ISO 9001:2026: What Changed in the New Edition and What It Means for Training

ISO 9001 was reissued in September 2026. Here is what changed — the new quality culture and ethical behaviour requirements, the restructured clauses 6 and 10, climate change in the context clauses — and what certified organisations need to do about it.

Learnsignal Education Team
27 Oct 2026
8 min read
Updated

ISO 9001 has a new edition. The sixth edition of the world’s most widely held management system standard was published on 16 September 2026, superseding ISO 9001:2015. If your quality manual, your training materials or your supplier questionnaires still say 2015, they are now out of date.

This guide sets out what actually changed, where the training and competence obligations now sit, and the one point of genuine uncertainty that organisations should confirm with their certification body rather than take from an article.

What is published, and when

ISO’s own record for the standard shows status "Published", edition 6, stage 60.60 ("International Standard published"), with a publication date of 16 September 2026. The stage history runs from the draft being approved for registration as a final draft in April 2026, through the final draft ballot closing on 10 July 2026, to publication in September.

Be careful with sources on this. ISO’s own subcommittee news page and several certification bodies’ guidance pages were written while the revision was still in progress and describe publication as forthcoming. They were accurate when written and are not now. A related change: a new edition of ISO 9000 was published in May 2026, and ISO 9001:2026 lists the harmonised terms in its own clause 3, reducing the need to reach for ISO 9000 to read the requirements.

Quality culture and ethical behaviour: the headline change

The most significant addition for anyone responsible for learning and development is a new theme running through three clauses: quality culture and ethical behaviour. It appears in clause 5.1.1 Leadership and commitment — General, it is referenced in clause 7.3 Awareness, and it connects to clause 7.1.4 Environment for the operation of processes.

That matters because awareness is an auditable requirement. A standard that previously asked workers to be aware of the quality policy, objectives and their contribution now extends that awareness to culture and ethics. Organisations that have treated clause 7.3 as a poster on a wall and a line in an induction pack will find that harder to sustain.

It also narrows the distance between ISO 9001 and the compliance and anti-bribery standards, which have carried culture and ethics requirements for longer. If you already run speak-up and ethics training, our guide to speak up and whistleblowing essentials covers material that now has a clearer home inside a quality management system.

The clause structure

The harmonised structure is retained, so the ten-clause shape is familiar. The requirement clauses are:

  • 4 Context of the organization — 4.1 Understanding the organization and its context; 4.2 Understanding the needs and expectations of interested parties; 4.3 Determining the scope of the quality management system; 4.4 Quality management system and its processes
  • 5 Leadership — 5.1 Leadership and commitment (5.1.1 General; 5.1.2 Customer focus); 5.2 Quality policy; 5.3 Roles, responsibilities and authorities
  • 6 Planning — 6.1 Actions to address risks and opportunities (6.1.1 Determining risks and opportunities; 6.1.2 Actions to address risks; 6.1.3 Actions to address opportunities); 6.2 Quality objectives and planning to achieve them; 6.3 Planning of changes
  • 7 Support — 7.1 Resources (7.1.1 General; 7.1.2 People; 7.1.3 Infrastructure; 7.1.4 Environment for the operation of processes; 7.1.5 Monitoring and measuring resources; 7.1.6 Organizational knowledge); 7.2 Competence; 7.3 Awareness; 7.4 Communication; 7.5 Documented information
  • 8 Operation — 8.1 Operational planning and control; 8.2 Requirements for products and services; 8.3 Design and development; 8.4 Control of externally provided processes, products and services; 8.5 Production and service provision; 8.6 Release of products and services; 8.7 Control of nonconforming outputs
  • 9 Performance evaluation — 9.1 Monitoring, measurement, analysis and evaluation; 9.2 Internal audit; 9.3 Management review
  • 10 Improvement — 10.1 Continual improvement; 10.2 Nonconformity and corrective action

Two structural changes are worth noting. Clause 6.1 is now split three ways rather than two, separating the determination of risks and opportunities from the actions taken on each. And clause 10 now has two sub-clauses instead of three: the former 10.1 General and 10.3 Continual improvement have been consolidated into a single 10.1 Continual improvement.

Climate change considerations, introduced across the ISO portfolio by amendment in 2024, are now integrated into clauses 4.1 and 4.2. The quality policy is expected to reflect strategy and external context more explicitly. Annex A has been significantly expanded with clause-by-clause guidance, and Annex B has been removed, its content moved into Annex A and into the subcommittee’s own references.

Competence: clause 7.2, broadly unchanged

Clause 7.2 Competence continues to require the organisation to determine the competence necessary for persons doing work under its control that affects the performance and effectiveness of the quality management system; to ensure those persons are competent on the basis of appropriate education, training or experience; to take action to acquire the necessary competence where applicable; to evaluate the effectiveness of those actions; and to retain documented information as evidence of competence.

Clause 7.1.2 People remains the requirement to provide the persons necessary for the system. Organisational knowledge at 7.1.6 gets broader treatment in the new edition, which is relevant to anyone who has ever lost a process because the person who understood it left.

The practical reading: the competence machinery has not changed, but the awareness obligation it feeds has widened. A training plan built only around technical process competence will not now cover clause 7.3.

Transition: the one thing to confirm, not assume

Certification bodies are indicating a three-year transition, with certificates to ISO 9001:2015 ceasing to be valid after 30 September 2029. That date is consistently reported but, at the time of writing, we could not trace it to a published International Accreditation Forum resolution or mandatory document — one certification body attributes the mandatory transition requirements to a different body altogether.

