Who is this relevant for?

Are you a QHSE coordinator, compliance officer, or director of an organization with an ISO 9001:2015 certificate? Then this will affect you. The impact is greatest if:

• your certification is integrated with ISO 27001 or 14001 (as is the case for many Fendix clients)
• your next recertification falls between 2027 and 2029
• you are already working on ESG or climate reporting
• you use AI or automated tooling in quality control or production

Do you work in an organization without an integrated management system? This article remains useful. For you, it will primarily be a matter of regular recertification under a new standard.

The ISO 9001:2026 timeline

The status as of August 2026 is as follows:

• April 2026: the Final Draft International Standard (FDIS) went to a vote among ISO members, including NEN.
• July 9, 2026: the voting closed. The FDIS has been approved. There will be no further substantive changes, only editorial finalization.
• September 2026: expected publication of ISO 9001:2026. This will be the sixth edition.
• Around September 2029: expected end of the three-year transition period. The IAF will confirm the exact date and conditions in a mandatory document to be released around the time of publication.

One nuance that is often overlooked: publication is not the same as availability. Your certification body (CB) first needs to extend its accredited scope and train its auditors. During the previous revision, that took over a year. Expect the first accredited transition audits to be possible sometime during 2027. The transition window is therefore closer to two years than three.

What is changing in ISO 9001:2026?

The Harmonized Structure remains in place. Chapters 4 through 10 retain the same layout, your procedures remain usable, and your audit cycle will not change. This is a refinement of the 2015 version, not a rebuild like in 2015. These are the changes that matter in practice:

‍

1. Quality culture and ethical behavior become auditable

This is the biggest shift. In 2015, quality culture was something you read between the lines. In 2026, it is explicitly stated in three places:

• Clause 5.1.1 (leadership): top management must demonstrably promote and model a quality culture and ethical behavior. Auditors will look at how managers behave when quality and revenue clash. Is a quality roadblock being structurally bypassed to meet monthly targets? If so, you are not in compliance.
• Clause 7.3 (awareness): employees must understand what the organization's quality culture and behavioral standards entail. Simply reciting the quality policy will no longer be enough. The question will be: is an operator allowed to stop the line if they have doubts, and do they know they are allowed to do so?
• Clause 7.1.4 (work environment): where 2015 focused primarily on temperature, light, and sound, social and psychological factors are now being added. Think of workload, stress, inappropriate behavior, and conflict resolution. ISO's reasoning: an error resulting from exhaustion or an unsafe atmosphere is a quality problem.

Examples of evidence include: a code of conduct, onboarding processes that incorporate quality and ethics, a whistleblowing policy, examples of successfully resolved escalations, employee surveys, and a risk assessment (RI&E) covering psychosocial workload.

‍

2. Climate change is now fully integrated into the standard

Amendment 1:2024 already made climate a mandatory context factor. By 2026, this will be fully incorporated into clauses 4.1 and 4.2. It is important to understand that this is not about your CO2 emissions; that remains the domain of ISO 14001. Here, the focus is on whether climate change affects your ability to deliver consistent quality. Think of heat affecting your cold chain, a supplier located in a flood-prone area, stricter packaging regulations impacting your product specifications, or staff making more errors during extreme heat.

If you conclude that climate is not relevant to your organization, that is acceptable. However, document your reasoning, as this question will come up during the audit. A note will be added to 4.2: stakeholders such as major clients, regulators, and investors may impose climate-related requirements. These should be included in your stakeholder analysis.

‍

3. Risks and opportunities each get their own clause

Clause 6.1 is now divided into three parts. 6.1.1 remains the general provision. 6.1.2 covers actions to address risks, and 6.1.3 covers actions to seize opportunities. The reason for this is clear: many risk registers only contain risks, with the "opportunities" column filled with inverted risks. "Machine automated, therefore fewer human errors" is risk mitigation masquerading as an opportunity. In 2026, they will be assessed separately. You evaluate an opportunity based on different criteria than a risk: market potential, capacity, resources, and expected return. Auditors will look for a trail from opportunity identification to decision to KPI, and for feedback in the management review.

‍

4. Digitalization, data, and AI

The standard is not becoming an IT standard, but expectations regarding data and automated decision-making are tightening. Do you use AI or algorithms for quality inspection, predictive maintenance, or routing complaints? You must be able to demonstrate how that model was validated, how you adjust it when the model changes, and who oversees it. Clause 7.5 (documented information) is also shifting from "we have PDFs on a network drive" to demonstrable version control, access rights, and availability. For organizations that already have ISO 27001, this is largely familiar territory.

