ISO 9001:2026 Transition: What Changed from 2015 and How to Update Your Certification
SO 9001:2026 is here. See what changed from the 2015 edition clause by clause, when the transition deadline falls, and how certified professionals can update their credential in two days with the PECB ISO 9001:2026 Transition.
ISO 9001:2026 is the sixth edition of the quality management standard, published by ISO on 16 September 2026, and it replaces ISO 9001:2015. It keeps the same clause structure, process approach and PDCA cycle, but adds explicit requirements for quality culture and ethical behaviour, separates risks from opportunities, expands change planning, organizational knowledge and internal audit objectives, and folds in the 2024 climate amendment. Organizations certified to ISO 9001:2015 have until 30 September 2029 to transition. Professionals who already hold an ISO 9001:2015 credential can update their knowledge formally through the PECB Certified ISO 9001:2026 Transition, a two-day course with a one-hour, closed-book, multiple-choice exam.
Key Takeaways
Published 16 September 2026
ISO 9001:2026 is the sixth edition and replaces ISO 9001:2015, including the 2024 climate amendment.
Evolution, not a rebuild
The clause structure, process approach and PDCA cycle stay. Most changes clarify or extend existing requirements.
Quality culture is now explicit
Top management must promote quality culture and ethical behaviour (5.1.1), with links into awareness (7.3) and the work environment (7.1.4).
Risks and opportunities split
Clause 6.1 now has subclauses 6.1.1 to 6.1.3, and change planning in 6.3 runs through to reviewing results.
Deadline: 30 September 2029
Global ACI has set a three-year transition. ISO 9001:2015 certificates stop being valid after that date.
A fast route for professionals
PECB Certified ISO 9001:2026 Transition: two days, a one-hour closed-book exam, no experience requirement, 14 CPD credits.
On This Page
- What Is ISO 9001:2026 and What Stayed the Same?
- Key Changes from ISO 9001:2015, Clause by Clause
- ISO 9001:2026 Transition Timeline and Deadline
- What the Transition Means for ISO 9001:2015 Certified Professionals
- PECB Certified ISO 9001:2026 Transition: Course, Exam and Credential
- How to Prepare for the Transition Exam
- Conclusion
- Frequently Asked Questions
What Is ISO 9001:2026 and What Stayed the Same?
ISO 9001:2026, Quality management systems: Requirements, is the first full revision of the standard in eleven years. ISO/TC 176 started the work in 2023, the Draft International Standard went to ballot in August 2025, and the final edition was published on 16 September 2026. It is the sixth edition after 1987, 1994, 2000, 2008 and 2015.
If you went through the 2008 to 2015 transition, this one will feel lighter. That revision introduced the high-level structure, risk-based thinking and the context clauses. This one keeps all of that. The ten-clause structure is the same, the process approach and PDCA cycle are the same, and customer focus and continual improvement are still at the centre.
What changes is emphasis and precision. Requirements that auditors used to argue about (is opportunity management really required? what counts as organizational knowledge?) are now spelled out. A few things that good quality systems were doing anyway, such as setting a clear objective for each internal audit, are now requirements. Annex A has been expanded substantially, but it explains the requirements rather than adding new ones.
Key Context:
Clause 3 of ISO 9001:2026 now displays a set of terms and definitions directly, taken from ISO's harmonized structure for management system standards. ISO 9000 is still the normative reference for vocabulary, and the reference is now undated, so the latest edition of ISO 9000 applies. Update training glossaries and document references accordingly.
Key Changes from ISO 9001:2015, Clause by Clause
The table below is a quick map. The accordions after it explain what each change asks of an organization and what an implementer or auditor should look for.
| Clause | ISO 9001:2015 | ISO 9001:2026 |
|---|---|---|
| 4.1 / 4.2 | Climate added by 2024 amendment | Climate integrated; organization decides which interested-party requirements the QMS addresses |
| 5.1.1 | Leadership and commitment | Adds promoting quality culture and ethical behaviour |
| 6.1 | Risks and opportunities addressed together | Split into 6.1.1 to 6.1.3, with explicit analysis and evaluation |
| 6.3 | Planning of changes | Extended to information, communication, monitoring and review of results |
| 7.1.6 | Knowledge for operating processes and product conformity | Knowledge for the whole QMS; retain, apply and share |
| 8.2 / 8.3 / 8.5.1 | Customer communication, design, operational control | Contingency communication, changed requirements, current operating information |
| 9.2.2 | Audit criteria and scope | Adds objectives for each audit |
| 9.3 | Management review inputs | Changes in interested-party needs; risks and opportunities evaluated separately |
| 10.1 / 10.3 | Split across two clauses | Consolidated into 10.1 Continual improvement |
Top management must now promote quality culture and ethical behaviour as part of leadership and commitment. The idea also appears in awareness (7.3), so people working under the organization's control need to understand what it means for their own work, and in the environment for the operation of processes (7.1.4).
