The first major revision of ISO 9001 since 2015 is on its way. The Final Draft International Standard is out and publication is expected in September 2026, opening a three-year transition window. Here is the plain-English view of what's likely to change — and what to start doing now so you're not in the 2029 rush.
ISO 9001 has been remarkably stable. The 2015 edition introduced the Annex SL high-level structure, risk-based thinking and a stronger leadership role, and it has served as the world's most widely-held management-system certification ever since. That stability is about to change — in a measured, evolution-not-revolution way. The standard is being revised, the Final Draft International Standard (FDIS) has been issued, and the new edition — ISO 9001:2026 — is expected to be published in September 2026.
If your organisation is certified, there's no need to panic and nothing to change today. But there is a good reason to read ahead: a published standard triggers a fixed transition window (expected to be the usual three years), and the organisations that glide through transitions are the ones that start gap-planning early rather than scrambling in the final months. This guide sets out the likely direction of the changes, the timeline, and a practical way to get ahead.
Until ISO formally publishes the standard, the detail can still shift at the margins — this guide describes the well-signalled direction of travel from the draft, not a final clause-by-clause text. Treat it as preparation, and confirm against the published edition when it lands.
The revision keeps the familiar Annex SL structure (clauses 4 to 10) and the core requirements you already know. The shifts are about emphasis and context rather than a structural rebuild. The themes that have been most consistently signalled:
Expect a sharper focus on quality culture — leadership not just being accountable on paper, but visibly setting tone, behaviours and ethics throughout the organisation. This builds on the leadership emphasis 2015 introduced and pushes it further into how quality actually lives day to day.
An explicit nod to ethical conduct and values as part of the management system is anticipated — recognising that quality and integrity are linked, and that customers and interested parties increasingly expect both.
Following the 2024 amendment that already added climate change to the "context of the organisation" clauses (4.1 and 4.2) across the ISO management-system standards, the 2026 revision is expected to weave climate and broader sustainability considerations more explicitly into the standard — so that environmental and social context is a routine part of how you understand your organisation, not an afterthought.
The revision is expected to acknowledge the reality of digital working — digital information, data integrity, and emerging technologies including AI — as part of the operating context organisations must consider. This is direction-setting rather than a detailed AI control set (that's the job of ISO 42001), but it signals that a modern QMS lives in a digital environment.
| Stage | When (expected) | What it means for you |
|---|---|---|
| FDIS issued | 2026 (now) | The near-final text is known; direction is settled. Good time to read ahead. |
| ISO 9001:2026 published | September 2026 | The clock starts. The official transition window opens. |
| Transition window | ~3 years (to ~2029) | Existing certificates remain valid; you transition at a surveillance or recertification audit within the window. |
| Old edition withdrawn | End of the window (~2029) | Certificates to the 2015 edition cease to be valid after this date. |
Three years sounds generous, and it is — but transitions cluster at the end. Certification bodies get busy, auditor availability tightens, and a late start turns a manageable update into a deadline. The smart play is to fold the transition into your normal audit and management-review rhythm well before the final year.
You don't need the final text to start preparing. Here's a sensible sequence you can begin this quarter.
Get familiar with the FDIS direction and give your leadership team a short brief. Because culture, ethics and leadership feature prominently, top-management awareness is itself part of being ready.
Revisit your context-of-the-organisation and interested-parties analysis and make climate, sustainability and digital/data context explicit. If you adopted the 2024 climate amendment, you're part-way there.
Map your current QMS against the anticipated emphasis areas — culture, ethics, climate context, digital — and note where you already have evidence and where you'd need to build it. Keep it proportionate; this is a heat-map, not a rebuild.
Add "ISO 9001:2026 readiness" as a standing management-review input. That keeps it visible, owned and tracked through your existing cadence rather than as a separate project.
Ask how and when they'll handle the transition (which surveillance or recertification audit), so you can plan the formal step rather than react to it.
Here's what most transition guides won't tell you, and where UK SMEs quietly lose the most time: ISO 9001 rarely stands alone. Most UK businesses are juggling several overlapping regimes at once, and every one of them asks for the same underlying evidence in a slightly different shape.
CHAS / SSIP (health & safety pre-qualification for tenders) · CQC (if you deliver regulated care — its assessment framework leans heavily on the same quality evidence) · Cyber Essentials (increasingly expected for public-sector and supply-chain work) · and the incoming Cyber Security and Resilience Bill, set to widen UK cyber-resilience duties for organisations in and supplying critical services. (The Bill is still progressing through Parliament — scope and timing aren't final, so treat it as a direction to watch.)
Each of these wants overlapping evidence: risk assessments, document control, competence and training records, supplier management, incident and corrective-action logs, management review. Run them separately and you produce the same evidence several times, store it in several places, and rediscover the same gaps every audit season.
Because ISO 9001:2026 keeps the Annex SL high-level structure, your 9001 clauses can act as the backbone. Map CHAS, CQC, Cyber Essentials and the other schemes onto that backbone once, and a single piece of evidence — your supplier-approval process, say, or your corrective-action log — can serve several regimes at the same time. One internal audit programme. One management review. One source of truth.
The reason transitions hurt is rarely the new requirements themselves — it's reassembling evidence against a moving target under time pressure. PICMS is built to take that pain out. The ISO Manual and AI gap analysis map your existing documents and records against each clause, so when the 2026 emphasis areas firm up you can see at a glance what you already satisfy and where the genuine gaps are — culture and leadership evidence, climate and sustainability context, digital and data considerations. Your context analysis, management reviews, objectives and audit trail already live in one place, so adding the new emphasis is an update, not an archaeology project.
To be plain about what software does and doesn't do: PICMS doesn't certify you to ISO 9001:2026 — your certification body does, against the published standard — and this article is general guidance, not certification advice. What it does is keep your management system's evidence complete, current and clause-mapped, so transitioning is a matter of confirming and filling small gaps rather than rebuilding the system under deadline.
ISO 9001:2026 is at the Final Draft International Standard (FDIS) stage — the last step before publication. Publication is expected around September 2026, though ISO has not formally confirmed the date, so treat it as indicative until the standard is issued.
The transition window is expected to run for the usual three years from publication — so roughly September 2026 to around 2029. Your existing ISO 9001:2015 certificate stays valid during that window; you move to the new edition at a surveillance or recertification audit before it closes.
You don't start from scratch — you transition. Your current certification is updated to the 2026 edition through a transition audit, normally aligned with your existing surveillance or recertification cycle. You need to complete it before the transition window closes to keep continuous certification.
The Annex SL high-level structure and the core requirements you already know are retained. The shifts are about emphasis: a stronger focus on quality culture, ethics and leadership; more explicit climate and sustainability context (building on the 2024 amendment to clauses 4.1 and 4.2); and acknowledgement of digital, data and AI in your operating context. Confirm the exact wording against the published standard when it lands.
Start a light-touch preparation now, but don't rewrite your manual until the standard is published. Close the 2024 climate amendment, brief your leadership, run a proportionate gap assessment against the expected changes, and plan the transition into your normal audit rhythm. Transitions cluster at the end of the window, when auditor availability tightens — an early start turns a deadline into a routine update.
PICMS maps your documents and records against every ISO 9001 clause, so you can see what you already satisfy and where the real gaps are — and fold the 2026 transition into your normal audit rhythm.