The nine ISO 9001:2026 changes that matter for your transition audit

If you hold an ISO 9001:2015 certificate, the 2026 edition can look like a big job. It usually isn’t. Clauses 4 through 10 are where they’ve always been. What changed is that the standard now asks you to show your thinking in places where most 2015 systems keep lists.

In my experience the gaps are predictable. They cluster around nine requirements. Here they are, paraphrased, with what an auditor is likely to look for.

1. Climate change (4.1). A recorded decision on whether climate change is relevant to your quality system. “Not relevant” is acceptable with a reason; no decision is not.

2. Interested parties (4.2). A decision on which of their requirements your system addresses, and why the others don’t apply.

3. Quality culture and ethics (5.1). Evidence that top management actively promotes both, not just a signed policy.

4. Risks and opportunities (6.1). Items analyzed and evaluated against criteria, with a decision for each, not just listed.

5. Planned changes (6.3). Changes planned with communication, measures of success and a review afterward.

6. Organizational knowledge (7.1.6). Critical knowledge identified, retained and shared, especially knowledge held by one person.

7. Customer communication (8.2.1). Customers told about your contingency actions where that matters to them.

8. Internal audit (9.2). Written objectives for each audit, alongside its criteria and scope.

9. Management review (9.3). New inputs on whether risk actions worked and how stakeholder needs have changed.

If your system works today, you are adding evidence of judgment, not rebuilding. Most well-run companies can close these gaps in about 12 weeks with a quality lead giving three to five hours a week and a sponsor from top management giving about one.

The hardest part is usually the first step: an honest picture of where you stand. Score each requirement against the records you could hand an auditor today, not the ones you intend to create. Most companies start lower than they expect, and that’s normal.

Your certification body’s schedule sets your real deadline, so call them early. Ask when your transition audit is, how many days they plan, and whether they’ll focus on the changed requirements.

The published standard is the reference for every requirement above; this summary paraphrases it.