ISO 9001:2026 transition support

The honest starting position

ISO 9001:2026 is a measured revision, not a rebuild. The structure, the process approach, customer focus, corrective action and continual improvement all carry through. A business that already holds ISO 9001 certification and runs a quality management system that is genuinely used will experience this as a refinement.

That matters commercially, because a great deal of what will be sold over the next year is a rewrite nobody needs. The most expensive mistake available to you right now is replacing a working system in response to a revision that did not ask you to.

What you do not need to do

Worth stating before anything else, because it removes most of the anxiety and most of the cost. To conform to the 2026 edition, you do not need to:

• Rewrite or withdraw your quality manual or procedures. If they are in place, needed and working, they stay. They get aligned, not replaced.
• Renumber or rename documentation to match the revised clause references.
• Restructure your system to follow the standard's sequence. If the requirements are met, the system conforms.
• Change your terminology. If your people say "records" and "supplier" rather than "documented information" and "external provider", that remains perfectly acceptable.
• Remove a management representative role if you have one and it works, though certain responsibilities sit with top management.
• Adopt any particular tool. No standard mandates PESTLE, SWOT or anything else.

Strip those out and the transition becomes a focused piece of work on a small number of clauses, rather than a project.

Where the real work is

Three areas carry most of the effort in most systems.

1. Quality culture and ethical behaviour

Top management is now expected to actively promote quality culture and ethical behaviour, and the organisation needs to be able to show it. This is the hardest of the changes, because it cannot be satisfied by writing a procedure. It has to be visible in how leadership communicates, what it expects, and how decisions are actually made.

The standard does not prescribe a particular culture or ethical framework, which is helpful. It asks that these are promoted within the context of your business and reflected in your own values, policies and conduct. Expect early audits to probe this inconsistently while auditors settle on what good evidence looks like.

2. Opportunities as a requirement in their own right

Risks and opportunities have been separated, and there is now a distinct requirement covering opportunities. They must be determined, analysed and evaluated, actions identified to realise them, those actions integrated into the system, and their effectiveness evaluated.

Nearly every existing system treats opportunity as a column next to risk, filled in once a year to satisfy an auditor. That will no longer be sufficient, and closing this gap is real process work rather than a documentation change.

3. Planning of changes

Change planning now reaches past approval and implementation. It has to consider how a change is communicated, how its effectiveness will be monitored and evaluated, and how the results will be reviewed.

The practical test is simple. If your change control currently ends when the change is approved and made, it is too thin for the revised requirement.

Alongside those, management review has been reorganised into clearer parts, internal audits now need defined objectives as well as scope and criteria, organisational knowledge widens to cover what the system needs to achieve its intended results, and the February 2024 climate change amendment is absorbed directly into the context clauses.

How we run a transition

Three stages, and many businesses only need the first.

• Transition gap assessment. A clause-by-clause review of your existing system against what actually changed, with a written finding on each. The output is a specific list of what needs attention, and usually a shorter one than expected.
• Gap closure. The work itself, concentrated on the clauses above: evidencing leadership promotion of quality culture, building a genuine opportunity process, extending change control into communication and review, and tightening management review and internal audit.
• Audit readiness. Internal audit against the 2026 edition, management review, and the evidence pack, before the certification body arrives.

We work on systems we did not build, which is most of this work. There is no requirement to move onto our templates.

When to start

There is a comfortable window and then a congested one.

Publication is scheduled for 16 September 2026. Certification bodies then need their own accreditation to the new edition, expected to run to about August 2027, so the first ISO 9001:2026 certificates are anticipated around then. The transition is expected to close around September 2029.

That gap between publication and certification being available is the useful part. It is roughly a year in which the work can be done properly with no deadline pressure and no queue. Businesses that leave it until 2028 will be competing for the same audit dates as everyone else who did.

For the full timeline and what changes in each window, see our article on the ISO 9001:2026 revision. To see where your own certificate cycle lands in that window, use the transition planner: your expiry and surveillance dates in, a dated plan out.