ISO 9001:2026 publishes on 16 September 2026. Certificates to the 2015 version stay valid through a three-year transition period. The exact end date is set by the IAF and applied by your certification body, so confirm it with them rather than working to a date you read somewhere.
This page is written against the final draft. We will update it once the published standard is out and we have read it properly.
Three years sounds like plenty. It never is, because most businesses leave it to the final year and assessor availability disappears at exactly the point everyone needs it. ISO 9001 is the most widely held certificate in the UK, so the queue for this one will be longer than it was for ISO 14001.
What is changing
This is a revision, not a rewrite. The ten clause structure stays, the quality management principles stay, and a working ISO 9001 system carries over. What is worth knowing about:
- Climate change. It has to be considered explicitly when you work out your context and your risks and opportunities. If you applied the February 2024 amendment to ISO 9001:2015, you have already done most of this.
- Quality culture and ethical behaviour. New expectations on leadership to promote both, and on awareness so people actually understand what is expected of them. This is the change most likely to catch businesses out, because it is hard to evidence with a document.
- Risks and opportunities, split apart. They now sit in separate sub-clauses rather than being handled as one requirement. An opportunity has to be something you are pursuing, not just the absence of a risk.
- Management of change, reinforced. Changes affecting the system have to be planned rather than absorbed after the fact.
- Quality policy and strategic direction. The policy has to support where the business is actually going, not sit in a frame by reception.
- Terms and definitions. A limited set now sits in clause 3 rather than only in ISO 9000, which stays the normative reference.
- Annexes. Annex A is expanded into proper guidance on how to read the requirements. Annex B has gone, with its content moved into Annex A and onto the ISO/TC 176 website.
What it means in practice
For a business with a working system this is a few weeks of work, not a rebuild. Most of it lands in three places.
Quality culture is the awkward one. You cannot close it out by writing a policy. What an assessor will look for is how leadership behaves when quality and cost pull against each other, what people are told when they join, and whether someone doing the work is able to stop a job they are not happy with. That evidence is built over months, so it is the part to start on first.
Your risk register probably needs splitting. Most registers we see list a set of risks and then list the same items inverted as opportunities. That will not hold under the new structure. Opportunities need to be real things you are going after, such as a new market, a new process or a partnership, with someone accountable for each.
Context needs climate in it. If you took the 2024 amendment seriously this is already done. If you hold ISO 14001 as well, do not write it twice. One context analysis serving both systems is the whole point of an integrated system, and it is the sort of duplication that quietly doubles the cost of running two standards.
The rest of the system stands. Procedures, internal audit and management review carry over largely as they are. Most of the work in this transition is in evidence rather than in documents, which is the opposite of what people expect.
Getting the timing right
Transition at a scheduled audit rather than as a separate exercise. A certification body will normally do it at a surveillance or recertification visit with a small amount of extra time added, which costs a good deal less than arranging a standalone transition audit.
So the date that matters is not the end of the transition period, it is whichever visit falls comfortably before it. Work back from that, and ask your certification body now which audit they intend to use. There is a shortage of qualified auditors, and this is the standard almost everyone holds.
If you are certifying for the first time and your audit falls after publication, ask about going straight to the 2026 version. There is little sense in implementing a superseded edition and then transitioning it a year later.
What to do next
- Ask your certification body which audit they plan to transition you at, and get it in the diary
- Run a gap analysis against the published standard, concentrating on culture, opportunities and change
- Update the documents that need it, which is usually fewer than people expect
- Start gathering the evidence the culture and awareness requirements need, because that takes longer than editing a procedure
- Run an internal audit against the 2026 version and take it through management review before your assessor sees it
We support transitions as part of ongoing system support, or as a one-off piece of work if you would rather just have it dealt with. See our ISO 9001 consultancy page for the full service, our guide to implementing ISO 9001 for how a build actually works, and our ISO 14001:2026 transition page if you hold both.
‹ Back to all articles