The standard does not ask for a separate ethics policy or manual. The test is behavioural. Can an inspector report a failed check without being pressured to change the result? Will a supervisor back a decision to hold a shipment? Auditors will look for evidence in how managers actually respond to quality concerns, not in a new poster on the wall.
In 2015, risks and opportunities sat together in one clause, and many organizations quietly treated opportunities as an afterthought. The 2026 edition gives them distinct subclauses, makes analysis and evaluation explicit, and carries the distinction into performance evaluation and management review, which now look at the effectiveness of actions on risks and actions on opportunities.
You do not need two registers or a particular scoring method. One planning tool can hold both, as long as opportunities are genuinely identified, evaluated and followed up. For an implementer, the practical question is whether the organization can show one opportunity it evaluated, acted on and reviewed.
Clause 6.3 now goes beyond deciding how to make a change. Organizations need to give people the information they need, communicate the change, monitor how it performs and review the results against what was intended.
Most organizations already have a project or change template. The work here is usually adding a defined effectiveness check and a review date, then making sure someone actually does the review.
The 2015 text focused on knowledge needed to operate processes and achieve conformity of products and services. The 2026 text broadens this to knowledge needed to achieve the results of the quality management system, and makes retaining, applying and sharing that knowledge explicit.
Handovers when experienced people leave, mentoring, lessons-learned reviews and accessible know-how all come into scope. This is one of the changes most likely to expose a real gap in organizations that rely on a few long-tenured staff.
The climate change provisions from the 2024 amendment are now part of the standard itself. Organizations still decide whether climate change is a relevant issue (4.1) and consider climate-related requirements from interested parties (4.2).
Clause 4.2 also now asks the organization to determine which of the relevant requirements of interested parties the QMS will address. Management review (9.3.2) needs to consider changes in those needs and expectations. If your 2015 system already handled the amendment properly, this is mostly a check that the assessment is still current.
Several smaller changes tighten how information moves. Customer communication now covers relevant contingency actions (8.2.1), for example what happens to an order if a supplier fails. Changed requirements need to be reviewed and the updated information passed to the people and organizations who need it (8.2.3.2 and 8.2.4). Controlled conditions now point to the use of current operating information where the work is done (8.5.1).
Organizations that design products or services should also recheck design planning and design outputs (8.3.2 and 8.3.5) for who is involved and what information the finished design must provide.
Each internal audit now needs defined objectives, alongside its criteria and scope (9.2.2). An audit of order processing, for instance, might aim to confirm that a recent system change reduced specification errors. The report should then answer that objective.
Continual improvement requirements that were spread across 10.1 and 10.3 are consolidated into 10.1. Annex A notes that improvement can come from changes in context, risks, opportunities and the adoption of technology. Update clause references in procedures, but keep improvement activities that already work.
Some clauses now describe documented information as something made available as evidence. That wording change is not permission to discard records. You still need the records that demonstrate what was done, and document control still applies.
Annex A has grown considerably, with guidance and examples covering technology, remote working and other operating environments. It is guidance only. It does not require an AI system, a business continuity system or any particular software.
ISO 9001:2026 Transition Timeline and Deadline
Global ACI (the international accreditation body formerly known as IAF) has set a three-year transition period. ISO 9001:2015 certificates stop being valid after 30 September 2029. After that date, an organization that has not completed a transition audit would have to go through initial certification again.
Three years sounds generous. In practice it is shorter. Certification bodies have to train their auditors and complete accreditation for the new edition before they can issue accredited 2026 certificates, and availability will vary by certification body and country. Organizations also need time to update processes, brief staff, run an internal audit and management review against the new requirements, and close any findings before the transition audit.
The sensible approach is to combine the transition with a surveillance or recertification audit that already falls inside the window, and work backward from that date. Publication of the new edition does not cancel or extend an existing ISO 9001:2015 certificate. Its expiry date and surveillance obligations stay as they are.
