ISO 9001:2026: The Complete Guide to Requirements, Changes and Certification
ISO 9001:2026 replaces ISO 9001:2015 with the same clause structure and clearer rules on quality culture, risks and opportunities, change planning and knowledge. See what changed, the 30 September 2029 deadline and which PECB course fits your role.
ISO 9001:2026 is the sixth edition of the international standard for quality management systems (QMS), published by ISO on 16 September 2026 as the replacement for ISO 9001:2015. It keeps the same clause structure and process approach, and adds clearer requirements on quality culture and ethical behaviour, risks and opportunities, planning of changes and organizational knowledge. Organizations certified to ISO 9001:2015 have until 30 September 2029 to transition, and professionals can build or update their skills through the PECB ISO 9001:2026 Transition, Lead Implementer and Lead Auditor courses.
Key Takeaways
Published 16 September 2026
ISO 9001:2026 is the sixth edition and replaces ISO 9001:2015, including the 2024 climate change amendment.
Same structure, sharper requirements
Clauses 4 to 10, the process approach and the PDCA cycle all stay. Most changes clarify or extend existing requirements.
Five changes to plan for
Quality culture and ethical behaviour, separate risks and opportunities, planning of changes, organizational knowledge and objectives for every internal audit.
Deadline: 30 September 2029
Global ACI has set a three-year transition. ISO 9001:2015 certificates cease to be valid after that date.
Built for integration
ISO 9001:2026 applies the harmonized approach used across ISO management system standards, which helps you combine it with other systems.
Three PECB routes for professionals
Transition to update, Lead Implementer to build a QMS, Lead Auditor to audit one. Each is available online from reconn.
On This Page
- What Is ISO 9001:2026?
- ISO 9001:2026 Requirements: What the Standard Asks For
- What Changed in ISO 9001:2026 Compared with ISO 9001:2015
- ISO 9001:2026 Transition Timeline and Deadline
- ISO 9001:2026 Professional Certifications: Which PECB Course Fits Your Role
- How to Get Your Organization Certified to ISO 9001:2026
- Career Paths After ISO 9001:2026
- Conclusion
- Frequently Asked Questions About ISO 9001:2026
What Is ISO 9001:2026?
ISO 9001:2026, Quality management systems: Requirements, is the international standard that sets out what an organization needs to do to run an effective quality management system (QMS). A QMS is the set of policies, processes, responsibilities and records that help an organization consistently deliver products and services that meet customer and regulatory requirements, and keep improving. It is the sixth edition of the standard, after 1987, 1994, 2000, 2008 and 2015, and it applies to organizations of any size or sector.
ISO 9001:2026 is a voluntary standard. An organization can use it as a framework without certifying, or ask an accredited certification body to audit it and issue a certificate. Many organizations certify because customers, public tenders and regulated sectors ask for it.
If you worked through the move from 2008 to 2015, this revision will feel lighter. ISO 9001:2015 introduced the harmonized structure, risk-based thinking and the context clauses, and ISO 9001:2026 keeps all of that. The process approach, the Plan-Do-Check-Act cycle, customer focus and continual improvement remain the core of the standard.
Key Context:
ISO 9001:2026 is the requirements standard. ISO 9000 remains the reference for quality management fundamentals and vocabulary, and ISO 9001:2026 now carries a short set of core terms and definitions in clause 3. The 2026 edition applies the harmonized approach used by other ISO management system standards, which is why combining it with other systems is practical.
ISO 9001:2026 Requirements: What the Standard Asks For
Only clauses 4 to 10 contain the requirements an organization is audited against. Each uses “shall” statements, so a certification auditor looks for evidence that the organization does what the clause says. Here is what each part of ISO 9001:2026 covers.
| Clause | What it covers in ISO 9001:2026 |
|---|---|
| Clauses 1 to 3 | Scope, normative references, and terms and definitions. These set the ground rules but are not audited as requirements. |
| 4. Context of the organization | Understanding the organization and its context (including whether climate change is a relevant issue), the needs of interested parties, the scope of the QMS and its processes. |
| 5. Leadership | Top management commitment, quality culture and ethical behaviour, customer focus, the quality policy, and roles, responsibilities and authorities. |
| 6. Planning | Risks and opportunities, quality objectives and how to achieve them, and the planning of changes to the QMS. |
| 7. Support | Resources, competence, awareness, organizational knowledge, communication and documented information. |
| 8. Operation | Operational planning and control, requirements for products and services, design and development, externally provided processes and products, production and service provision, release and control of nonconforming outputs. |
| 9. Performance evaluation | Monitoring and measurement, customer satisfaction, analysis and evaluation, internal audit and management review. |
| 10. Improvement | Nonconformity and corrective action, and continual improvement. |
The standard does not tell you how to document your system or which software to use. It describes what must be achieved and leaves the method to the organization. Annex A in ISO 9001:2026 has been expanded to explain the intent behind the requirements, but it adds none of its own. For a detailed clause-by-clause comparison with the 2015 text, see our guide to the ISO 9001:2026 Transition.
