ISO 9001:2015 vs. 2026: Key Changes Explained

1. Make Quality Culture and Ethical Behavior Visible

Leadership and awareness now address quality culture and ethical behavior explicitly (5.1.1 and 7.3). Your leadership team must promote them, and employees and others working under your organization's control need to understand what they mean in their work.

For Example:  Can someone on your team report a failed inspection without pressure to change the result? Will their manager support stopping a shipment when it may not meet requirements? Check how your managers respond to quality concerns and use those situations in staff briefings. Your everyday decisions should demonstrate the behavior you expect; a separate ethics policy is not prescribed.

2. Give Opportunities Their Own Consideration

Risks and opportunities receive distinct treatment in 6.1.2 and 6.1.3. Analysis and evaluation are explicit, and leadership must promote opportunity-based thinking alongside risk-based thinking. Performance evaluation and management review also distinguish the effectiveness of actions on risks from actions on opportunities.

For Example:  If you run a distribution business, you may notice that a backup supplier could reduce delivery disruption risk, while a revised ordering method may shorten lead times. Evaluate each option, decide what action is worthwhile and review the results. You can keep risks and opportunities in one existing planning tool – the separate requirements do not force you to maintain two registers or adopt a particular scoring system.

3. Follow Changes Through to Their Results

Clause 6.3 expands the planning of changes: you now need to give people the information they need, communicate the change, monitor how it works and review the results. Decide how you will judge its effectiveness as part of the plan.

For Example:  When introducing a new order-entry system, consider the instructions users need, who must be informed, how errors will be monitored and when results will be reviewed. An existing project plan can cover these points. Use it to assign responsibilities and check whether the new system has actually reduced errors.

4. Retain, Apply and Share Essential Knowledge

Clause 7.1.6 broadens the knowledge you need to manage: you now have to include the know-how needed to achieve the results of your whole quality management system, not just to make a product or deliver a service. Keeping, using and sharing that knowledge are now explicit requirements.

For Example:  Before an experienced account manager leaves, arrange a handover of the knowledge needed to interpret unusual customer requirements. Ask the replacement to work through a real order to check their understanding. Review your handovers, mentoring and lessons learned so that essential knowledge stays usable as people and responsibilities change.

5. Act on Requirements from Customers and Other Interested Parties

Customers, regulators, suppliers and others can have requirements that affect your business. Clause 4.2 now explicitly asks you to decide which of those relevant requirements your QMS will address. Management review also needs to consider changes in their relevant needs and expectations (9.3.2).

For each relevant requirement, identify the process and person responsible for meeting it. Keep applicable legal and customer obligations covered when making these decisions.

For Example:  Your customer now requires monthly delivery-performance reports. Assign responsibility for collecting and sending the information. In management review, check whether the reporting works and whether the results reveal opportunities to improve delivery reliability. You can cover this in an existing management meeting.

6. Strengthen Operational Communication and Control

Several changes affect how information moves between your customers, suppliers and staff. Existing purchasing and operational controls may already cover much of this. Check three points:

Explain how you will handle delivery disruptions.  Tell customers about relevant contingency actions (8.2.1). If a supplier failure affects an order, explain your alternative arrangements and who will provide updates.

Review and communicate changed requirements.  Keep evidence that you reviewed an amended order or specification (8.2.3.2), and send the updated requirements documentation to the people and organizations that need it (8.2.4).

Use current instructions where the work happens.  Check that staff actually use the latest operating information (8.5.1). Updating a master file is only useful if the change reaches the people doing the job.

If your business designs products or services, also review who needs to be involved in design and what information the completed design must provide (8.3.2 and 8.3.5).

For Example:  When designing a custom tray, involve the customer and relevant production staff to clarify how it will be used and made. The completed design should give production the dimensions, material specifications and acceptance criteria needed to manufacture and check it. Review your existing design process for the changed requirements before adding new steps.

7. Set an Objective for Each Internal Audit

Clause 9.2.2 now explicitly requires objectives for each audit, alongside its scope and criteria.

For Example:  Your audit of order processing could assess whether recent changes have reduced specification errors while keeping orders compliant with customer requirements. State that objective in the audit plan and ensure the report answers it. This makes the audit more useful to the people managing the process.

What Stays the Same – and What Only Needs Updating?

The process approach, customer focus and continual improvement remain central. The familiar management-system structure also remains, so an effective QMS provides a strong starting point. Our guides to Annex SL and the shared management-system structure and risk-based thinking in ISO 9001 explain foundations you can continue to build on.

The climate provisions originated in the 2024 amendment. You still need to decide whether climate change is relevant to your QMS (4.1) and consider relevant requirements from customers and other interested parties, including those related to climate (4.2). If you already addressed them properly, verify that the assessment remains relevant. These provisions were already part of ISO 9001:2015 after the amendment. See our explanation of the 2024 amendment.

For Example:  If you operate a cold storage facility, extremely hot days may affect refrigeration performance and, thus, product conformity. Check whether your existing temperature monitoring, maintenance and contingency arrangements address that risk. Build on those controls where they work.

Changed documentation wording does not mean you can discard records. Several clauses now refer to making documented information available as evidence. In practice, you still need to keep the records that demonstrate what was done and make them accessible when needed. Annex A explains this, and document-control requirements still apply.

Annex A explains the requirements; it does not add new ones. Its expanded guidance includes useful examples for technology, remote working and other operating environments. Those examples do not impose a universal AI system, business-continuity system, ethics manual or particular software package.

Continual improvement still matters. Its requirements are consolidated in clause 10.1, so update any references to the former clause 10.3 without discarding effective improvement activities.

Check terminology and clause references when updating your documents. Clause 3 now includes definitions within ISO 9001 itself. Its reference to ISO 9000, the supporting vocabulary standard, no longer specifies an edition year, so the latest edition and amendments apply. Update training glossaries and references accordingly; the addition of a definition does not itself create a new task for your business.