In brief
ISO 9001:2026 was published on 16 September 2026. Organisations certified to ISO 9001:2015 must complete the transition by 30 September 2029. We help with the gap analysis, documentation update and an internal audit before the transition audit – ideally as part of one management system with ISO/IEC 27001 and ISO 22301.
What changes in ISO 9001:2026?
- quality culture and ethical behaviour are built into the requirements, especially for leadership and awareness;
- risks and opportunities are separate requirements;
- change management of the quality management system is strengthened;
- key terms from ISO 9000 are included in the standard itself;
- Annex A has expanded informative guidance, without new obligations.
How does the transition to the new edition work?
Gap analysis 2015 → 2026
Comparison of the existing system with the new requirements.
Deliverable: list of gaps and an action plan.
Documentation update
Quality policy and objectives, risks and opportunities, change management.
Deliverable: updated documentation ready for management approval.
Training
Management, process owners and internal auditors.
Deliverable: training records.
Internal audit and management review
Verification of conformity with ISO 9001:2026 before the certification body's audit.
Deliverable: internal audit report and management review minutes.
Support during the transition audit
Preparation, participation in the audit and correction of any nonconformities.
Deliverable: response report to the certification body.
Why integrate ISO 9001 with ISO 27001 and ISO 22301?
The standards share the same structure of requirements (clauses 4–10). A common policy, unified document control, one internal audit and one management review reduce the workload, and the certification body can carry out a combined audit. The transition to ISO 9001:2026 is a good opportunity to connect the quality system with the information security management system and business continuity.
Do you also implement ISO 9001 from scratch?
Yes, mainly as part of an integrated management system with ISO/IEC 27001 or ISO 22301. We use the same five-phase framework as for ISO 27001 implementation: current state analysis, processes, risks and opportunities, documentation, and implementation with an internal audit and support during the certification audit.
Frequently asked questions about ISO 9001
By when must we transition to ISO 9001:2026?
According to certification bodies, by 30 September 2029. After that date, certificates to ISO 9001:2015 cease to be valid. Check the details of the transition with your certification body.
Do we have to rebuild the whole quality management system?
No. We start the transition with a gap analysis between the 2015 and 2026 editions and update only what changes – for example quality culture, the separate treatment of risks and opportunities, and change management.
Can the transition be done at a regular surveillance audit?
Yes. The transition audit can be carried out together with your next surveillance or recertification audit, or separately before that (source: LRQA). Agree the timing and conditions with your certification body.
Why integrate ISO 9001 with ISO 27001 and ISO 22301?
The standards share the same structure of requirements, so we can build one set of documentation, one internal audit and one management review; the certification body can carry out a combined audit.
Sources
Last updated: · Prepared by the Regulus Ai team
Would you like a gap analysis and a transition timeline?
Book an initial consultation