What Changed in ISO 9001:2026 Compared with ISO 9001:2015
The overall structure is unchanged, so this is an update to existing systems and not a rebuild. The revision technically replaces ISO 9001:2015 and incorporates Amendment 1:2024. These are the changes that matter most when you plan your gap review.
Top management must now promote quality culture and ethical behaviour as part of leadership and commitment, alongside continual improvement, the process approach and risk-based and opportunity-based thinking. The idea carries into awareness (7.3), so people working under the organization's control understand what it means for their own work, and into the environment in which processes operate (7.1).
The standard does not ask for a separate ethics manual. Auditors will look for evidence in how managers respond when someone raises a quality concern.
In 2015, risks and opportunities were handled together in one clause. ISO 9001:2026 gives them separate subclauses: determining risks and opportunities, actions to address risks, and actions to address opportunities. Risks and opportunities must be determined, analysed and evaluated, and the distinction continues into management review.
One planning tool can still hold both. What matters is that opportunities are genuinely identified, acted on and reviewed.
Clause 6.3 is significantly expanded. Beyond deciding how to make a change, organizations now consider the information people need, communication of the change, monitoring and evaluating its effectiveness and reviewing the results.
Most organizations already have a change template. The usual work is adding an effectiveness check and a review date, and making sure someone does the review.
The knowledge requirements are revised to cover retaining, applying and sharing organizational knowledge, and the resources clause now reflects remote and hybrid work. Handovers when experienced people leave, mentoring and lessons-learned reviews all come into scope.
The climate change provisions from the 2024 amendment are now part of the standard. Organizations must determine whether climate change is a relevant issue, and clause 4.2 adds a requirement to decide which relevant interested-party requirements the QMS will address, noting that these may relate to climate change.
The internal audit programme now explicitly includes audit objectives, so each audit needs a stated purpose as well as criteria and scope. Management review considers changes in the needs and expectations of interested parties and treats risks and opportunities separately. Continual improvement is consolidated: the former clauses 10.1 and 10.3 are combined into a single clause 10.1.
Clause 3 now includes a limited set of core management system terms, while ISO 9000 remains the normative reference for quality vocabulary. Documented information wording is simplified in several clauses. Annex A has been substantially reorganized and expanded, and its sections now largely correspond to clauses 4 to 10. It clarifies without adding requirements. Annex B has been removed.
Best Practice:
Run a gap review against the 2026 text before you change any documents. In most organizations the real gaps sit in a few places: opportunities that are listed but never followed up, changes that are never reviewed after go-live, and knowledge that lives in a few people's heads.
ISO 9001:2026 Transition Timeline and Deadline
ISO published ISO 9001:2026 on 16 September 2026. Global ACI, the international accreditation body formerly known as IAF, has set a three-year transition period. ISO 9001:2015 certificates cease to be valid after 30 September 2029, so a certified organization needs to complete its transition audit before then.
Publication of the new edition does not cancel an existing ISO 9001:2015 certificate. It remains valid through the transition period, and your certification body will confirm the dates that apply to you. Certification bodies still need to train auditors and complete accreditation for the new edition, and availability will vary by body and country, so the last months of the window are likely to be crowded.
The sensible approach is to combine the transition with a surveillance or recertification audit that already falls inside the window, and to plan backwards from that date: gap review, process updates, staff briefing, an internal audit and a management review against the new requirements, then closure of any findings before the transition audit.
Market Signal:
Every organization certified to ISO 9001:2015 has to go through this transition before September 2029. That is likely to keep demand steady for implementers, internal auditors and consultants who can show they know the 2026 requirements.
