ISO 9001:2026
The New Quality Management Standard and What UK Organisations Should Do Now
Executive Summary
ISO 9001 has been the world’s most widely recognised quality management system standard for decades. Its 2026 revision represents the first full edition change since ISO 9001:2015 and comes at a time when organisations face increasingly complex customer expectations, supply-chain disruption, digital transformation, climate-related risks and demands for stronger organisational governance.
The important message for certified organisations is that ISO 9001:2026 is evolutionary rather than revolutionary. The familiar management-system architecture remains. The process approach, risk-based thinking, continual improvement, Plan-Do-Check-Act methodology and ten-clause structure remain central. However, the revised standard gives greater visibility to areas that were previously implicit or emerging, including quality culture, ethical behaviour, opportunities, climate-related context and more effective use of customer and performance information.
ISO currently lists ISO 9001:2026 as the new edition of the standard and states that organisations certified to the 2015 edition will need to transition within the timeframe established for the certification transition. The exact internationally applicable transition arrangements should be confirmed with the certification body rather than relying on informal dates circulating online.
For UK organisations, the most effective response is therefore not to rebuild an entire QMS. It is to understand what has changed, test the effectiveness of the existing system against those changes, and integrate the transition into the organisation’s normal management-system cycle.
Why ISO 9001 Is Changing
The business environment in which ISO 9001:2015 was developed is very different from the environment in which organisations operate today.
Quality is no longer viewed solely as inspection of finished products. Modern quality management increasingly involves:
- resilience of critical supply chains;
- digital and automated processes;
- changing customer communication channels;
- information integrity;
- organisational knowledge;
- climate-related disruption;
- ethical conduct;
- leadership culture;
- rapidly changing products and services.
ISO 9001:2026 reflects that reality without abandoning the management-system principles that made the 2015 version successful.
ISO’s own material confirms that the revision is intended to provide an updated framework while maintaining the value and familiarity of the existing standard.
What Is Staying the Same?
One of the most important messages for existing certificate holders is what has not changed.
The 2026 edition retains the familiar ten-clause structure and continues to rely on the process approach and continual improvement principles that organisations have built into their QMS since 2015.
The core concepts of:
- organisational context;
- interested parties;
- risk and opportunity;
- leadership accountability;
- organisational knowledge;
- process management;
- internal auditing;
- management review;
- corrective action;
- continual improvement;
- remain fundamental.
PJR’s analysis of the final revision similarly describes the changes as limited rather than representing a wholesale rewrite of the standard.
This distinction matters commercially. A mature ISO 9001:2015 system should provide a strong foundation for transition.
Quality Culture Moves to the Foreground
Perhaps the most important conceptual development is the increased visibility of quality culture.
Historically, organisations could have a technically compliant QMS without necessarily demonstrating that quality was deeply embedded into everyday decision-making.
The 2026 revision places greater emphasis on the behaviour of the organisation and its leadership.
That raises a different question during an audit.
It is no longer sufficient to demonstrate:
“We have a quality policy.”
The organisation should be able to demonstrate that leadership decisions, employee behaviour, objectives, process controls and improvement activities actually support the organisation’s quality commitments.
What could this look like in practice?
A mature organisation might be able to demonstrate:
Leadership
Senior management actively discusses quality performance rather than delegating quality entirely to a quality manager.
Decision-making
Commercial decisions consider consequences for product or service quality rather than treating quality as something to be corrected later.
Employee involvement
Employees understand how their work affects quality outcomes and are encouraged to report problems.
Performance
Quality indicators are reviewed and used to make decisions rather than generated simply because the procedure requires them.
Learning
Recurring problems lead to changes in processes, training, controls or resources.
This does not mean that organisations need a new “quality culture programme”. In many cases, the evidence already exists inside the business; the transition is about making that culture visible, consistent and demonstrable.
Climate Change Is Not a Separate Environmental Certification Requirement
The inclusion of climate considerations can easily be misunderstood.
ISO’s 2024 climate amendment already introduced an explicit requirement for organisations to consider whether climate change is a relevant issue for their management system, including within organisational context and interested-party considerations.
PJR notes that this language is carried forward into the 2026 revision.
The important point is that ISO 9001 does not require every organisation to declare climate change a significant risk.
Instead, the organisation must consider it and be able to demonstrate an appropriate conclusion.
For example, a UK manufacturer might determine that climate-related issues affect:
- availability of raw materials;
- energy costs;
- transport reliability;
- supplier continuity;
- temperature-sensitive processes;
- customer requirements.
A professional-services organisation may reach a different conclusion.
The audit question is therefore not simply:
“Do you have a climate-change policy?”
It is closer to:
“Have you considered climate change within your organisational context, and does your QMS appropriately reflect the resulting risks and opportunities?”
Risks and Opportunities Need Better Separation
Risk-based thinking has been part of ISO 9001 since 2015.
The 2026 revision makes the distinction between risk and opportunity clearer.
That is strategically important because many organisations have historically treated risk management as a catalogue of things that could go wrong.
Opportunity management is different.
