ISO 9001:2026: Every Change from the 2015 Edition in Detail

Updated 16 September 2026. ISO 9001:2026 was published today [1][2]. This article was checked against a copy of ISO/DIS 9001:2025(en) [11] — the Draft International Standard stage, whose committee ballot closed 2025-11-19, not the published IS text itself or the German DIN translation (neither was obtainable at the time of checking). Substantive changes are still possible between DIS and FDIS (only FDIS→IS is editorial-only); a final check will follow once DIN EN ISO 9001:2026 ships (~November 2026, [9]). Most of this article held up; one correction applies to section 3 (Documented information), see below.

After eleven years the world’s most widely used quality management standard gets a new edition. On 16 September 2026 ISO 9001:2026 is published as the sixth edition, superseding both ISO 9001:2015 and the climate change amendment Amd 1:2024 [1][2]. This article sets out what actually changes, which parts create work — and what is being overstated in the current coverage.

Why revise at all

ISO reviews its standards periodically. On the reason for this revision ISO states that after a global consultation in 2023, a consensus confirmed that revising the standard would enhance its value and keep it aligned with the evolving needs of users [1]. The development track was extended to 36 months to accommodate a second Committee Draft stage — an indication of how contested individual points were during the process [2].

The sequence is worth noting: ISO 9000:2026, the fundamentals and vocabulary standard, was already published in May 2026 [3]. Terminology was settled first and forms the basis for the new requirements text. Anyone trying to understand the revision will find part of the answer there.

The clause comparison at a glance

ISO summarizes the revision in three points of its own: clear separation of risks and opportunities for a more balanced approach, stronger emphasis on quality culture, values and ethical behaviour, and improved usability with closer alignment to other ISO management system standards [4].

The changes that actually create work

1. Quality culture and ethical behaviour (5.1.1 and 7.3)

This is the most demanding change in substance. Top management will have to demonstrate that it promotes a quality culture and ethical behaviour [9][10], and the required awareness of personnel is extended accordingly [9].

The difficulty is practical. Culture is not a process with a defined input and output. An auditor can examine a procedure — not an attitude. Expect the burden of proof to shift onto observable proxies: how are inconvenient nonconformity reports handled? Is the effectiveness check on corrective actions performed seriously or ticked off? Are quality objectives actually defended when they conflict with delivery dates?

Assessment: organizations with a functioning error culture will be able to evidence it. Organizations without one will not create it through an additional document. A market for “quality culture certificates” will probably form — nothing of the sort is required by the standard.

2. Separating risks and opportunities (6.1.2 and 6.1.3)

In the 2015 edition risks and opportunities sit together in 6.1. In practice most organizations maintain a risk register and carry opportunities as a footnote at best. The split into two sub-clauses addresses exactly that [9].

Concretely: opportunities will need their own traceable treatment — identification, evaluation, derived actions — instead of riding along with the risk assessment. Anyone keeping a combined table today will have to separate it. That is manageable, but it is real work, and it can be prepared now.

3. Documented information as evidence of effectiveness (7.5) — correction after checking the standard’s text

DIN Media had previously described this as the most far-reaching change of the revision: documented information was said to serve more strongly as evidence of implementation and effectiveness [9]. Checking against ISO/DIS 9001:2025(en) does not confirm that: the requirement text of 7.5.1 through 7.5.3 is unchanged in substance from 2015 — the same points on identification, format, review/approval, distribution, retention, and control of changes, no new or strengthened clause on evidencing effectiveness. What is genuinely new is a general framing in Annex A: the revision explicitly describes its approach as a “performance approach … rather than a prescriptive one” — a stance toward the whole document, not a text change to 7.5 itself.

The practical advice below still holds, only the reasoning changes: the effectiveness review of corrective actions is already mandatory in the 2015 edition (10.2) — that was already the point where document-based quality systems break, before this revision. A spreadsheet of findings proves that a finding was recorded. It does not prove that the derived action was implemented, when, by whom, and whether the effectiveness check happened — unless someone maintains it with discipline. The article on handling findings and CAPA covers the mechanics behind it.