ISO 9001:2026 Professional Certifications: Which PECB Course Fits Your Role
PECB offers three ISO 9001:2026 routes for professionals. reconn, a PECB Authorised Partner, delivers them online and trains, mentors and supports candidates internationally. The right route depends on what you do and what you already hold.
| ISO 9001:2026 Transition | ISO 9001:2026 Lead Implementer | ISO 9001:2026 Lead Auditor | |
|---|---|---|---|
| Best for | Professionals who already know ISO 9001:2015 | People who build and run a QMS | People who audit a QMS |
| Focus | What changed between the two editions and how to plan the changes | Initiating, planning, implementing, monitoring and improving a QMS, and preparing for a certification audit | Planning, conducting and closing QMS audits, and managing an audit programme |
| Course structure | 2 days | 4 training days plus exam day | 4 training days plus exam day |
| Exam | 1 hour, closed book, multiple choice, 2 domains | 7 competency domains | 7 competency domains |
| CPD credits | 14 | 31 | 31 |
| Prerequisites | None | A fundamental understanding of ISO 9001:2026 requirements and knowledge of quality management principles | A fundamental understanding of ISO 9001:2026 requirements and knowledge of audit principles |
- New to ISO 9001:2026 and want to build or improve a QMS: take the Lead Implementer.
- You audit or want to audit quality management systems: take the Lead Auditor.
- You do both, or want both skill sets: the Lead Auditor and Lead Implementer bundle covers both courses in one enrollment.
- You already hold an ISO 9001:2015 credential: the Transition course is the fast route to show your knowledge is current.
The Lead Implementer and Lead Auditor credentials are UKAS accredited. Every course bought through reconn is self-study in English and includes unlimited email and WhatsApp support from a PECB Certified Trainer, who can answer questions on ISO 9001:2026, the course content, the exam and how to prepare. For a closer look at each role, read our guides to the ISO 9001:2026 Lead Implementer and the ISO 9001:2026 Lead Auditor.
How to Get Your Organization Certified to ISO 9001:2026
Certification is a structured project. The sequence below applies to a first-time certification and, with the gap review focused on the changes, to a transition.
- Define the scope and objectives. Decide which products, services, sites and processes the QMS covers, and what you want certification to achieve.
- Run a gap analysis against ISO 9001:2026. Compare what you do today with clauses 4 to 10. For organizations moving from 2015, focus on the changes above.
- Plan and implement. Assign roles, set quality objectives, update or create processes and documented information, and brief the people who run them.
- Run an internal audit. Audit the whole QMS against ISO 9001:2026, with stated objectives for each audit, and record findings.
- Hold a management review. Top management reviews performance, risks and opportunities, and improvement needs, and decides on actions.
- Choose an accredited certification body. Check that it is accredited to certify against ISO 9001:2026 in your sector and country.
- Complete the certification audits. The certification body audits your system, usually in two stages, and issues a certificate if the requirements are met.
- Maintain and improve. Expect surveillance audits during the certificate cycle and a recertification audit at the end of it.
Most of the effort goes into steps 2 to 5, and these are the steps where trained implementers and internal auditors earn their keep.
Career Paths After ISO 9001:2026
Because ISO 9001:2026 uses the harmonized structure shared by other ISO management system standards, the skills carry over. Quality professionals often add a second or third standard to move into integrated management, innovation, environment and safety, security or AI governance.
ISO 56001 is the international standard for innovation management systems. It follows the same management system structure as ISO 9001:2026, so quality professionals already know how it is organized, and it turns the discipline of a QMS into a way to plan, run and review innovation. reconn offers the ISO 56001 Lead Implementer and the ISO 56001 Lead Auditor.
ISO 14001 covers environmental management systems and ISO 45001 covers occupational health and safety management systems. Both share the harmonized structure with ISO 9001:2026, which is why many organizations run them as one integrated system. See the ISO 14001 Lead Implementer and the ISO 45001 Lead Implementer.
ISO 27001 is the standard for information security management systems. Quality professionals often work alongside security teams on shared processes such as internal audit, management review and documented information. See the ISO 27001 Lead Implementer.
ISO 42001 is the standard for AI management systems. If your organization is building or buying AI, the same skills you use for a QMS (scoping, risk, controls, audit and improvement) apply to governing it. See the ISO 42001 Lead Implementer.
Every course bought through reconn includes unlimited email and WhatsApp support from a PECB Certified Trainer. That includes career advice and a mentor who can help you decide what to certify next, whether that is ISO 56001, another management system standard or an auditor path. Support hours run round the clock and cover time zones across North America, Europe, the UK, South America, the Middle East, Africa, India, Singapore, Korea, Australia and New Zealand.
