ISO 9001:2026 was published on September 16, replacing the 2015 edition after eleven years. This is the sixth edition, and it also folds in the 2024 climate change amendment. If you're certified, your certificate is still good and nothing needs to happen this month. But the transition dates are already fixed, and a few of them are closer than most people realize.
What Actually Changed
This is an evolution, not a rewrite. The clause numbering you know is intact, the process approach and risk-based thinking carry forward, and a healthy 2015-edition QMS is still recognizable under the new one. The foreword lists five main changes; four will matter to you.
Risk and opportunity were pulled apart. Clause 6.1 now has three subclauses instead of none: 6.1.1 determines risks and opportunities, 6.1.2 covers actions to address risks, 6.1.3 covers actions to address opportunities. Both sides carry their own requirement to determine, analyze, and evaluate. Most companies have a register listing what could go wrong, with an opportunity column nobody fills in honestly. That's now a clause an auditor can point at. Leadership picked up matching language too — top management is expected to promote risk-based and opportunity-based thinking.
Quality culture and ethical behavior became requirements. This is the change most likely to catch companies out, because you don't satisfy it with a procedure. Clause 5.1.1 i) requires top management to promote quality culture and ethical behavior, and 7.3 e) adds it to what your people have to be aware of. A note explains the standard means shared values, attitudes, practices, and actions — whether quality is something your floor actually believes in, or something they perform when the auditor shows up.
Management of change got real teeth. This one hasn't gotten much attention and should. Clause 6.3 grew from four considerations to seven. Alongside purpose, consequences, resources, and responsibilities, you now have to consider how changes get communicated, how the effectiveness of a change will be monitored and evaluated, and how the results will be reviewed. If your change control is a form somebody signs, that's a gap.
The quality policy has to reach further. Clause 5.2.1 e) now requires the policy to take the organization's context into account and support its strategic direction. In the 2015 edition that link sat up in the leadership clause. Moving it into the policy means your policy is expected to connect to where the business is actually going, not just restate a commitment to continual improvement.
Two things worth knowing about what didn't happen. Artificial intelligence appears nowhere in the standard — not as a requirement, not even as a note. And the climate change wording in 4.1 and 4.2 isn't new; it came from the 2024 amendment, so if you've kept current you already have it. The fifth foreword change is a rebuilt Annex A, informative only and adding no requirements, though more useful than the old one.
Your Transition Dates Are Fixed
Global ACI — the body formed when IAF and ILAC merged in January — published the mandatory transition requirements the same day the standard came out. A three-year clock is running.
The date most people will quote is September 30, 2029, when 2015-edition certificates stop being valid. That's the outside deadline, and you can meet it at a scheduled surveillance or recertification audit rather than a separate transition audit.
The date that matters more is March 31, 2028. From that point, new and initial accredited certifications can only be issued to the 2026 edition. If you're pursuing your first certification and you won't finish before early 2028, don't build a 2015-edition system — go straight at 2026.
In between, accreditation bodies have until March 31, 2027 to be ready and certification bodies must submit transition declarations by June 30, 2027, with decisions wrapping up that September. Your certification body can't audit you to the new edition until it clears that process, so ask them for their date rather than assuming.
If You're API Q1 or Q2 Certified
API Spec Q1, 10th edition, effective September 2024, aligns to ISO 9001:2015. API hasn't announced when or how Q1 will pick up the 2026 edition, so nothing about last week's publication changes your Q1 obligations, your monogram, or your audit schedule.
It's worth watching if you hold both, or if you're counting on the ISO 9001 registration that comes with Q1 registration. At some point you'll be running one system against two editions of the underlying standard — a scoping question to watch, not one to solve today.
What's Worth Doing in the Next Ninety Days
The expensive mistake after a revision is a documentation project. Companies hear "new standard," commission a manual rewrite, and later find the auditor never asked about most of it.
Do the cheap work first. Run a gap assessment against the clauses that actually moved — 6.1, 6.3, 5.1.1, 5.2.1, and 7.3 — not the whole standard. Get your certification body's transition date, because that sets your real timeline. Then put two of those topics on the agenda for your next internal audit and management review. That's enough to be well ahead of this without spending money you don't need to.
If you'd rather not sort out on your own which of these changes touch your system, that's worth a conversation. Qalrix works with East Texas manufacturers and service companies on exactly that — mapping a real QMS against a revised standard, deciding what has to change and what doesn't, and getting you to the transition audit without a scramble. Get in touch and we'll talk through where you stand.