligns the language with every other management system standard; it is not a new evidence obligation. On top of that comes a general framing in Annex A, which describes the standard’s approach as performance-based rather than prescriptive [11].

The practical advice below still holds, only the reasoning changes: the effectiveness review of corrective actions is already mandatory in the 2015 edition (10.2) — that was already the point where document-based quality systems break, before this revision. A spreadsheet of findings proves that a finding was recorded. It does not prove that the derived action was implemented, when, by whom, and whether the effectiveness check happened — unless someone maintains it with discipline. The article on handling findings and CAPA covers the mechanics behind it.

4. Climate change in clause 4 (4.1/4.2)

For many organizations this change is already done. In 2024 ISO inserted climate change into clause 4 as a potentially relevant external issue via Amd 1:2024; ISO 9001:2026 supersedes that amendment and takes its content into the main text [1][9].

Anyone who implemented the amendment has no additional work here. Anyone who missed it — which happens more often than you would think, because an amendment slips through easily — has an existing gap that is audit-relevant today, independent of the revision.

5. Effectiveness of changes (6.3) and management review inputs (9.3.2)

Two changes were missing from almost all advance coverage, and the Global ACI summary names both explicitly [12]. In 6.3 the planning of changes gains three points: how the effectiveness of a change is monitored and evaluated, how it is communicated, and how its results are reviewed. Anyone who has treated changes as projects with an end date now needs a follow-through — the same logic as the effectiveness review of corrective actions, applied to planned changes.

In 9.3.2 the management review inputs are no longer merely “taken into consideration” but must be included, and one input is added: changes in the needs and expectations of interested parties that are relevant to the quality management system [12]. What that means for the agenda and the data behind it is covered in the article on the management review under 9.3.

6. Annex A — recast

The 2015 edition already had annexes: Annex A explained the then-new structure and terminology, Annex B pointed to other standards. The revision recasts Annex A and removes Annex B [12]. The new annex is still informative, so it adds no requirements; it explains terminology and the intent behind the requirements. ISO describes its purpose as “helping avoid any ambiguity or misinterpretation” and notes that it improves accessibility “particularly for first-time users and small businesses” [4]. BSI puts its length at around 15 pages [10].

Assessment: the annex is the most practically valuable part of the revision. A significant share of the friction between auditor and auditee comes from differing readings of phrases such as “appropriate”, “as applicable”, or “maintain versus retain”. An authoritative text on the intent of the requirements removes the basis for those arguments — in both directions.

Terminology: “outputs” becomes “results”

An inconspicuous but far-reaching change: the term “outputs” is replaced by “results”, according to DIN Media primarily to avoid translation problems across languages [9]. In addition, more QMS-specific terms move directly into clause 3 rather than referencing ISO 9000 [10].

In practice: every document, process description and question catalog that adopts the old terminology verbatim will read as dated after the transition. Adapting is not normatively required — the standard does not prescribe the wording of your documents. But consistent language saves questions in the audit.

The transition period: three years, ending 30 September 2029

Transition periods are set not by ISO but by the accreditation side, and there something fundamental changed in 2026: the International Accreditation Forum ceased operations on 1 January 2026 [7]; IAF and ILAC merged into the Global Accreditation Cooperation Incorporated (Global ACI) [8]. Its mandatory transition document — Global ACI-TECH-3-TR 2029-09-30 (M), issued 4 September and in force since 16 September 2026 — sets the dates [12]:

Date	What applies
31 March 2027	accreditation bodies must be ready to assess against the new edition at the latest
30 June 2027	certification bodies submit their transition declaration
30 September 2027	accreditation bodies have decided on the certification bodies’ transition
31 March 2028	new and initial certifications only to ISO 9001:2026
30 September 2029	end of transition: ISO 9001:2015 certificates cease to be valid

Three details in the document matter more for planning than the dates themselves [12]:

• Transition requires a transition audit. It can be combined with a surveillance or recertification audit or run as a separate audit, remotely if the objectives are met. It covers at least the changed requirements, changes to the organization’s context, and any other need for change.
• Additional audit time is possible. The certification body must decide whether it needs more time and justify it. For a full system audit, the document notes, it may not be needed.
• The certificate’s expiry date does not protect you. A 2015 certificate whose term runs past 30 September 2029 still ceases to be valid on that date.

Assessment: the tight part is not the three years but the dates before them. Certification bodies may only certify to the new edition once their accreditation body has confirmed their transition — which can take until the end of September 2027. Anyone due for recertification in 2027 should clarify early whether their certification body will be able to audit to the new edition by then; otherwise the transition slides to the next surveillance audit.

Automotive: two coupled timelines

IATF 16949 certified organizations face a second migration. In Stakeholder Communiqué SC-2026-005 of July 2026 the IATF announced the second edition of IATF 16949 for mid-2027 and stated explicitly that the end of its transition time will be aligned with the end of the ISO 9001 transition [6] — on current information, 30 September 2029 [12]. What follows for planning is covered in the article on the second edition of IATF 16949.

What this means for internal audits

According to BSI the core requirements for internal audits in clause 9 do not change materially [10]. The work arises elsewhere: an audit question catalog hard-wired to the 2015 clause numbers has to be mapped onto the new structure — particularly where 6.1 becomes two sub-clauses. All historical findings also keep their link to the old structure while new audits assess against the new one.

How to solve that without breaking traceability is covered in the article on the impact on internal audits and question catalogs. Fundamentals on the current edition are in the internal audit checklist for ISO 9001, and the systematics of programme planning in the audit programme planning guide.