Examples could include:
- automation of a manual process;
- developing a new service;
- diversifying suppliers;
- entering a new market;
- improving customer communication;
- redesigning a product;
- using data to identify process trends.
A mature QMS should therefore demonstrate two directions of thinking:
What could prevent us from achieving the intended result?
and
What could improve our ability to achieve it?
This is particularly relevant to UK organisations undergoing digital transformation or operating within volatile supply chains.
Customer Information Is Becoming More Dynamic
Customer satisfaction has always been a central ISO 9001 theme.
The modern customer relationship, however, extends far beyond traditional surveys and complaints.
Customer information may now come from:
- social media;
- online reviews;
- customer portals;
- service tickets;
- CRM systems;
- digital analytics;
- complaint trends;
- returns data;
- contract performance indicators.
PJR’s review of the revision specifically identifies changes and clarifications relating to customer communication and customer-satisfaction information.
Organisations should therefore review whether their current approach to monitoring customer perception captures the channels through which customers actually communicate.
Documented Information: Less About Paper, More About Evidence
A common misunderstanding of ISO 9001 is that certification requires excessive paperwork.
The standard has never required a procedure for every process.
The 2026 revision retains the principle that documented information should exist where necessary to support effective operation and evidence conformity.
The better question is therefore:
“What evidence does this organisation need to control its processes and demonstrate that they work?”
That evidence may be digital.
Examples include:
- ERP records;
- electronic approvals;
- workflow systems;
- training databases;
- inspection records;
- dashboards;
- CRM data;
- digital maintenance records;
- electronic supplier evaluations.
A modern QMS should be designed around business processes rather than around folders of documents.
What Will an Auditor Look For?
A transition audit should not be approached as a document-matching exercise.
Auditors are likely to consider whether the revised requirements are genuinely embedded into the management system.
Organisations should be prepared to demonstrate evidence across at least five areas.
Context
Has the organisation reviewed its internal and external issues?
Has climate change been considered where relevant?
Leadership
Does senior management actively promote quality?
Is quality reflected in organisational decision-making?
Risk and Opportunity
Are risks and opportunities identified meaningfully?
Are actions proportional and effective?
Customer
Does customer feedback represent the actual ways customers interact with the organisation?
Improvement
Does the organisation learn from failures and performance data?
The evidence should connect.
For example:
Customer complaint → analysis → root cause → corrective action → process change → effectiveness verification
is significantly stronger than:
Customer complaint → form completed → complaint closed.
A Practical 90-Day Transition Programme
Organisations do not need to begin by rewriting every procedure.
A more effective transition sequence is:
Month 1 – Understand
Identify the differences between ISO 9001:2015 and ISO 9001:2026.
Review:
- context;
- interested parties;
- climate considerations;
- leadership;
- quality culture;
- risks and opportunities;
- customer information;
- documented information;
- performance evaluation.
Month 2 – Test
Conduct an internal gap assessment.
Interview senior management.
Sample operational processes.
Review objective evidence.
Do not rely solely on a clause-by-clause document comparison.
Month 3 – Integrate
Update relevant documentation.
Revise management-review inputs where necessary.
Update internal audit criteria.
Brief employees.
Run an internal audit against the new requirements.
Then address gaps before the certification transition audit.
Should an Organisation Wait Before Certifying?
For organisations that do not currently hold ISO 9001 certification, waiting solely because the new edition exists may not be the best business decision.
PJR’s current position is that organisations should not delay certification simply in anticipation of the revision. A well-designed ISO 9001:2015 system can provide the foundation for transition.
For existing certificate holders, the more important question is the timing of the next surveillance or recertification audit and the applicable transition arrangements.
The organisation should discuss the transition strategy directly with its certification body.
The Business Opportunity Behind the Transition
Certification should not be treated purely as a compliance exercise.
The transition offers organisations a useful opportunity to ask:
- Are our processes actually effective?
- Are our performance measures meaningful?
- Does senior management own quality?
- Do our risk assessments influence decisions?
- Do we learn from failures?
- Do we understand customer expectations?
- Is our QMS supporting growth?
This is ultimately the purpose of a management system.
A certificate should be evidence of an effective system, not a substitute for one.
Working With PJR Registrars
PJR has published detailed information on the ISO 9001:2026 transition and has positioned the revision as an evolution of the existing management-system model rather than a complete rebuild. PJR also maintains accredited certification capabilities across a broad range of management-system standards.
For UK organisations, the certification process should begin with understanding the organisation’s scope, processes and certification requirements, followed by the appropriate audit programme.
Where appropriate under the applicable certification rules, organisations can also consider a readiness or pre-assessment approach before the formal certification audit.
Conclusion
ISO 9001:2026 is not a reason to panic.
It is a reason to take a more mature view of quality.
The organisations that transition most successfully will not be those that produce the largest quantity of new documents. They will be those that can demonstrate that quality is embedded into leadership, decisions, processes, customer relationships and continual improvement.
The objective is not simply to transition the certificate. It is to strengthen the management system behind it.
PJR Registrars
Independent certification for organisations seeking recognised management-system assurance.
For current transition dates, accreditation status and certification arrangements, organisations should confirm the applicable requirements directly with PJR Registrars.