The new ISO 9001:2026 standard was officially published in September 2026, giving businesses with ISO 9001 a new version of the Quality Management System (QMS) to work towards.
The good news? There’s no need to panic!
While there are some changes to consider, ISO 9001:2026 is not a complete overhaul of the standard. Much of what you already have in place will continue to be relevant, although you may need to make some updates and strengthen how certain areas are managed and evidenced.
The first accredited ISO 9001:2026 certificates are not expected until January 2027, and organisations will have a three-year transition period to move across to the new requirements.
So, what has actually changed?
Quality Culture and Ethical Behaviour
One of the new themes running through ISO 9001:2026 is the importance of quality culture and ethical behaviour within an organisation.
This means considering how your organisation promotes quality and ethical decision-making, rather than simply having a quality policy sitting on a shelf.
You may need to consider:
- How management demonstrates and promotes a quality culture
- How quality culture and ethical behaviour are communicated to employees
- Whether these areas are included within staff awareness or training
- Whether they should be referenced within your Quality Policy
- Whether they should form part of your Management Review discussions
For many businesses, this may simply mean making sure something they already do is properly documented and evidenced.
Risks and Opportunities
ISO 9001 has always required organisations to consider risks and opportunities, but the 2026 version places more distinction between the two.
Rather than focusing heavily on risks, organisations should also demonstrate how they identify and make use of opportunities for improvement and development.
A simple way of managing this could be through an opportunities register alongside your existing risk register.
You should also consider how you monitor whether the actions you have taken have actually been effective.
Change Management
Change management has also been strengthened.
If you make changes within your business, your QMS should demonstrate that you have considered:
- What the change involves
- How the change will be communicated
- Whether the change has been effective
- What happened as a result of the change
If you already have a change management process or change log, you may simply need to make some updates to bring it in line with the new requirements.
Leadership Responsibilities
Leadership continues to play a key role in ISO 9001, but the 2026 update puts additional emphasis on management promoting:
- Quality culture
- Ethical behaviour
- Opportunities and improvement
- The effectiveness of the QMS
This reinforces the idea that ISO 9001 should be part of the way a business operates, rather than something managed separately for the purpose of passing an audit.
Organisational Knowledge
The requirements around organisational knowledge have been strengthened.
Businesses should consider how important knowledge is:
- Retained
- Shared
- Applied
- Protected from being lost
This is particularly relevant when experienced employees leave, systems change or important information is held by only one person.
Your existing training, handover, competency and document management processes may already provide evidence of this, but it is worth reviewing them as part of your transition.
Awareness
The awareness requirements have also been updated to reflect some of the new areas within the standard, including quality culture, ethical behaviour and relevant quality objectives.
For many organisations, this could be addressed through existing training and awareness activities rather than creating a completely new process.
Customer Communication
There are relatively few changes to Clause 8 – Operation, considering how much of ISO 9001 it covers.
One area to look at is customer communication around contingency arrangements and disruptions that could affect the delivery of your products or services.
This brings a stronger link to business continuity planning and is something organisations should consider when reviewing how they manage disruption.
Internal Audits
The internal audit requirements have been updated to align more closely with current approaches to risk-based auditing and the latest ISO 19011 guidance.
This is a good opportunity to review your internal audit programme and make sure it is:
- Appropriate for your business
- Based on risk and importance
- Covering all relevant areas of your QMS
- Producing useful evidence of improvement
At All About Compliance, we can help with both internal audit programmes and individual internal audits, whether you need support during your transition or simply want an independent check of your existing system.
Management Review
There are some additional considerations for Management Review, including:
- Changes in interested party requirements
- The effectiveness of actions taken to address risks
- The effectiveness of actions taken to address opportunities
For most businesses, these should be relatively straightforward additions to an existing Management Review agenda.
Improvement
There have also been some changes to the wording and structure around improvement.
Organisations should consider improvement in a broader sense, including areas such as:
- Future needs and expectations
- Innovation
- Significant or breakthrough changes
- Organisational changes and restructuring
Again, this isn’t necessarily about creating lots of new paperwork. It’s about being able to demonstrate how your organisation identifies and manages opportunities to improve.
Climate Change Remains Part of ISO 9001
The climate change amendment introduced in 2024 has now been incorporated into ISO 9001:2026.
Organisations need to consider whether climate change is a relevant issue for their business and whether interested parties have any climate-related requirements.
If you already addressed this as part of the 2024 amendment, you may already have the necessary evidence in place.
What Does the ISO 9001:2026 Transition Mean for Your Business?
The important thing to remember is that you don’t need to change everything overnight.
There is a three-year transition period, giving certified organisations time to understand the new requirements, review their existing QMS and make any necessary changes.
For many businesses, the transition will involve relatively small updates rather than starting again from scratch.
We recommend approaching the transition in the same way you would any other change to your management system:
Review → Plan → Update → Implement → Audit → Review
An internal gap analysis can be a useful starting point to identify exactly what needs changing within your business.
How All About Compliance Can Help
At All About Compliance, we specialise in making ISO management systems simple, practical and manageable, particularly for small businesses.
If you already have ISO 9001, we can help you understand what the 2026 changes mean for your business, identify any gaps and support you with the updates needed to your management system.
We can also help with:
- ISO 9001:2026 gap analysis
- Management system updates
- Internal audits
- Training and awareness
- Management Reviews
- Ongoing ISO support
- Transition planning
There is no need to panic about ISO 9001:2026. The best approach is to understand the changes, plan ahead and gradually build them into the way your business already operates.
If you’re unsure what the new standard means for your business, get in touch with All About Compliance and we can help you work out what needs to change — and what doesn’t.