A realistic roadmap

Professional recommendation, not a requirement of the standard:

1. Now: obtain the text, read Annex A, run a gap analysis against the published wording. Verify that Amd 1:2024 is implemented and move risks and opportunities into separate assessments.
2. From November 2026: the German edition DIN EN ISO 9001:2026-11 [9] for document adaptation.
3. By mid-2027: clarify with your certification body when it will be able to audit to the new edition and whether the transition happens at the next surveillance or recertification audit [12].
4. Audit programme 2027: schedule internal audits of the changed clauses (5.1.1, 6.1, 6.3, 7.3, 9.3.2) ahead of the transition audit.
5. By 30 September 2029 at the latest: transition complete, including certificate issuance [12].
6. Automotive, additionally: schedule the IATF migration for mid-2027, with its end coupled to the ISO deadline [6].

Conclusion

The revision is evolutionary, not revolutionary: the structure holds, clauses 8 and 10 barely change, clause 9 only in the management review inputs, and most of the added length goes into an annex that contains no requirements at all. Global ACI itself rates the overall changes as minimal [12]. Organizations running a maintained quality system face manageable adaptation.

One point is demanding above all: evidencing a quality culture, which resists classic document review. The effectiveness review of corrective actions is not a new requirement of this revision, but — as under 2015 — it remains the point where document-based quality systems part ways from the ones people actually live by.

And the most important date is now settled: existing certificates must be transitioned by 30 September 2029, and from 31 March 2028 initial certifications are issued only to the new edition [12].

Sources

Primary sources — standards and accreditation bodies

1. ISO: ISO 9001:2026 — Quality management systems. Requirements. Stage 60.60 (International Standard published), edition 6, 36 pages, publication date 2026-09, ISO/TC 176/SC 2; the life cycle lists ISO 9001:2015 and ISO 9001:2015/Amd 1:2024 as withdrawn. https://www.iso.org/standard/88464.html (accessed 2026-09-30)
2. ISO/TC 176/SC 2: ISO 9001 revision update. News item, 7 Aug 2026. https://committee.iso.org/sites/tc176sc2/home/news/content-left-area/news-and-updates/news-1.html (accessed 2026-08-24)
3. ISO: ISO 9000:2026 — Quality management. Fundamentals and vocabulary. Edition 5, published 2026-05. https://www.iso.org/standard/9000 (accessed 2026-08-24)
4. ISO: ISO 9001:2026 — Quality management systems – Requirements. Trusted across the world. Factsheet, ISO 2026. https://www.iso.org/files/live/sites/isoorg/files/standards/popular_standards/iso_9000_quality_management/ISO9001-2026_Factsheet.pdf (accessed 2026-08-24)
5. ISO: ISO 9001 — Turn quality into business performance. Official topic page for the 2026 edition. https://www.iso.org/9001-2026 (accessed 2026-08-24)
6. IATF Global Oversight: IATF Stakeholder Communiqué, REF 005: IATF 16949 2nd edition update information. July 2026. https://www.iatfglobaloversight.org/wp/wp-content/uploads/2026/07/Stakeholder-Communique-SC-2026-005_IATF-16949-2nd-Edition-status.pdf (accessed 2026-08-24)
7. International Accreditation Forum: notice on the cessation of operations as of 1 Jan 2026 and the transfer to the Global Accreditation Cooperation Incorporated. Legacy site. https://iaf.nu/en/home/ (accessed 2026-08-24)
8. Global Accreditation Cooperation Incorporated (Global ACI): organisational information, operations began 1 Jan 2026. https://global-aci.org/en/home/ (accessed 2026-08-24)

Secondary accounts of ISO/FDIS 9001 by national standards bodies

The FDIS is not publicly available. Clause-level statements in this text therefore rely on the accounts published by the national standards bodies that take part in the standardization process:

9. DIN Media (DIN group): Revision der ISO 9001 — Veröffentlichung 2026. Announces DIN EN ISO 9001:2026-11. https://www.dinmedia.de/de/themenseiten/managementsysteme/qualitaetsmanagement/revision-der-iso9001 (accessed 2026-09-30)
10. BSI (British Standards Institution): ISO 9001:2026 — Key Changes and Guidance. https://www.bsigroup.com/en-US/products-and-services/standards-services/iso-9001-2026-key-changes-and-guidance/ (accessed 2026-08-24)
11. ISO/DIS 9001:2025(en), Quality management systems — Requirements. ISO/TC 176/SC 2, committee ballot 2025-08-27 to 2025-11-19. Not publicly available; checked against a copy on 2026-09-16 — not the published IS edition, see the status note above.

Primary source on the transition, after publication of the standard

12. Global ACI: Global ACI-TECH-3-TR 2029-09-30 (M) — Transition Requirements for ISO 9001:2026. Mandatory document, version 1.0, issued 2026-09-04, in force since 2026-09-16; besides the dates it contains a summary of key changes (section 3). https://sys.global-aci.org/uploads/documents/TECH-3-TR_2029-09-30_(M)_ISO_9001_2026_Transition_v1_03.pdf, announcement: https://global-aci.org/en/news/global-aci-publishes-transition-requirements-for-iso-90012026/ (both accessed 2026-09-30)

Consultancy, certification-body and content-marketing pages with no involvement in the standardization process are not cited. Where this text goes beyond the documented evidence, it is marked as an assessment.