ISO 9001:2026: What Changed and What It Means for Your Certificate

ISO reviews every standard at regular intervals to confirm it is still fit for purpose. ISO 9001:2015 had served organisations for more than a decade, and over that time the world around quality management changed. Customers and regulators began to expect evidence of how organisations behave, not just whether they follow procedures. Climate change became a business issue, which led ISO to amend its management system standards in 2024. And ISO continued to refine the harmonized structure shared by all its management system standards.

At the same time, users made it clear they valued stability. Hundreds of thousands of organisations worldwide run their quality systems on the 2015 structure, and a disruptive rewrite would have cost them time without improving quality. So the committee chose a careful evolution: the familiar structure stays, while a handful of requirements become sharper and more explicit.

The foreword of ISO 9001:2026 lists its main changes. In practical terms, these are the ones that matter.

1. Quality culture and ethical behaviour are now requirements

This is the change most people will notice first. Clause 5.1.1 now requires top management to promote quality culture and ethical behaviour as part of its leadership commitment. A note explains that an organisation's quality culture and ethical behaviour are reflected in its shared values, attitudes and established practices.

The theme runs through the standard. Clause 7.1.4, on the environment for the operation of processes, now refers to culture and behaviour, and clause 7.3 on awareness requires everyone working under the organisation's control to be aware of the organisation's quality culture and ethical behaviour, not only its quality policy and objectives.

Why it matters: in the 2015 edition, culture was implied. In the 2026 edition it is explicit, which means it is something an auditor can ask about. What it does not mean: the standard does not demand a separate culture programme, a new department or a specific ethics framework. It asks leadership to actively promote the right behaviours, and asks people to know what those behaviours are.

2. Risks and opportunities are handled separately

In the 2015 edition, clause 6.1 covered "actions to address risks and opportunities" together. In practice, many organisations listed risks in detail and left opportunities as an afterthought. The 2026 edition separates them into three subclauses:

• 6.1.1 determining risks and opportunities
• 6.1.2 actions to address risks
• 6.1.3 actions to address opportunities

The same separation is carried into clause 9.1.3 on analysis and evaluation, and clause 9.3.2 on management review inputs. As a result, the effectiveness of actions on risks and actions on opportunities can now be reviewed independently. Leadership is also expected to promote opportunity-based thinking alongside risk-based thinking.

3. Planning of changes is strengthened

Many quality problems begin during change: a new software system, a reorganisation, a new supplier or a new site. Clause 6.3 has been expanded to cover how changes are communicated, how their effectiveness is monitored and evaluated, and how the results are reviewed. In other words, it is no longer enough to plan a change. The organisation should also check that the change achieved what it was meant to achieve.

4. Climate change is part of the organisation's context

In February 2024, ISO amended ISO 9001:2015 and its other management system standards to add climate change to the context clauses. Organisations must determine whether climate change is a relevant issue (clause 4.1), and relevant interested parties can have climate-related requirements (clause 4.2). ISO 9001:2026 builds this amendment into the standard itself.

This is a context question, not a carbon accounting requirement. The organisation considers whether climate change affects its ability to deliver quality products and services, for example through supply disruption or extreme weather, and acts on what it concludes.

5. Key terms now sit inside the standard

Clause 3 now includes the core terms used in the standard, such as organisation, interested party, top management, quality management system, risk, competence, documented information, nonconformity, corrective action and audit. Previously the standard relied on readers looking these up in ISO 9000. The change makes ISO 9001:2026 easier to read and apply on its own.

6. A rewritten Annex A, and Annex B removed

Annex A has been rewritten and expanded into fuller guidance on how to interpret the requirements. It is informative, which means it explains and does not add obligations. Annex B, which listed other related standards, has been removed.

For a well-run quality management system, most of the standard will feel familiar.

• The same structure of clauses 4 to 10, so an existing system maps across directly.
• The process approach and the Plan, Do, Check, Act cycle.
• Risk-based thinking, now joined by opportunity-based thinking.
• The flexible approach to documented information.
• The certification cycle: a three-year certificate, maintained by annual surveillance audits, with recertification at the end.

The 2026 edition sharpens an existing quality system. It does not replace it.

Your ISO 9001:2015 certificate remains valid during the transition. The transition period runs for three years from publication and ends on 30 September 2029. After that date, ISO 9001:2015 certificates are no longer valid.

Most organisations will move across at a scheduled audit. The transition is normally carried out alongside a surveillance or recertification audit, rather than as a separate exercise. The transition audit focuses on the new and changed requirements, and usually needs some additional audit time.

First-time certification. The international transition arrangements phase out new certifications to the 2015 edition during the transition period, so organisations certifying for the first time should look at the 2026 edition. Your certification body will confirm the dates that apply.

Do not leave it to the final year. As with previous transitions, audit calendars fill up as the deadline approaches. Agreeing the timing of your transition audit early with your certification body avoids a last-minute rush and any risk of a gap in certification.

Auditors look for evidence that the quality management system works in practice. Under the 2026 edition, expect attention on these areas.

• Leadership: how top management promotes quality culture and ethical behaviour, for example through communications, decisions, how concerns are raised and handled, and what is discussed at management review.
• Awareness: whether people at different levels understand the organisation's quality culture and ethical expectations. Auditors usually check this through conversations, not documents.
• Risks and opportunities: whether opportunities are genuinely identified and acted on, not just risks, and whether management review looks at both separately.
• Planning of changes: how a recent change, such as new software, a reorganisation or a new site, was planned, communicated, checked for effectiveness and reviewed.
• Context: whether climate change was considered as a relevant issue, and what the organisation concluded.

The focus is on how the system actually works. New paperwork for its own sake adds nothing.

Many thousands of Indian organisations hold ISO 9001 certification, from manufacturers and engineering firms to IT services companies, hospitals and financial institutions. For them, the 2026 edition matters in a few practical ways.

• Tenders and procurement. Government tenders and large buyers often require ISO 9001. Both editions are recognised during the transition, but buyers will increasingly ask about the current edition.
• Exporters and IT services. Global clients use supplier questionnaires that ask about certification. Moving to the current edition keeps those answers straightforward.
• Culture and ethics. The new emphasis on ethical behaviour fits the expectations enterprise and global clients already place on their suppliers, and gives organisations a recognised way to show it.
• Integrated systems. ISO 14001:2026 was also published in 2026, in April. Organisations certified to both can plan a combined transition audit, which saves time and keeps their management systems aligned.

"We need to get certified again from scratch." No. Certified organisations transition through an audit of the new and changed requirements, usually combined with a scheduled surveillance or recertification audit.

"Our ISO 9001:2015 certificate is no longer valid." It remains valid until the end of the transition on 30 September 2029.

"Quality culture cannot be audited." Auditors assess evidence: leadership behaviour, communications, decisions and people's awareness. Culture is visible in how an organisation actually works.

"It is only a renumbering exercise." There are genuine new expectations, particularly on culture, ethics, opportunities and planning of changes.

"Annex A adds new requirements." It does not. Annex A is informative guidance only.

"Climate change means we must measure our carbon footprint." Not under ISO 9001. The requirement is to consider whether climate change is relevant to your quality management system and act on what you conclude.

ISO 9001:2026 is an evolution, not a revolution. The structure your quality system is built on stays the same, while the standard asks more clearly for leadership that promotes quality culture and ethical behaviour, separate attention to risks and opportunities, well-managed change, and a context that includes climate change. Existing certificates remain valid until 30 September 2029, and most organisations will move across at a scheduled audit.

Read more: ISO 9001 Certification and ISO 14001:2026 Changes Explained.