Market Signal:
Every organization certified to ISO 9001:2015 has to pass through this transition before September 2029. That creates steady demand for implementers, internal auditors and consultants who can show they know the 2026 requirements, particularly in regions where ISO 9001 certification is written into government and enterprise tenders.
What the Transition Means for ISO 9001:2015 Certified Professionals
The three-year deadline applies to organizations and their certificates. It says nothing about your personal credential. An ISO 9001 Lead Implementer or Lead Auditor certificate earned against the 2015 edition keeps its own validity and maintenance cycle. What it does not do is tell a client or employer that you know what changed.
That matters because the people doing the transition work, whether gap analyses, process updates, internal audits or certification audits, will be asked which edition they are qualified on. Here is how the change lands for each role.
You are the person who has to turn the new clauses into updated processes. That means running a gap review against the 2026 requirements, deciding what genuinely needs to change, updating procedures and records, briefing process owners and leadership, and checking the changes through an internal audit and management review.
The most common gaps are likely to be in 6.1 (opportunities with no real follow-up), 6.3 (changes that are never reviewed after go-live) and 7.1.6 (knowledge that lives in a few people's heads).
Your audit questions, checklists and examples were written for the 2015 text. They need updating for quality culture evidence, separate treatment of opportunities, change effectiveness reviews and audit objectives. Certification body auditors will also need to meet their own body's competence requirements before conducting 2026 transition audits.
A formal transition credential is a straightforward way to show clients and certification bodies that your knowledge has been assessed against the new edition.
Internal audit is where the organization proves it is ready. Under 9.2.2, every audit in your programme now needs its own stated objectives, and the report has to answer them.
Before the certification body arrives, an internal audit against ISO 9001:2026 is one of the few pieces of evidence that the changes are working rather than just documented.
Clients will ask which edition you work to. Templates, gap-assessment tools and training decks built for 2015 need a proper rework, not a find-and-replace on the year.
The next three years will bring a lot of transition work. Being able to show a current, assessed credential helps when a procurement team is comparing proposals.
PECB Certified ISO 9001:2026 Transition: Course, Exam and Credential
The PECB ISO 9001:2026 Transition course is built for people who already know ISO 9001:2015 and need to learn what is different. It covers the key differences between the two editions, the new and revised requirements, and how to plan and implement those changes in an existing QMS. Day 1 introduces ISO 9001:2026 and compares it with the 2015 edition. Day 2 is a clause-by-clause comparison, followed by the certification exam.
PECB lists the target audience as quality professionals updating their ISO 9001 certificates, people responsible for transitioning a QMS, and managers, auditors, trainers and consultants who maintain or audit one. There are no prerequisites for the course.
| Course length | 2 days |
| Exam format | Multiple choice, closed book, 1 hour |
| Exam domains | 1. Differences between the main clauses of ISO 9001:2026 and ISO 9001:2015. 2. Understanding, planning and implementing ISO 9001:2026 changes. |
| Credential | PECB Certified ISO 9001:2026 Transition |
| Experience required | None (professional or QMS project experience); sign the PECB Code of Ethics |
| Materials | 150+ pages, including quizzes that mirror the exam structure |
| CPD | 14 CPD credits on course completion |
| Included via a PECB partner | First exam attempt, one free retake, certification application fee and first-year Annual Maintenance Fee, completed within 12 months |
Two points are worth noticing if you hold a PECB ISO 9001 Lead Implementer or Lead Auditor certificate. First, this exam is closed book, which is different from the open-book Lead Implementer and Lead Auditor exams. You cannot lean on your copy of the standard, so you need to actually know where things moved. Second, the credential has no experience requirement, so once you pass you can apply straight away, and it sits alongside your existing credential rather than replacing it.
Best Practice:
Take the transition course before you start gap reviews or transition audits, not after. The clause-by-clause comparison on Day 2 is exactly the checklist you will need for a client's gap analysis, and learning it once, properly, saves rework across every engagement that follows.
How to Prepare for the Transition Exam
The exam is short, and there is no book to open, so preparation is mostly about knowing where the changes sit. A practical plan:
- Read the 2026 text against the 2015 text, clause by clause. Mark every added, moved or reworded requirement. Pay particular attention to 5.1.1, 6.1.1 to 6.1.3, 6.3, 7.1.6, 9.2.2 and 10.1.
- Learn the new subclause numbers. Closed-book questions often hinge on knowing which clause a requirement now lives in, for example that continual improvement is consolidated in 10.1.