Conclusion
ISO 9001:2026 is a careful revision. The foundations from 2015 hold, and most well-run quality systems will need targeted updates and not a new system. The work that remains is real: showing leadership behaviour that supports quality, giving opportunities the same discipline as risks, following changes through to results and keeping knowledge in the organization.
For organizations, the date to plan around is 30 September 2029. For professionals, the question is simpler: when a client asks whether you know the 2026 edition, can you show it? Choose the route that fits your role, build or update your skills, and start well before the transition rush.
Further Reading
- ISO 9001:2026 Lead Auditor: Certification, Exam and Career Guide: how the PECB auditor credential works, what the exam covers and where it can take your career.
- ISO 9001:2026 Lead Implementer: Certification, Exam and Career Guide: the PECB implementer credential, exam domains and how to build a QMS for certification.
- ISO 9001:2026 Transition: What Changed from 2015 and How to Update Your Certification: a clause-by-clause comparison and the fast route for ISO 9001:2015 certified professionals.
Frequently Asked Questions About ISO 9001:2026
ISO 9001:2026 is the international standard for quality management systems (QMS). It sets out the requirements an organization needs to meet to consistently provide products and services that satisfy customer and regulatory requirements, and to improve over time. It is the sixth edition and replaces ISO 9001:2015.
ISO published ISO 9001:2026 on 16 September 2026. It replaces ISO 9001:2015 and incorporates the 2024 climate change amendment.
The main changes are explicit requirements for quality culture and ethical behaviour, separate treatment of risks and opportunities in clause 6.1, expanded planning of changes in clause 6.3, a broader view of organizational knowledge, objectives for each internal audit, continual improvement consolidated in clause 10.1, core terms added to clause 3 and a substantially expanded Annex A. Annex B has been removed.
No. The overall structure is the same, and the requirements an organization is audited against remain in clauses 4 to 10. The process approach and the Plan-Do-Check-Act cycle are unchanged.
Global ACI has set a three-year transition period. ISO 9001:2015 certificates cease to be valid after 30 September 2029, so certified organizations need to complete their transition audit before then.
No. Publication of ISO 9001:2026 does not cancel an existing ISO 9001:2015 certificate. It stays valid through the transition period, and your certification body will confirm the dates that apply to you.
ISO 9001:2026 is a voluntary standard, and certification is a business decision and not a general legal requirement. Customers, public tenders and some regulated sectors often ask suppliers for ISO 9001:2026 certification.
Choose the Lead Implementer course if you build and run a QMS, the Lead Auditor course if you audit one, both courses if you do both, and the Transition course if you already hold an ISO 9001:2015 credential and need to update your knowledge to the 2026 edition.
Yes. The PECB Certified ISO 9001:2026 Lead Implementer and Lead Auditor credentials are UKAS accredited.
Yes. reconn is a PECB Authorised Partner based in Dubai. We train, mentor and support our candidates internationally. Every course bought through reconn includes unlimited email and WhatsApp support from a PECB Certified Trainer, career advice and a mentor who can guide your next certification step. Support hours run round the clock and cover time zones across North America, Europe, the UK, South America, the Middle East, Africa, India, Singapore, Korea, Australia and New Zealand.
About the Author
Shenoy Sandeep
Shenoy Sandeep is the Founder of reconn, an AI-first cybersecurity firm based in Dubai, UAE. With 20+ years across cybersecurity focussing on offensive security and threat intelligence portfolio, and over 10 years in Enterprise AI, AI governance and data protection, he has assisted over 25+ startups in scaling their business in the Middle East and African region.
Training is Shenoy's passion project and reconn has associated themselves with PECB, the global leaders in personal certifications for AI, cybersecurity, data protection, privacy and business continuity professionals. He is a PECB-certified trainer and one of the world's early PECB-certified AI professionals, also specialising in ISO/IEC 27001, ISO/IEC 27701, ISO 42001, ISO 22301, and GDPR.
Via Reconn, Shenoy runs an advisory service assisting organisations in the EMEA with compliance and certification on ISO 42001, ISO 27001, ISO 27701, ISO 22301 and local data protection and privacy laws. His current interests include EU AI Act, NIS2, DORA, EU/UK GDPR, UAE PDPL and SDAIA PRPL.
