ISO 9001:2026 Revision: What Changed and What UK Businesses Must Do

The ISO 9001:2026 revision is the first major rewrite of the world's most widely adopted quality management standard since 2015. If your UK business holds ISO 9001 certification — or plans to get certified — this affects you directly. ISO/TC 176/SC 2 announced on 10 September 2025 that "ISO/DIS 9001 [was] released for ballot", with the ballot closing 19 November 2025; the FDIS was approved in August 2026, and the sixth edition published on 16 September 2026. UKAS's technical bulletin confirms that "ISO 9001:2026 was published on 16 September 2026 and replaces ISO 9001:2015 + Amendment 1:2024 over a defined transition period." The transition deadline is now confirmed: organisations already certified to ISO 9001:2015 have until 30 September 2029 to complete the move. See the transition timeline below for the full set of dates.

This post covers exactly what changed, what stayed the same, and what you need to do — clause by clause — to stay compliant.

Background: Why ISO 9001 Is Being Revised

ISO standards follow a systematic review cycle. ISO Technical Committee 176, Sub-Committee 2 (ISO/TC 176/SC 2) — the group responsible for ISO 9001 — conducts a formal review every five years. The 2015 edition was reviewed in 2020, and the committee voted to begin a revision rather than simply reconfirm the existing text.

That decision wasn't arbitrary. Feedback gathered during the review highlighted several issues:

The 2015 edition's "risk-based thinking" concept was too vague for many organisations to implement consistently.
The standard didn't adequately address digital transformation, remote working, or data-driven decision-making — all of which have accelerated since 2020.
Clause structure needed alignment with the updated Annex SL (the harmonised structure shared by all ISO management system standards), which was itself amended in February 2024 when ISO incorporated two climate-change statements into it — the IAF/ISO joint communiqué of 22 February 2024 records that the changes "will be incorporated into the new text of the Harmonized Structure (Appendix 2 of the Annex SL in the ISO/IEC Directives Part 1 Consolidated ISO Supplement)" and that "The amendments to the standards will be published on February 23rd 2024."
Auditors and certified organisations reported confusion around documented information requirements — specifically, what needed to be documented versus what was optional.

The revision process followed ISO's standard stages: working drafts, a Committee Draft (CD), and then the Draft International Standard. ISO/TC 176/SC 2 announced on 10 September 2025 that ISO 9001 "has now reached the Enquiry Stage" and that "[t]he Draft International Standard (DIS) has been released for ballot", with the ballot closing 19 November 2025. The Final Draft International Standard (FDIS) was approved in August 2026, and the sixth edition published on 16 September 2026.

What the ISO 9001:2026 Revision Is Reported to Change

Where this section comes from. ISO 9001:2026 published on 16 September 2026, but its text is a paywalled document we have not seen and do not reproduce. The clause-level descriptions below are drawn from publicly available commentary written before publication, not from ISO's own wording, and are not a citable statement of what the standard requires.

⚠️ Treat the clause numbers below as unverified. UKAS's technical bulletin confirms that the majority of changes relate to "clarification of existing requirements, restructuring of clauses, harmonisation with Annex SL and current ISO drafting conventions". Because the clauses have been restructured, we cannot tell you whether any given requirement still sits at the number shown here. Buy the published standard from BSI and check the numbering yourself before you cite a clause to an auditor.

Clause Structure

The 2015 edition has 10 clauses, and commentary on the revision indicates the core management system clauses (4 through 10) remain, with changes to their internal organisation rather than to the overall shape.

The points below summarise what commentary reports about each clause. None of them is a statement of what ISO 9001:2026 requires — the text is paywalled and we have not seen it, and UKAS confirms the clauses have been restructured. Treat them as a list of areas to watch, and re-check every one against the published standard:

Clause 4 (Context of the organisation) — commentary reports a more explicit link between external and internal issues and specific QMS processes, where the 2015 wording left this largely implicit. Separately, and already in force, the February 2024 amendment requires you to determine whether climate change is a relevant issue.
Clause 5 (Leadership) — commentary reports expanded expectations around organisational knowledge and competence at leadership level, with a firmer line that top management cannot simply sign a quality policy and delegate the rest.
Clause 6 (Planning) — commentary reports a more integrated planning framework, with risks, objectives and changes handled together rather than as separate activities, and more explicit expectations about risk methodology.
Clause 7 (Support) — commentary reports added coverage of technological resources and information management, and of organisational knowledge (7.1.6). If reported accurately, businesses running their QMS on software tools or cloud systems will need to show how those are managed and maintained.
Clause 8 (Operation) — commentary reports tighter expectations around outsourced processes and supply chain oversight: evaluating, monitoring and controlling externally provided processes, not only products and services.
Clause 9 (Performance evaluation) — commentary reports more specific criteria for internal audit programmes and management review inputs, where the 2015 wording left more latitude.
Clause 10 (Improvement) — commentary reports a stronger link between corrective action and organisational learning: corrections feeding back into the system to prevent recurrence across related processes, not just closing the one failure.

