ISO 9001's been revised for the first time since 2015, and the new version was published on September 16, 2026. Here's what's changing, what it means for a small shop, and what's worth doing now.
The Final Draft International Standard went out for ballot in April 2026, and ISO 9001:2026 was published on September 16, 2026. The 2015 version is now withdrawn, but your 2015 certificate isn't — it stays valid until the transition deadline.
The people running the revision have described it as evolution, not revolution. The structure stays the same. Existing requirements are clarified rather than replaced. If you already run a system that works, you aren't starting over.
One caveat, stated plainly: the themes below line up with the changes the accreditation bodies named when they set the transition rules. They're a summary, not the standard's own wording, so don't treat anything here as the published text.
Each one, and the gap it creates in a system built to the 2015 version.
The 2015 version treated them together. The revision splits them into their own subclauses, with opportunities handled as a discipline of their own rather than a footnote to risk.
Quality culture and ethical conduct are now written into the requirements for leadership, awareness, and the environment the work happens in. It's not just whether people know the procedure, but whether they understand why it exists and are willing to speak up.
When something changes — a new customer, a new process, a new piece of equipment, somebody leaving — the standard now expects you to plan it, tell the people it affects, watch how it goes, and look back at whether it worked.
A short set of key quality terms now sits inside ISO 9001 itself, pulled in from ISO 9000, so you don't need a second document to know what a word means.
The guidance on how to interpret the requirements has been expanded, without adding any new obligations. This one matters more than it sounds — Annex A is what auditors and consultants lean on when a requirement is ambiguous, which means it quietly shapes what "conforming" means in practice.
The Harmonized Structure — the common clause layout shared across ISO management system standards — is retained. Clause numbering you already know largely stays put.
One thing that isn't new: climate change. A February 2024 amendment already asked every certified shop to decide whether it's relevant to the business, and the 2026 version carries that forward. If you never wrote that down, it's still a gap.
The transition period's now set. Global ACI, the body that oversees certification accreditation, has given certified organizations until September 30, 2029, to move to the 2026 version, at a surveillance, recertification or separate transition audit. After March 31, 2028, new certificates can only be issued to the 2026 version.
If a customer has just started asking and you're building a system from scratch, you're in a better position than a shop that certified in 2018 and now has to change. You get to build against the current thinking once, instead of building twice.
The practical move is to build the system on the parts that aren't changing — documented process, records, nonconformance and corrective action, internal audit, management review — and treat the new themes as additions rather than a different foundation.
What that list doesn't tell you is how much of it you already have. Most shops are further along than they think in two or three of those areas, and further behind than they think in exactly one. It's usually records — because everybody keeps them, and almost nobody keeps them in a way that survives being asked for eighteen months later. Knowing which is which is a morning's work for somebody who has done it before, and guesswork for everybody else.
If you're certified: find out which audit will be your transition audit, get it in writing, and put it on a calendar next to the September 30, 2029 deadline.
Of the five themes, this is the one most existing systems handle worst. If your risk log has no opportunity side, start one now — it costs nothing and it's the most likely finding.
Don't buy a transition package off a sales email. Your deadline's September 2029, and anybody pushing you to decide this month is selling urgency, not the standard. Just don't leave it to 2029 either — registrar calendars fill up in the last year.
A half-day walkthrough and a written report shows you where you stand, structured around how your business actually runs, so moving to the 2026 version is a re-map and not a rewrite. $750, and the report is yours either way.
Dates checked October 13, 2026.