‍

5. Annex A: fifteen pages of explanation

For the first time, ISO 9001 will include an informative annex. Annex A explains the meaning of terms and the intent behind the requirements, linked to clauses 4 through 10. Annex A is informative; it contains no "shalls," and an auditor cannot write a non-conformity against it. Nevertheless, this may be the most useful addition of the entire revision for two reasons: internal auditors can base their training on it, and if an external auditor demands something not required by the standard, you now have a text to point to. For example, Annex A makes it explicit that you do not need to set up a full ISO 31000 framework for risk-based thinking.

Why is the ISO 9001:2026 standard moving in this direction?

Three developments are driving the revision. Climate and sustainability are now impacting operations themselves, not just reporting, and quality management has a role to play in this. AI and automation are taking over routine tasks, which makes the human factor even more decisive, as people are the ones doing the assessing, intervening, and escalating. Culture is therefore becoming a quality factor. Finally, ISO wants to align 9001 more closely with 27001, 14001, and 45001. For organizations with an integrated system, this is good news: more overlap in clauses means less duplicate evidence to collect.

What happens to your ISO 9001:2015 certificate?

This is the point where many articles are imprecise, so let's be clear: your 2015 certificate remains valid until the end of the transition period, expected to be September 2029. On that date, it expires. It does not quietly continue until its original end date. Anyone still on the 2015 version in September 2029 will no longer be certified.

Furthermore, new 2015 certificates will no longer be issued well before 2029. During the previous transition, that deadline fell roughly halfway through the period. The IAF will set the exact date in the mandatory document. Practical points of attention:

• Does your recertification fall in 2027 or later? Then you will almost certainly do it under ISO 9001:2026 immediately. Ask your CB when their accreditation extension will be finalized.
• Is your recertification at the end of 2026? Then there is a good chance you will still be certified under 2015, as your CB may not be ready yet. That is fine. You will still have plenty of time afterward.
• Do you have an interim surveillance audit in 2027 or 2028? Discuss with your CB whether you can include the transition in that audit. This often saves you from needing a separate audit.

Four actions that are useful now for ISO 9001:2026

1. Perform a gap check on the five changes: one half-day session with your QHSE coordinator, and if you have an integrated system, your CISO as well. Perform an initial scan: where might we encounter a finding right now?

2. Split your risk register: open your current register. Does it contain real opportunities or just inverted risks? Create two tracks and ensure that every opportunity has an owner, a decision, and a metric.

3. Inventory your evidence for quality culture: start collecting instead of designing. What do you already have? Code of conduct, whistleblowing policy, onboarding materials, employee surveys, examples where someone reported a problem and it was handled well. Put it all in one place. It will be requested in 2026.

4. Call your certification body: ask a few questions. "When will your accreditation for 2026 be finalized, can we combine the transition with a scheduled audit, and what is the final date you will issue 2015 certificates?" With those three answers, you can create your entire schedule.

And you do not need to do this yet for ISO 9001:2026

Redesigning your management system. That is work without a return. The structure remains, your main procedures remain, your internal audit cycle remains. The changes are in a handful of clauses. Also, wait to rewrite documents until the published text is available. Between the FDIS and publication, the content will not change, but numbering and wording may still shift. Adjusting based on a draft means doing the work twice.

Frequently asked questions about ISO 9001:2026

When will ISO 9001:2026 be released?

In September 2026. The FDIS was approved on July 9, 2026, so the text is finalized.

How long is the transition period?

Expected to be three years, until approximately September 2029. The IAF will confirm the exact date in a mandatory document around the time of publication.

Will my ISO 9001:2015 certificate remain valid?

Yes, until the end of the transition period. After that, it will expire. New 2015 certificates will stop being issued before that date.

Do I need to rebuild my management system?

No. The structure of chapters 4 through 10 remains unchanged. The adjustments are in specific clauses regarding culture, climate, opportunities, and digitalization.

What is the biggest change?

Quality culture and ethical behavior. This affects clauses 5.1.1, 7.1.4, and 7.3 and requires evidence that most organizations do not yet collect in a structured way.

Can I get certified for ISO 9001:2026 now?

Only after publication, and once your certification body has expanded its accredited scope. Expect this to be sometime in 2027.

Are there any changes for ISO 14001 and ISO 27001?

ISO 14001 is following a similar path. Alignment for integrated systems will improve, allowing you to reuse evidence more frequently.

Want to know where you stand?

A single half-day session with your QESH team is enough to review the five main changes and create an initial action plan. You will then know the extent of the impact and what can wait until 2027 or later. Schedule a no-obligation, free introductory meeting below. We will look at where you stand and what you need to address and when.

‍