Annex A: Expanded Supplementary Guidance

ISO 9001:2015 already carries an informative Annex A — "Clarification of new structure, terminology and concepts", running from A.1 to A.8 — so an explanatory annex is not new to ISO 9001. Public commentary on the 2026 revision describes that annex as substantially expanded. We have not seen the published text — ISO's own text is paywalled — so neither its length nor its contents have been verified against it.

An informative annex is guidance, not additional requirements. But auditors read it and certification bodies reference it. If your implementation contradicts the annex without good reason, expect questions during your audit.

Commentary on the draft indicates the expanded annex addresses risk-based thinking proportionality, documented information, the interpretation of "externally provided processes", and organisational knowledge. Treat that as an indication of direction rather than a description of the published text.

If the expansion is as described, it may reduce confusion for UK SMBs. One of the biggest complaints about ISO 9001:2015 was its vagueness — particularly around documented information.

You can compare the old and new clause structures side by side using our ISO 9001:2026 clause comparison tool.

For a clause-by-clause breakdown of exactly what moved, what was added, and what was reworded between the two editions, see the ISO 9001:2026 vs 2015 comparison.

The Transition Timeline

The transition period is not set by ISO. It is set by the international accreditation body and applied by the national accreditation bodies — in the UK, UKAS. The International Accreditation Forum (IAF) filled that role until IAF ceased operations on 1 January 2026, the same date Global Accreditation Cooperation Incorporated (Global ACI) commenced full operations. Global ACI has assumed the former roles of IAF and ILAC.

Global ACI published the transition requirements on 16 September 2026, the same day the standard itself published, as Global ACI-TECH-3-TR 2029-09-30 (M). Global ACI states that it "has established a three-year transition period" and that "Organisations already certified to ISO 9001:2015 will have until 30 September 2029 to complete their transition." Global ACI adds that this "may take place during a scheduled surveillance or recertification audit, or through a separate transition audit" — so for most certified businesses it folds into an audit you were already going to have.

This is a published requirement, not an expectation: Global ACI's requirements "are mandatory for Global ACI Multilateral Recognition Arrangement (MRA) accreditation body signatories and their accredited certification bodies operating within the applicable scope." UKAS is one of those signatories.

Here's what that means in practice. The UK dates come from UKAS's ISO 9001:2026 technical bulletin of 16 September 2026; the international dates from Global ACI.

Milestone	Date	Status
DIS released for ballot	Announced 10 September 2025; ballot closed 19 November 2025	Confirmed by ISO/TC 176/SC 2
FDIS ballot	Approved — announced 7 August 2026	Confirmed by ISO/TC 176/SC 2
Final publication	16 September 2026	Published — "ISO 9001:2026 was published on 16 September 2026" (UKAS)
UKAS ready to begin transition assessment of certification bodies	1 December 2026	"UKAS ready to begin transition assessment activity" (UKAS)
UKAS transition decisions commence	1 January 2027	"Transition decisions commence on a first-come, first-served basis" (UKAS)
Accreditation bodies ready to assess against the 2026 edition	No later than 31 March 2027	Global ACI requirement
All UKAS transition decisions completed	30 September 2027	"All UKAS transition decisions to be completed" (UKAS)
New and initial accredited certifications to the 2026 edition only	From 31 March 2028	Global ACI requirement
UK certification bodies stop accepting new applications against the 2015 edition	16 March 2028	"CABs to stop accepting new applications against the previous version of the standard" (UKAS)
Deadline for all certificates to reference the 2026 edition	30 September 2029	Confirmed — Global ACI-TECH-3-TR 2029-09-30 (M)

The practical read for a certified SMB: your certificate is safe until 30 September 2029. If you want to certify for the first time against the familiar 2015 edition, work back from 16 March 2028 — that is the date UKAS requires UK certification bodies to stop accepting new applications against the 2015 edition, so it is a cut-off on your application, not on your certificate. (Internationally, Global ACI's equivalent rule bites a fortnight later: "From 31 March 2028, new and initial accredited certifications may only be issued to ISO 9001:2026." The UK date is the one that governs a UK application.)

