Blog / Article

ISO 9001 is changing again, but organizations should resist the temptation to treat ISO 9001:2026 as another documentation exercise.

As of 4 September 2026, ISO reports that the FDIS has been approved and the sixth edition is scheduled for publication on 16 September 2026. ISO describes the new edition as retaining the trusted framework while giving stronger attention to leadership, quality culture, and a clearer strategic approach to risks and opportunities.

That makes this transition different in spirit. The right question is not simply:

“What documents must we change from ISO 9001:2015 to ISO 9001:2026?”

A much better question is:

“What must change in the way our organization thinks, behaves, decides and learns?”

That is where transition should begin.

Do Not Start by Rewriting the Quality Manual

When a new edition of ISO 9001 arrives, many organizations immediately appoint the Quality Manager and ask for a gap analysis, revised procedures, new forms and an updated Quality Manual.

Those activities may eventually be necessary, but they should not be the starting point.

ISO itself describes the new edition as an opportunity for organizations to review and refine their QMS so that it remains aligned with updated requirements and stakeholder expectations. Certified organizations will have a transition period, with detailed arrangements ultimately needing to be considered with their certification bodies.

The transition therefore presents management with something much more valuable than a certificate-maintenance project: an opportunity to ask whether the quality management system actually represents the organization as it exists today.

What has changed since 2015?

Think about the answer. Artificial intelligence has entered everyday business. Digital platforms have transformed customer expectations. Supply chains have become more interconnected but also more vulnerable. Cybersecurity, climate change, sustainability, remote working, geopolitical disruptions and rapidly changing technologies increasingly influence organizational decisions.

An organization should therefore begin its transition by looking outward and inward—not by opening its procedures folder.

Begin with Context: What Has Changed Around Us?

Bring top management and process owners together and revisit the context of the organization.

Ask:

What has changed in our market?

What are customers expecting today that they did not expect five or ten years ago?

Which technologies could disrupt our business?

How is AI affecting our processes, competence requirements and decisions?

Are climate-related issues relevant to our ability to provide conforming products and services?

Where have new supply-chain vulnerabilities emerged?

Have statutory and regulatory expectations changed?

Who are our important interested parties today?

Have their needs and expectations changed?

This is not an exercise to populate a SWOT-analysis template for an auditor. It is strategic thinking.

Climate considerations should already be part of this discussion where relevant. ISO 9001:2015 was amended in 2024 to incorporate climate-action considerations, and that amendment remains part of the current transition background.

Culture: Perhaps the Most Important Opportunity

A Quality Management System cannot become stronger than the culture in which it operates.

ISO is explicitly highlighting a stronger focus on quality culture in describing the 2026 edition. This deserves serious attention because culture determines what people actually do when the procedure is no longer being watched.

A beautifully documented QMS can coexist with a poor quality culture.

Imagine an organization where employees know that a defective product should be stopped, but production pressure encourages them to pass it. The procedure may be correct. The culture is not.

Imagine another organization where a customer complaint is treated as an irritation to be closed quickly rather than information from which the organization can learn. Again, the documented procedure may conform while the culture works against quality.

Quality culture is therefore not a poster saying:

“Quality is Everyone's Responsibility.”

It is what happens when nobody is watching.

Do employees feel comfortable reporting mistakes?

Can an operator stop production when something is wrong?

Does management genuinely listen to customer complaints?

Are problems reported early or concealed until they become serious?

Are employees blamed for failures, or are processes investigated?

Does purchasing choose the cheapest supplier despite repeated quality problems?

Are delivery targets allowed to override product conformity?

Does management participate in quality improvement, or is “ISO” considered the Quality Manager's responsibility?

These questions reveal more about quality culture than a framed Quality Policy hanging in reception.

Organizations looking for a structured approach can also look to ISO 10010:2022, which specifically provides guidance for understanding, evaluating and improving organizational quality culture, with particular attention to leadership and people engagement.

Leadership Must Move from Sponsorship to Ownership

One of the most valuable transition activities would be to ask every member of top management:

“What is your personal role in the effectiveness of our Quality Management System?”

If the answer is:

“Our Quality Manager looks after ISO,”

the organization has discovered an important gap before even opening ISO 9001:2026.

Quality must influence business decisions.

When management discusses a new supplier, quality matters.

When a new technology is introduced, quality matters.

When employees are recruited, competence matters.

When production targets are established, process capability matters.

When a new market is entered, customer and regulatory requirements matter.

When investment is approved, risks and opportunities matter.

When complaints increase, leadership should want to understand why.

The QMS should therefore not sit beside the business-management system.

The QMS should be how the organization manages its business consistently and responsibly.

Revisit Risk — But Do Not Build a Bureaucratic Risk Register

ISO indicates that the new edition takes a clearer, more strategic approach to risks and opportunities.

Organizations should use the transition to improve the maturity of risk-based thinking.

A risk register containing 150 rows that nobody looks at is not necessarily evidence of good risk management.

Instead ask process owners:

What can prevent your process from achieving its intended result?

What is changing?

What could go wrong?

What opportunity could improve performance?

What controls currently protect us?

How do we know those controls are effective?

Risk should become part of decisions rather than an annual form-filling exercise before the certification audit.

