ISO 9001:2026 Transition: What Changes, Clause by Clause

Why has ISO published a new edition of ISO 9001?

To clarify the standard and align it with the common framework of ISO management system standards, not to reinvent it. ISO/TC 176/SC 2, the committee that writes ISO 9001, announced that the standard was published on 16 September 2026. According to the committee, the revised edition builds on the established ISO 9001 framework and brings clearer wording, a stronger focus on leadership, quality culture and accountability, greater clarity on risks and opportunities, and closer alignment with other management system standards.

The Global ACI transition document gives the technical reason: alignment with Annex SL of the ISO Directives and with resolution 16/2025 of the ISO Technical Management Board (TMB). Annex SL sets the harmonized structure: the same clauses, the same core terms and the same shared text in every ISO management system standard. ISO 14001:2026, published in April 2026, follows the same logic, which makes integrated systems easier to run.

Global ACI (Global Accreditation Cooperation Incorporated) has taken over the work of the International Accreditation Forum (IAF) on the international recognition of accreditation. Its transition document is mandatory for the accreditation bodies that have signed its multilateral recognition arrangement and for the certification bodies they accredit. In practice, this is the document that sets what your auditor will check.

The size of the certified population explains the length of the transition. Global ACI counts more than one million accredited ISO 9001 certificates, and several sector schemes build on the standard: IATF 16949 for automotive, the AS/EN/JISQ/IA 91XX family for aviation, space and defence, TL 9000 for telecommunications, ISO 22163 for railways and ISO 29001 for the petroleum, petrochemical and natural gas industries. Certification bodies will have to invest considerable audit time and administrative effort to move their clients across: hence a three-year transition, to 30 September 2029. An automotive supplier in Tangier or an aerospace subcontractor in Casablanca certified to one of these schemes is therefore affected, at least indirectly. For automotive, the IATF plans a second edition of IATF 16949 around mid-2027, with an end of transition aligned with that of ISO 9001 (communiqué SC 2026-005 of July 2026, indicative dates). For the other schemes, follow their owners’ announcements.

What changes in ISO 9001:2026, clause by clause?

Few clauses, but clauses that commit top management. Global ACI describes the overall changes as minimal and expects organisations to find them largely intuitive, practicable and, depending on their context and objectives, attainable with reasonable effort. It adds two caveats: impact and risk differ from one organisation to another, and it is the certified organisation’s responsibility to determine the changes to its context and management system. Its list is also presented as non-exhaustive.

The wording in this table follows the Global ACI document, which states that its list is not exhaustive, not the text of the standard itself. The text of the standard, sold by ISO, prevails.

None of the listed changes creates a new process. They specify what top management promotes, how risks, opportunities and changes are handled, and what the management review examines. The ISO committee also stresses that Annex A now explains key terms and the intent of the requirements: read it first, so you interpret a clause without over-interpreting it.

What do quality culture and ethical behaviour mean for top management?

This is the change that demands the most work, because no document settles it. Clause 5.1.1 adds the promotion of quality culture and ethical behaviour to top management’s commitments. The new Note 2, quoted by Global ACI, gives the key: an organisation’s quality culture and ethical behaviour are reflected in its shared values, attitudes and established practices. Clause 7.3 adds that people must be made aware of that culture and behaviour.

Seen from a Moroccan shop floor, we draw three conclusions.

• Established practices count more than the charter. The auditor will judge quality culture by what happens when a doubtful batch leaves at the end of a shift, when an export order is late, when an operator reports a defect. A poster of values at the entrance proves nothing if the team leader releases the batch so as not to miss the truck.
• Ethical behaviour shapes day-to-day quality. Inspection results recorded as they were measured, certificates of analysis never touched up, complaints logged even when the customer made them by phone, suppliers selected on written criteria.
• Promoting means acting. Shop-floor visits, visible decisions in favour of quality, reports of problems thanked rather than punished. These are the actions the auditor will look for when interviewing operators and supervisors.

The standard, as Global ACI summarises it, prescribes no method. We recommend simple, verifiable evidence: a message from top management relayed by every manager, recorded awareness sessions, run in Arabic and French for operators in Moroccan plants, a reporting channel that protects whoever raises a problem, and a few behaviour indicators, such as the share of nonconformities detected internally before the customer finds them. Food plants certified to a GFSI-recognised scheme already work on food safety culture: the two approaches can share tools, surveys and shop-floor observations without merging into one.

Risks, opportunities, changes: what does planning change?

It becomes easier to read and more demanding on follow-up. Clause 6.1 is now split in three: determining risks and opportunities (6.1.1), actions to address risks (6.1.2) and actions to address opportunities (6.1.3).