UKAS published its UK transition guidance the same day the standard did. It did the same for the ISO 27001:2022 transition: UKAS's technical bulletin "Transition arrangements for ISO/IEC 27001:2022" was issued "to update Certification Bodies and stakeholders on the UKAS assessment process and overall timelines for assessment against the requirements of the revised certification standard", and set out a milestone table running from "25 October 2022 Publication of ISO/IEC 27001:2022" to "31 October 2025 All CB transitions of clients completed".

BSI (the British Standards Institution — bsigroup.com) records the UK national adoption, BS EN ISO 9001:2026, as published on 30 September 2026 on its standard document page for BS EN ISO 9001, two weeks after the ISO publication date.

What Happens If You Miss the Deadline, Once One Is Set?

No transition deadline has been published for ISO 9001:2026, so at the time of writing there is nothing to miss. On previous transitions, once the deadline passed the outgoing certificate ceased to be valid — it was not "downgraded" or extended. If you need ISO 9001 for contract requirements — accredited certification is commonly specified in UK public sector tender requirements — losing certification means losing eligibility.

ISO 9001:2026 Changes: Impact on Currently Certified UK Businesses

If you already hold ISO 9001:2015 certification, you need a transition plan. Here's the practical breakdown.

1. Conduct a Gap Analysis

Map your current QMS documentation against the 2026 clause structure. Identify where your existing processes already meet the new requirements and where gaps exist. Most organisations will find that 60–70% of their existing system carries over — the core principles of quality management haven't changed. But the structural changes mean your documentation almost certainly needs reorganising, even where the underlying requirements are similar.

A structured gap analysis is the best starting point — work through each clause systematically and score your compliance.

2. Update Documentation

On what commentary reports, the areas most likely to need documentation work are:

Context of the organisation (Clause 4): documented links between your context analysis and your QMS processes.
Support — technological resources (Clause 7): how you manage the technology your QMS runs on, if you do not document that today.
Performance evaluation (Clause 9): more specific content in internal audit programmes and management review records.

Confirm each against the published standard before you rewrite anything — this list is a planning prompt, not a requirements list.

3. Train Your Team

Anyone involved in maintaining the QMS — quality managers, process owners, internal auditors — needs to understand the new structure. This doesn't require expensive courses. BSI, UKAS-accredited training providers, and professional bodies like the Chartered Quality Institute (CQI) will all offer transition training. Budget for at least one person to attend formal transition training; that person can then cascade the knowledge internally.

4. Plan Your Transition Audit

Contact your certification body early. During the ISO 27001:2022 transition, popular audit slots filled up 6–12 months in advance, particularly with UKAS-accredited bodies. You can transition during a surveillance audit or a recertification audit, depending on your certification cycle.

Most certification bodies won't charge significantly more for a transition audit than a standard surveillance or recertification audit — but check. Some add a surcharge for the additional time needed to assess against the new standard. There is a fuller breakdown of the transition cost, including the parts of the bill that are not the audit fee.

ISO 9001:2026 Changes: Impact on Businesses Pursuing First-Time Certification

If you haven't started the certification journey yet, the revision actually works in your favour. (If you're weighing up whether to do it yourself or hire a consultant, the answer depends on your team's experience with management systems.)

Certify Directly to the 2026 Edition

The standard has published. Once certification bodies begin offering accredited assessments against it — UKAS transition decisions commence 1 January 2027 and are all to be completed by 30 September 2027 — you can certify directly to ISO 9001:2026. This means:

No transition audit later.
Your QMS is built to the current standard from day one.
You avoid the cost and disruption of re-mapping documentation during a transition.

Timing Considerations

If you're planning to start certification now, you have two options:

Start now against ISO 9001:2015 and transition later. This makes sense if you need certification urgently — for example, to meet a tender deadline. In the UK this route stays open until 16 March 2028, when UKAS requires certification bodies to "stop accepting new applications against the previous version of the standard".
Certify directly against the 2026 edition. This makes sense if you don't have an immediate deadline and want to avoid doing the work twice — but note that your certification body cannot issue an accredited 2026 certificate until UKAS has granted it transition, and UKAS transition decisions only commence on 1 January 2027.

There is a timing trap in option 2. UKAS is explicit: "Until UKAS has made an accreditation decision to transition, certification issued against ISO 9001:2026 must not be represented as accredited certification." A body offering you a 2026 certificate before it has been granted transition is offering you an unaccredited one, which will not satisfy a procurement requirement.

If you're weighing the costs of either approach, our ISO 9001 cost estimator can help you model the numbers.