So treat the date as well-supported but confirm it with your own certification body before building a project plan around it. That is not a counsel of despair: a three-year transition is the normal pattern, and the practical advice is the same either way — start the gap analysis now, because the culture and ethics awareness requirement is the kind of change that needs a training cycle rather than a document update.

Sector schemes: unchanged for now

IATF 16949 for automotive and AS9100 for aerospace are built directly on the ISO 9001 framework, adding sector requirements on top. Both are unchanged at present. Sector bodies are expected to review them following publication, but those changes are not yet defined and no update dates have been published.

The 2015 precedent gives a sense of the likely rhythm: AS9100 Revision D was released in September 2016 and IATF 16949:2016 in October 2016, roughly a year after ISO 9001:2015, with organisations required to transition by September 2018.

How many organisations hold it

ISO 9001 remains by far the most widely held management system standard. As reported for the 2025 ISO Survey, with a reference date of 31 December 2025, there were 1,611,729 certificates across 2,419,972 sites, up from 1,474,118 certificates and 2,321,640 sites the year before.

One caveat on those numbers. ISO has moved the survey onto a certificate database with mandatory notification, replacing voluntary submissions from certification and accreditation bodies, and earlier surveys were acknowledged to be incomplete. Growth figures spanning that change may partly reflect better reporting rather than more certificates.

For scale against the other standards in the family: ISO 45001 for occupational health and safety stood at 599,532 certificates on the same reference date.

Frequently asked questions

Is ISO 9001:2015 still current?

No. ISO 9001:2026, the sixth edition, was published on 16 September 2026 and supersedes it.

What is the biggest change?

The introduction of quality culture and ethical behaviour, which appears in clause 5.1.1 and is referenced at clause 7.3 Awareness and clause 7.1.4.

When do we have to transition?

A three-year transition is indicated, with 2015 certificates reported to cease being valid after 30 September 2029. Confirm the date with your certification body, since we could not trace it to a published accreditation-forum document.

Did the competence requirements change?

Clause 7.2 Competence is substantively the same. What changed is the awareness requirement it supports, which now covers culture and ethics.

Do IATF 16949 and AS9100 change too?

Not yet. Both are built on ISO 9001 and are expected to be reviewed, but no sector update dates have been published.

Does ISO 9001 certification satisfy any legal requirement?

Not in itself. It is a voluntary standard. Statutory duties — on data protection, safety, reporting — continue to apply independently; see for example our GDPR compliance checklist and incident investigation documentation standards.

What to do first

Three things, in order. Read the expanded Annex A, because it now carries clause-by-clause guidance that will shape how auditors interpret the requirements. Map clause 7.3 against what your people are actually told about culture and ethics, not against what the induction pack says. And confirm your transition deadline with your certification body in writing.

Then the training. Awareness requirements are met by what people know and can say, which is a learning problem rather than a documentation one. Learnsignal builds compliance and governance training for teams, including the ethics and culture material that the new edition now puts inside scope — relevant too if you are reporting under ESG reporting frameworks that ask similar questions. To see the catalogue, explore our CPD courses or see pricing for teams.

This page was last updated:

Learnsignal Education Team

Expert Tutor at Learnsignal

Qualified professional with years of experience helping students advance their professional careers.

View all posts by Learnsignal Education Team

Subscribe to Our Newsletter

Join over 30,000+ Learnsignal students and get regular insights delivered to your inbox.

Related Articles

Insurance Broking CPD: The 15 Hours, Who It Actually Applies To, and How Ireland Differs
Industry News & Regulation

Insurance Broking CPD: The 15 Hours, Who It Actually Applies To, and How Ireland Differs

The 15-hour training requirement for insurance intermediaries is more selective than most firms think in the UK, and broader in Ireland. Here are the exact rule references, who is caught, and why commercial lines is treated differently in each country.

Learnsignal Education Team9 min read
ISO 37301 Explained: The Compliance Management Standard With a Training Clause of Its Own
Industry News & Regulation

ISO 37301 Explained: The Compliance Management Standard With a Training Clause of Its Own

ISO 37301 is the certifiable compliance management standard that replaced ISO 19600. It is the only major ISO management standard with a numbered Training sub-clause — here is what it requires and how little-adopted it still is.

Learnsignal Education Team7 min read
The Cyber Resilience Act: The Reporting Duty Is Already Live, and It Reaches Products You Shipped Years Ago
Industry News & Regulation

The Cyber Resilience Act: The Reporting Duty Is Already Live, and It Reaches Products You Shipped Years Ago

Article 14 reporting under Regulation (EU) 2024/2847 applied from 11 September 2026 and covers products already on the market, while the design requirements wait until 11 December 2027. The 24-hour clock, the CSIRT route and the support period explained.

Learnsignal Education Team8 min read
The Taxes Consolidation Act 1997: Why a Section Number on Its Own Tells You Almost Nothing
Industry News & Regulation

The Taxes Consolidation Act 1997: Why a Section Number on Its Own Tells You Almost Nothing

Number 39 of 1997 consolidated income tax, corporation tax and capital gains tax. It now runs to Parts 1 to 49 plus 26 lettered sub-Parts and 36 Schedules, is amended every year by the Finance Act, and is republished by edition.

Learnsignal Education Team8 min read

Ready to Start Your Learning Journey?

Join thousands of successful students who have achieved their qualifications with Learnsignal.

Ready to get started?

Join 100,000+ students across 130 countries. Choose a plan that fits your goals — cancel anytime.

View plans