Bring Ethical Behaviour into the Quality Conversation

Quality and ethics are inseparable in practice.

If a test result fails, do we report it honestly?

If the customer will never discover a deviation, do we still disclose it where required?

If delivery is late, do we manipulate the date?

If an inspection result is inconvenient, can commercial pressure influence the inspector?

If artificial intelligence generates information used for a technical or quality decision, who verifies its reliability?

A mature quality culture should make ethical behaviour visible through leadership decisions, reporting mechanisms, accountability, competence and everyday conduct.

Organizations should therefore use the transition to examine not only what employees are required to do, but what behaviours the organization's systems actually encourage.

Review Competence for the World of 2026

A competence matrix prepared ten years ago may no longer describe the competence an organization needs.

Consider whether employees now require competence in areas such as:

digital systems,

data interpretation,

automation,

AI-assisted work,

cybersecurity awareness,

new manufacturing technologies,

remote customer interaction,

sustainability requirements,

new statutory obligations,

and emerging supply-chain risks.

ISO 9000:2026 has already been published and updates quality-management terminology and concepts to reflect contemporary business practices, technology and stakeholder needs while aligning with the forthcoming ISO 9001:2026.

Transition therefore provides an excellent opportunity to ask:

Do we have yesterday's competence for tomorrow's business?

Revisit the Customer — Beyond Measuring Satisfaction

Many organizations measure customer satisfaction because ISO expects them to monitor customer perceptions.

But measuring satisfaction is not the same as being customer-focused.

During transition, study:

complaints,

repeat orders,

lost customers,

warranty claims,

returns,

delivery performance,

online reviews,

sales enquiries,

customer feedback,

service response time,

and reasons customers choose competitors.

A customer complaint should not merely produce a corrective-action number.

It should produce organizational learning.

Examine the Supply Chain as Part of Your QMS

The modern organization may outsource manufacturing, logistics, IT, cloud services, calibration, design, inspection, maintenance and other critical processes.

Transition should therefore examine supplier controls based on actual risk.

Do not audit every supplier identically.

A supplier providing office stationery does not present the same quality risk as a supplier manufacturing a safety-critical component.

Ask:

What could this supplier's failure do to our customer?

That question immediately makes supplier evaluation more meaningful.

Transform Internal Auditing

This may be one of the greatest opportunities presented by transition.

Stop asking auditors simply to verify:

“Do you have a procedure?”

Teach them to ask:

“Is this process achieving its intended result?”

An auditor should follow the process.

Requirement → Input → Activity → Control → Responsibility → Output → Measurement → Risk → Customer → Improvement.

Auditors should understand processes, ask intelligent questions, examine evidence and identify systemic weaknesses rather than merely complete checklists.

ISO 9001:2026 transition therefore also requires auditor transition and development.

Management Review Should Become a Business Review

Management review should not be a ceremonial annual meeting conducted two weeks before the certification audit.

Use the transition to integrate QMS performance into normal management discussions.

Customer complaints, process performance, supplier failures, risks, opportunities, audit findings, resources, competence, quality objectives and improvement should already be subjects management cares about.

When management review becomes indistinguishable from intelligent business management, ISO 9001 has begun to work as intended.

A Practical ISO 9001:2026 Transition Roadmap

I would recommend organizations approach the transition in this sequence:

Understand → Assess → Engage → Redesign → Implement → Verify → Improve → Transition.

First, understand the final ISO 9001:2026 requirements when the International Standard is published. Do not redesign your system solely from rumours, presentations or draft interpretations.

Then conduct a strategic gap assessment, not merely a clause-to-clause document comparison.

Evaluate organizational context, interested parties, leadership, culture, ethical behaviour, risks and opportunities, customer focus, process effectiveness, competence, technology, supply-chain controls, performance evaluation and improvement.

Bring top management and process owners into the transition. Do not delegate it exclusively to the Quality Department.

Update processes only where necessary. Preserve what already works.

Train people according to their roles. A CEO, process owner, operator and internal auditor do not need identical transition training.

Then implement the changes and allow enough time to generate evidence that they actually work.

Conduct transition-focused internal audits.

Perform a meaningful management review.

Close genuine gaps.

Finally, coordinate with your certification body regarding the applicable certification-transition arrangements.

Do Not Transition the Certificate. Transition the Organization.

That distinction matters.

The weakest approach to ISO 9001:2026 will be:

New Standard → Gap Checklist → Revised Documents → Internal Audit → Certification Audit → New Certificate.

A stronger organization will follow:

New Environment → New Understanding → Leadership Reflection → Cultural Improvement → Better Processes → Better Decisions → Better People → Better Customer Outcomes → Continual Improvement.

The certificate should be the consequence—not the purpose.

ISO describes ISO 9001:2026 as an opportunity to improve consistency, customer satisfaction, stakeholder trust, risk and opportunity management, and the culture of quality across the organization.

That is how organizations should embrace the transition.

ISO 9001:2026 should not simply change your Quality Management System. It should challenge your organization to become a better organization.

M S Ray

CEO

TCB Cert Worldwide

Author, Course Developer CQI/IRCA Approved ISO 9001:2015 Lead Auditor Course