4. Climate change in clause 4 (4.1/4.2)

For many organizations this change is already done. In 2024 ISO inserted climate change into clause 4 as a potentially relevant external issue via Amd 1:2024; ISO 9001:2026 supersedes that amendment and takes its content into the main text [1][9].

Anyone who implemented the amendment has no additional work here. Anyone who missed it — which happens more often than you would think, because an amendment slips through easily — has an existing gap that is audit-relevant today, independent of the revision.

5. Annex A — the real innovation

For the first time in its history ISO 9001 gets an annex. It is informative, so it adds no requirements; it explains terminology and the intent behind the requirements. ISO describes its purpose as “helping avoid any ambiguity or misinterpretation” and notes that it improves accessibility “particularly for first-time users and small businesses” [4]. BSI puts its length at around 15 pages [10].

Assessment: the annex is the most practically valuable part of the revision. A significant share of the friction between auditor and auditee comes from differing readings of phrases such as “appropriate”, “as applicable”, or “maintain versus retain”. An authoritative text on the intent of the requirements removes the basis for those arguments — in both directions.

Terminology: “outputs” becomes “results”

An inconspicuous but far-reaching change: the term “outputs” is replaced by “results”, according to DIN Media primarily to avoid translation problems across languages [9]. In addition, more QMS-specific terms move directly into clause 3 rather than referencing ISO 9000 [10].

In practice: every document, process description and question catalog that adopts the old terminology verbatim will read as dated after the transition. Adapting is not normatively required — the standard does not prescribe the wording of your documents. But consistent language saves questions in the audit.

What is actually settled about the transition period: nothing

This is where credible coverage separates from the rest.

ISO words it carefully: certified organizations will have a transition period to adapt — ISO names no duration [1]. The reason is structural: transition periods are not set by ISO but by the accreditation side.

And there, something fundamental changed in 2026 that barely features in the discussion: the International Accreditation Forum ceased operations on 1 January 2026 [7]. IAF and ILAC merged into the Global Accreditation Cooperation Incorporated, operational from the same date [8]. The mandatory document that used to define the transition rules as an “IAF MD” therefore has to come from an organization that is itself still consolidating its document landscape. At the time of writing it does not exist.

DIN Media points to the historical precedent of roughly three years [9]. That is precedent, not a commitment. Anyone writing “deadline September 2029” today is calculating, not citing.

Automotive: two coupled timelines

IATF 16949 certified organizations face a second migration. In Stakeholder Communiqué SC-2026-005 of July 2026 the IATF announced the second edition of IATF 16949 for mid-2027 and stated explicitly that the end of its transition time will be aligned with the end of the ISO 9001 transition [6]. What follows for planning is covered in the article on the second edition of IATF 16949.

What this means for internal audits

According to BSI the core requirements for internal audits in clause 9 do not change materially [10]. The work arises elsewhere: an audit question catalog hard-wired to the 2015 clause numbers has to be mapped onto the new structure — particularly where 6.1 becomes two sub-clauses. All historical findings also keep their link to the old structure while new audits assess against the new one.

How to solve that without breaking traceability is covered in the article on the impact on internal audits and question catalogs. Fundamentals on the current edition are in the internal audit checklist for ISO 9001, and the systematics of programme planning in the audit programme planning guide.

A realistic roadmap

Professional recommendation, not a requirement of the standard:

1. Now to September 2026: verify that Amd 1:2024 is implemented. Move risks and opportunities into separate assessments. Plan the 2027 audit programme with a slot for the gap review.
2. From 16 September 2026: obtain the text, read Annex A, run a real gap analysis against the final wording. Not earlier — before that you are analysing against a text you do not have.
3. From November 2026: the German edition DIN EN ISO 9001 [9] for document adaptation.
4. Once Global ACI publishes the transition arrangement: plan the recertification date with your certification body against the actual deadline.
5. Automotive, additionally: schedule the IATF migration for mid-2027, with its end coupled to the ISO deadline [6].