- Separate requirements from guidance. Annex A is much larger, but it explains rather than adds. Expect questions that test whether you can tell the difference.
- Practise the implementation angle. Domain 2 covers planning and implementing the changes, so think through how you would close a gap in each changed clause for a real organization.
- Use the course quizzes. PECB designs them to mirror the exam structure, so treat them as timed practice.
Conclusion
ISO 9001:2026 is a careful revision. The foundations from 2015 hold, and most well-run quality systems will need targeted updates rather than new ones. The work that remains is real, though: showing leadership behaviour around quality culture, giving opportunities the same discipline as risks, following changes through to results and keeping knowledge from walking out the door.
For organizations, the date to plan around is 30 September 2029. For professionals, the question is simpler. When a client asks whether you know the 2026 edition, can you show it? The PECB Certified ISO 9001:2026 Transition answers that in two days. If you are newer to ISO 9001 and need the full implementation skill set rather than an update, the Lead Implementer route is the better starting point.
Further Reading
- ISO 9001: The Complete Guide: what ISO 9001 requires, how certification works and where to start.
- ISO 9001 Lead Implementer Guide: the PECB implementer credential, exam domains and career path.
- ISO 9001 Lead Auditor Guide: how the PECB auditor credential works and what the exam covers.
Frequently Asked Questions
ISO published ISO 9001:2026 on 16 September 2026. It is the sixth edition of the standard and replaces ISO 9001:2015, including the 2024 climate change amendment.
Global ACI has set a three-year transition period. ISO 9001:2015 certificates cease to be valid after 30 September 2029, so organizations need to complete their transition audit before then.
The main changes are an explicit requirement for top management to promote quality culture and ethical behaviour, separate treatment of risks and opportunities in clause 6.1, expanded planning of changes in 6.3, broader organizational knowledge in 7.1.6, objectives for each internal audit in 9.2.2, and continual improvement consolidated in 10.1. The 2024 climate amendment is integrated into clauses 4.1 and 4.2.
No. The clause structure, process approach and PDCA cycle are unchanged. Most organizations need a gap review and targeted updates to affected processes, followed by an internal audit and management review against the new requirements.
No. Your personal credential keeps its own validity and maintenance cycle. The three-year transition deadline applies to organizations and their certificates. The PECB Certified ISO 9001:2026 Transition is how you show that your knowledge has been formally updated to the new edition.
It is a PECB credential for professionals who need to understand the differences between ISO 9001:2015 and ISO 9001:2026. The two-day course covers the revised requirements clause by clause and ends with a certification exam. Successful candidates can apply for the PECB Certified ISO 9001:2026 Transition credential.
The exam is one hour long, closed book and multiple choice. It covers two domains: differences between the main clauses of ISO 9001:2026 and ISO 9001:2015, and understanding, planning and implementing ISO 9001:2026 changes.
There are no prerequisites for the course, and the PECB Certified ISO 9001:2026 Transition credential requires no professional or QMS project experience. You need to pass the exam and sign the PECB Code of Ethics.
Candidates receive an attestation of course completion worth 14 CPD credits, which can count toward maintaining existing PECB certifications.
Yes. reconn is a PECB Authorised Partner based in Dubai and offers the PECB ISO 9001:2026 Transition as an online certification, available to candidates worldwide. When taken through a PECB partner, the course fee includes the first exam attempt, one free retake, the certification application fee and the first year of the Annual Maintenance Fee.
About the Author
Shenoy Sandeep
Shenoy Sandeep is the Founder of reconn, an AI-first cybersecurity firm based in Dubai, UAE. With 20+ years across cybersecurity focussing on offensive security and threat intelligence portfolio, and over 10 years in Enterprise AI, AI governance and data protection, he has assisted over 25+ startups in scaling their business in the Middle East and African region.
Training is Shenoy's passion project and reconn has associated themselves with PECB, the global leaders in personal certifications for AI, cybersecurity, data protection, privacy and business continuity professionals. He is a PECB-certified trainer and one of the world's early PECB-certified AI professionals, also specialising in ISO/IEC 27001, ISO/IEC 27701, ISO 42001, ISO 22301, and GDPR.
Via Reconn, Shenoy runs an advisory service assisting organisations in the EMEA with compliance and certification on ISO 42001, ISO 27001, ISO 27701, ISO 22301 and local data protection and privacy laws. His current interests include EU AI Act, NIS2, DORA, EU/UK GDPR, UAE PDPL and SDAIA PRPL.