Many systems keep a single register in which opportunities are a forgotten column, or simply the reverse of the risks: “risk of losing a customer” becomes “opportunity to keep the customer”. The new structure pushes you to treat opportunities in their own right: a new export market, a more automated line, a customer asking for an additional certification, a local supplier who shortens lead times. Each one deserves a decision, an owner and follow-up.

Clause 6.3 changes its logic. Planning a change is no longer enough: you must ensure that it is implemented effectively to achieve the intended results, and plan how its effectiveness will be monitored and evaluated (e), how it will be communicated (f) and how its results will be reviewed (g). Replacing a machine, moving to new business software, outsourcing an operation or reorganising a department must now have, from day one, a success criterion, a communication plan and a review date.

For a site that is also working towards ISO 14001:2026, this is the right moment to build a single change management process, examined from every angle: see our page on the integrated QHSE management system.

Management review, policy, documented information: what adjustments?

Adjustments of form, with consequences of substance.

Management review. In clause 9.3.2, the inputs are no longer items the review “takes into consideration”: the review “shall include” each of them. Minutes that skip a heading become an easy nonconformity to raise. The new item c) adds changes in the needs and expectations of relevant interested parties. For a Moroccan exporter, these may be new requirements from a European buyer, an authority changing its controls, a bank asking for ESG data, or the expectations of employees.

Quality policy. The new item e) of clause 5.2.1 calls for a policy that takes into account the context of the organisation and supports its strategic direction. A policy signed ten years ago and never reread, while the company has changed markets or size, will no longer pass.

Documented information and vocabulary. Global ACI reports a new phrase for documented information and a clarification of the wording “documented information shall be available”, without detailing their content. In practice, use the transition to check that every required document is available where it is used, in the language of the people who use it. The new quality-specific terms, and ISO 9000 kept as the vocabulary reference, also mean your glossary needs a fresh read.

Climate change: a new requirement or catching up?

Catching up, for most systems. Climate change entered ISO 9001 before the 2026 edition, through an amendment published on 23 February 2024. The joint IAF–ISO communiqué of 22 February 2024 gives the text: in clause 4.1, the organisation shall determine whether climate change is a relevant issue; in clause 4.2, a note states that relevant interested parties can have requirements related to climate change. The same communiqué says these two statements are incorporated into the harmonized structure of Annex SL and included in standards under revision.

Global ACI starts the transition from ISO 9001:2015 including Amendment 1:2024. Climate change therefore does not appear in its list of changes: it is already part of the starting point. The practical consequence: a site that has never addressed the question under clauses 4.1 and 4.2 does not have a new requirement to adopt, but an existing gap to close before the transition audit.

The communiqué sets out the intent: consider climate change in the context of the effectiveness of the management system, without turning a quality audit into a climate audit, since climate affects each management system differently. For a quality system in Morocco, the question becomes concrete: water availability for a process, summer heat and the storage of sensitive materials, logistics disruptions during extreme weather, European customers asking for carbon data. The answer may be “relevant” or “not relevant”; it must be reasoned, dated and reviewed. The carbon side belongs to our ESG and CSR practice.

What does this mean for a certified company in Morocco?

A targeted project, not a rebuild. According to Global ACI, the transition audit reviews at a minimum the changed requirements, changes in your context and the need for any other changes to your system. It can be held at a surveillance audit, a recertification audit or a special audit, and must be completed, certificate issuance included, before 30 September 2029.

Three situations come up often:

1. A site certified to ISO 9001 only. The transition fits into the existing certification cycle. The detailed dates are in our article on the ISO 9001:2026 transition deadline of 30 September 2029, and the order of work in our 8-step ISO 9001:2026 transition plan.
2. A site certified to ISO 9001 and ISO 14001. The two transitions can be combined, working to the earlier deadline: 30 April 2029 for ISO 14001:2026.
3. A site starting out. It goes straight for the 2026 edition, with processes that build in quality culture, opportunities and change management from the start: see our page on ISO 9001 certification.

What you can check right now:

• The official text of ISO 9001:2026 has been bought and is available to the quality manager.
  
• The context analysis explicitly addresses climate change, relevant or not, with a justification.
  
• The quality policy reflects the company’s current context and strategic direction.
  
• The register separates actions on risks from actions on opportunities.
  
• Every significant change has an effectiveness criterion, a communication plan and a review date.
  
• The awareness plan covers quality culture and ethical behaviour.
  
• The management review agenda covers every input, including changes in interested parties’ expectations.
  
• Internal auditors have been trained on the changed clauses.
  
• The certification body has confirmed its own transition and the format of your audit.
  

ACG, itself ISO 9001 certified for its consulting and training activities, is on the same timeline as its clients. To estimate the effort, see also what the ISO 9001:2026 transition audit costs in internal time and audit days and our case study of a packaging manufacturer.