What Stayed the Same

Commentary is consistent that the revision is an evolution rather than a replacement. The core principles reported to carry over:

Process approach. You still need to manage your organisation as a system of interrelated processes.
Customer focus. Clause 5 still requires top management to ensure customer requirements are determined and met.
PDCA cycle. Plan-Do-Check-Act remains the underlying framework.
Risk-based thinking. This was introduced in 2015 and remains central; commentary reports better-defined expectations in the 2026 edition.
Continual improvement. Still a fundamental requirement, with commentary reporting a stronger emphasis on organisational learning.

If your 2015 QMS is well-implemented (not just a set of documents gathering dust), you're in a stronger starting position than you might think.

UK-Specific Considerations

Public Sector Procurement

UK government procurement regularly references ISO 9001: contracting authorities commonly specify accredited quality management system certification in their tender requirements. If you supply to the public sector, maintaining valid certification through the transition is non-negotiable.

Check gov.uk/government/collections/procurement-policy-notes for current procurement policy notes relevant to your sector.

Regulatory Overlap

If you operate in a regulated sector — construction (Building Safety Act 2022), medical devices (UK MDR 2002, as amended), food (Food Safety Act 1990) — your QMS likely serves double duty. Changes to ISO 9001 clause structure may require corresponding updates to how you demonstrate regulatory compliance through your management system.

Brexit and Standards Adoption

The UK continues to adopt ISO standards through BSI. There's no divergence between the ISO publication and the UK adoption of ISO 9001. BS EN ISO 9001:2026 will be identical in requirements to ISO 9001:2026. The "EN" prefix confirms the European standard adoption route, which the UK continues to follow for management system standards.

Practical Next Steps

Here's a concrete timeline for UK businesses:

Now (the standard has published)

Buy the published standard from the BSI Shop. This is the point at which clause numbering is final, and UKAS confirms the clauses have been restructured — so a gap analysis run against pre-publication commentary needs re-checking against the real text.
Run a gap analysis against your current QMS.
Identify your biggest gaps and start planning how to address them.
Ask your certification body when it expects to be granted UKAS transition. It cannot audit you to the 2026 edition under accreditation until it is.
If you want this sequenced week by week, there is a separate guide to the first 90 days after publication.

Late 2026 / 2027

Finalise your documentation updates against the published text.
UKAS begins transition assessment of certification bodies on 1 December 2026 and transition decisions commence 1 January 2027, on a first-come, first-served basis. All UKAS transition decisions are to be completed by 30 September 2027.
Contact your certification body to schedule your transition audit once it has been granted transition.
Conduct at least one internal audit against the new standard before your certification body arrives.

2027–2029

Complete your transition audit. Global ACI notes this "may take place during a scheduled surveillance or recertification audit, or through a separate transition audit" — so align it with an audit already in your programme rather than buying an extra one.
Address any nonconformities identified during the transition.
Update your certificate.

The deadline: 30 September 2029

Global ACI-TECH-3-TR 2029-09-30 (M) sets it: organisations certified to ISO 9001:2015 "will have until 30 September 2029 to complete their transition." UKAS's own timeline matches — "30 September 2029 CABs to transition all certified customers to the revised standard". Do not leave it to the last surveillance visit; transition periods create bottlenecks.

Key Takeaways

ISO 9001:2026 published on 16 September 2026, and the transition deadline is confirmed: 30 September 2029. It was set the same day by Global ACI — the body that took over the roles of IAF and ILAC when IAF ceased operations on 1 January 2026 — in Global ACI-TECH-3-TR 2029-09-30 (M), and is applied in the UK by UKAS. This is a three-year period, mandatory for MRA signatories, not an inference from previous transitions.
The clause structure has been restructured — UKAS names "restructuring of clauses" among the majority of changes. We have not seen the published text (it is paywalled), so we cannot tell you where any specific requirement now sits. Buy the standard and map it yourself; your documentation structure will need updating.
Annex A is reported to be expanded in the 2026 edition. ISO 9001:2015 already has an informative Annex A, so this is a change of scale rather than something new, and how much it helps cannot be judged from outside the paywalled text.
If you're already certified, start your gap analysis now. Use the ISO 9001:2026 clause comparison tool to map what's changed.
If you're pursuing first-time certification, consider certifying directly against the 2026 edition — but check that your certification body has been granted UKAS transition first, or the certificate will not be accredited. If you want the 2015 edition instead, UK certification bodies stop accepting new applications against it on 16 March 2028.
Contact your certification body early to secure audit slots. Transition periods create bottlenecks.
Don't panic. The core principles of quality management haven't changed. This is an update, not a reinvention.

This article is for general informational purposes only and does not constitute legal, regulatory, or professional compliance advice. ISO certification requirements vary by scope, sector, and certification body. Always verify requirements with your UKAS-accredited certification body or a qualified consultant before making compliance decisions.