Conclusion

The revision is evolutionary, not revolutionary: the structure holds, clauses 8 to 10 barely change, and most of the added length goes into an annex that contains no requirements at all. Organizations running a maintained quality system face manageable adaptation.

One point is demanding above all: evidencing a quality culture, which resists classic document review. The effectiveness review of corrective actions is not a new requirement of this revision, but — as under 2015 — it remains the point where document-based quality systems part ways from the ones people actually live by.

And the most important number is still missing. The transition period has not been published. Anyone who gives it to you today has estimated it.

Sources

Primary sources — standards and accreditation bodies

1. ISO: ISO 9001 — Quality management systems. Requirements. Stage 60.00 (International Standard under publication), edition 6, publication date 2026-09, ISO/TC 176/SC 2. https://www.iso.org/standard/88464.html (accessed 2026-08-24)
2. ISO/TC 176/SC 2: ISO 9001 revision update. News item, 7 Aug 2026. https://committee.iso.org/sites/tc176sc2/home/news/content-left-area/news-and-updates/news-1.html (accessed 2026-08-24)
3. ISO: ISO 9000:2026 — Quality management. Fundamentals and vocabulary. Edition 5, published 2026-05. https://www.iso.org/standard/9000 (accessed 2026-08-24)
4. ISO: ISO 9001:2026 — Quality management systems – Requirements. Trusted across the world. Factsheet, ISO 2026. https://www.iso.org/files/live/sites/isoorg/files/standards/popular_standards/iso_9000_quality_management/ISO9001-2026_Factsheet.pdf (accessed 2026-08-24)
5. ISO: ISO 9001 — Turn quality into business performance. Official topic page for the 2026 edition. https://www.iso.org/9001-2026 (accessed 2026-08-24)
6. IATF Global Oversight: IATF Stakeholder Communiqué, REF 005: IATF 16949 2nd edition update information. July 2026. https://www.iatfglobaloversight.org/wp/wp-content/uploads/2026/07/Stakeholder-Communique-SC-2026-005_IATF-16949-2nd-Edition-status.pdf (accessed 2026-08-24)
7. International Accreditation Forum: notice on the cessation of operations as of 1 Jan 2026 and the transfer to the Global Accreditation Cooperation Incorporated. Legacy site. https://iaf.nu/en/home/ (accessed 2026-08-24)
8. Global Accreditation Cooperation Incorporated (Global ACI): organisational information, operations began 1 Jan 2026. https://global-aci.org/en/home/ (accessed 2026-08-24)

Secondary accounts of ISO/FDIS 9001 by national standards bodies

The FDIS is not publicly available. Clause-level statements in this text therefore rely on the accounts published by the national standards bodies that take part in the standardization process:

9. DIN Media (DIN group): Revision der ISO 9001 — Veröffentlichung 2026. https://www.dinmedia.de/de/themenseiten/managementsysteme/qualitaetsmanagement/revision-der-iso9001 (accessed 2026-08-24)
10. BSI (British Standards Institution): ISO 9001:2026 — Key Changes and Guidance. https://www.bsigroup.com/en-US/products-and-services/standards-services/iso-9001-2026-key-changes-and-guidance/ (accessed 2026-08-24)
11. ISO/DIS 9001:2025(en), Quality management systems — Requirements. ISO/TC 176/SC 2, committee ballot 2025-08-27 to 2025-11-19. Not publicly available; checked against a copy on 2026-09-16 — not the published IS edition, see the status note above.

Consultancy, certification-body and content-marketing pages with no involvement in the standardization process are not cited. Where this text goes beyond the documented evidence, it is marked as an assessment.