ISO 9001:2026 was published on 16 September 2026 and replaces the 2015 edition. It is a measured revision, not a rewrite. The ten-clause structure, the process approach and the flexible rules on documented information all stay. What changes is where the weight sits: leaders must promote a quality culture and ethical behaviour, opportunities get a clause of their own, and changes to the system must be followed through to results.
The clock has started. No new certificates can be issued to the 2015 edition after 31 March 2028, and every certified organization must move by 30 September 2029.
Most summaries stop at five headline changes. They matter, but they are the tip. This briefing goes below the waterline.
Exhibit 1
What most summaries cover, and what sits below
The five headline changes, and nine more an auditor will look for
Source: HAC analysis of ISO 9001:2026 guidance from ASC, CQI, DQS and LRQA, October 2026.
The twelve changes, in one picture
Twelve changes carry real weight. They cluster around three themes: what leaders must do, how the system plans and handles change, and the evidence that shows it works. Exhibit 2 maps them; the clause cards further down give the detail.
Exhibit 2
ISO 9001:2026 at a glance
Twelve changes, structured around three themes
Source: HAC analysis of ISO 9001:2026 clause guidance from ASC, CQI and DQS, October 2026.
Same system, different focus
Read side by side, the two editions describe the same system with a different centre of gravity. The 2015 edition asked whether your processes were defined and your risks were handled. The 2026 edition also asks whether people behave the way the system assumes, and whether the system follows its own decisions through.
Exhibit 3
Where the emphasis moves
Relative emphasis of ISO 9001:2015 and ISO 9001:2026 on six pairs of priorities
Source: HAC assessment. Marker positions are illustrative, not measured.
Below the waterline, clause by clause
Each card shows what the 2015 edition asked, what the 2026 edition asks and what an auditor is likely to look for.
Determine the relevant interested parties and their relevant requirements, then monitor and review them. The 2024 amendment added climate change as an issue to consider.
Also decide which of those requirements the system will address (4.2 c). The climate wording stays, with a note that interested parties can have climate-related requirements.
Ten leadership commitments (5.1.1 a to j), including promoting the process approach and risk-based thinking.
A new commitment: top management must promote quality culture and ethical behaviour (5.1.1 i), described in a note as shared values, attitudes, practices and actions. Leaders also promote opportunity-based thinking alongside risk-based thinking. Reporting on opportunities for improvement becomes a separate responsibility (5.3).
Risks and opportunities handled together in one clause (6.1). Changes planned against four considerations: purpose, integrity, resources and responsibilities (6.3).
Risks are determined, analysed and evaluated (6.1.2). Opportunities get their own sub-clause, from identification through to an effectiveness check (6.1.3). Changes add three more considerations: communicating them, monitoring their effectiveness and reviewing the results.
Knowledge determined, maintained and made available (7.1.6). Awareness of the policy, objectives, contribution and the implications of not conforming (7.3).
Knowledge is retained, applied and shared (7.1.6). Awareness adds the organization’s quality culture and ethical behaviour (7.3 e). New notes cover remote and hybrid work (7.1.3) and how culture shapes the work environment (7.1.4).
Establish specific requirements for contingency actions, when relevant (8.2.1 e).
Provide customers with information related to contingency actions, when relevant (8.2.1 e). Clause 8.1 is restructured. Most of the rest of Clause 8 is unchanged.
Define the criteria and scope of each internal audit (9.2.2). Management review inputs listed in 9.3.2 a to f.
Define the objectives, criteria and scope of each audit (9.2.2 a). Management review gains a new input: changes in the needs and expectations of interested parties that are relevant to the system (9.3.2 c).
Three sub-clauses: general (10.1), nonconformity and corrective action (10.2) and continual improvement (10.3).
Two sub-clauses. Continual improvement is consolidated into 10.1, and the reference to customer complaints in 10.2 moves into a note.
Also changed: Annex A is expanded into clause-by-clause guidance. It explains the requirements but adds none. Annex B is removed; its references now sit in Annex A and on the ISO/TC 176 website.
Exhibit 4
Where the lists got longer, and one got shorter
Items in four clauses, ISO 9001:2015 vs ISO 9001:2026
Sources: ISO 9001:2015; Global ACI transition requirements for ISO 9001:2026 (4 September 2026); ASC Food Safety and Oxebridge clause reviews. Clauses where published counts differ between sources are left out.
“The 2015 edition asked whether your system manages risk. The 2026 edition also asks whether your leaders build the culture that makes the system work.”
— HAC ISO & Quality Practice
The clock: three years, and a shorter practical window
Before any certificate can move, certification bodies must themselves be accredited to the new edition. Global ACI, whose rules accreditation bodies in its mutual recognition arrangement follow, has set the timetable: accreditation decisions on certification bodies by 30 September 2027, no new 2015 certificates after 31 March 2028, and every 2015 certificate invalid after 30 September 2029. In the UK, UKAS starts its assessments on 1 November 2026 and its certification bodies stop accepting new 2015 applications on 16 March 2028.
Accreditation bodies in the GCC and Egypt have not yet published their own timetables. Ask your certification body when it expects to be accredited. The transition audit can run with a surveillance or recertification visit, or as a special audit, and can be done remotely. That makes 2027 and early 2028 the practical window for most organizations: late enough for certification bodies to be ready, early enough to avoid the queue.
Exhibit 5
The transition clock
Months left to move a certificate, with the six dates that matter
Sources: Global ACI transition requirements for ISO 9001:2026, 4 September 2026; UKAS technical bulletin, revision 1, 7 October 2026. Local accreditation bodies may add interim dates of their own.
Why the queue will be long
ISO 9001 is not changing alone. ISO 14001 was revised in April, and its transition ends on 30 April 2029, five months before ISO 9001’s. Revisions of ISO 45001 and ISO 22000 are under way. Together, these four standards account for about 92% of the 3.29 million certificates in the ISO Survey 2025, and ISO 9001 alone for about half.
For an integrated system that is good news: one gap check, one training round and one audit visit can cover more than one standard. For everyone else it means busy certification bodies and auditors for the next three years.
Exhibit 6
ISO 9001 is the biggest transition in the system
Valid accredited certificates at the end of 2025 for the four standards now being revised
Source: ISO Survey 2025 (valid accredited certificates at 31 December 2025), published October 2026.
Why it lands differently in the Gulf and Egypt
Three things make the timing sharper here. Many sites hold both ISO 9001 and ISO 14001, so they face two transitions in one cycle. The disruption around the Strait of Hormuz has made contingency planning a live conversation with customers, and Clause 8.2.1 now gives that conversation a structure. And the culture requirement arrives in the Middle East and North Africa, where only 14% of employees are engaged at work, according to Gallup.
About 135 ships a day crossed the Strait in February 2026. Lloyd’s List counted 143 transits between 28 September and 7 October. If your materials, packaging or finished goods cross it, your key customers will ask what happens next. The 2026 edition expects you to tell them before they ask.
Exhibit 7
If your supply crosses Hormuz, your customers will ask what happens next
Main ports inside and outside the Strait of Hormuz
Sources: S&P Global, 30 March 2026; Lloyd’s List via USNI News, 9 October 2026. Port selection is illustrative.
How it lands by sector
The same twelve changes weigh differently by sector. Exhibit 8 shows where we expect each change to need the most work across the sectors we serve most.
Exhibit 8
Where each change bites hardest
Expected transition effort by change and sector
Source: HAC assessment based on our client engagements. Illustrative.
What to do in the next 90 days
- Get the standard and brief your leadership team. The culture and ethics requirements start with them.
- Run a gap check against the twelve changes. Our ISO 9001:2026 gap checklist follows on 29 October.
- Start an opportunities log next to your risk register, with owners and review dates.
- Update your change procedure: who is told, how effectiveness is checked and when results are reviewed.
- Give every internal audit in your 2027 programme written objectives.
- Ask your certification body when it will be accredited to the 2026 edition, and book the transition with a 2027 surveillance or recertification visit.
- If you also hold ISO 14001, run both transitions as one programme.
Five questions for your quality manager
- Can top management show how they promote quality culture and ethical behaviour, with evidence an auditor would accept?
- Do you keep opportunities separately from risks, with owners and review dates?
- When the system last changed, did you communicate it, check it worked and review the result?
- Does every internal audit in your programme have written objectives?
- If a key supply route failed tomorrow, would your main customers know what happens next?
Three or more “no” answers means real work, not a document update. There is time for it in 2027. There is much less in 2029.
The decision
The deadline is 30 September 2029. The decision that matters is when to start. For a well-run system the work is modest: a gap check, an opportunities log, a sharper change procedure, audit objectives and a leadership conversation about culture. Done in 2027 alongside a routine audit, it fits into normal work. Done in 2029, it competes for auditor time with every other certified organization.
Start your ISO 9001 transition with a clause-by-clause gap check
Hesham Abbas Medany brings 35 years in quality and food safety, 25 of them as a lead auditor, most recently as Intertek’s General Manager for Saudi Arabia and Bahrain.
