ISO 9001:2026 Revision: What’s New and How to Prepare

ISO 9001:2026 is approaching publication, bringing targeted changes to the world’s most widely used quality management system standard. Rather than replacing the familiar ISO 9001 framework, the sixth edition is expected to clarify existing requirements and strengthen the connection between quality, leadership, organizational culture, risks, opportunities and business performance.

ISO lists the sixth edition at the publication stage, with release scheduled for September 2026. Until the new edition is formally published and applicable transition arrangements are announced, ISO 9001:2015, together with its 2024 climate action amendment, remains the edition against which organizations are currently certified.

In this guide, we explain what is changing, what is likely to remain familiar and how Malaysian organizations can begin preparing without making premature or unnecessary revisions to their quality management systems.

What Is the Current Status of ISO 9001:2026?

The revision has progressed through the Draft International Standard and Final Draft International Standard stages. ISO now lists Edition 6 as under publication, which means the technical development and formal voting stages have substantially concluded and the document is moving through final production.

Organizations should not claim that they are certified to ISO 9001:2026 before the standard is published, implemented and assessed through an appropriate certification process.

Why Is ISO 9001 Being Revised?

ISO 9001:2015 introduced major concepts such as risk-based thinking, organizational context and stronger leadership responsibility. The new revision is more evolutionary than revolutionary. Its purpose is to improve clarity, address interpretation issues and ensure the standard remains relevant to contemporary organizations.

The revision reflects changes in how businesses operate, including more complex supply chains, changing customer expectations, increased reliance on digital systems, pressure for organizational resilience and closer scrutiny of leadership conduct and corporate culture.

The revised standard is also being aligned more closely with the harmonized structure used by other ISO management system standards. This should help organizations operate integrated management systems without maintaining unnecessary parallel processes.

What Is New in ISO 9001:2026?

Stronger Leadership Accountability

Leadership remains central to the quality management system, but the revised edition places greater emphasis on the accountability of top management. Quality should not be treated solely as the responsibility of the quality manager or ISO coordinator.

Top management will need to demonstrate how quality considerations influence business priorities, resource decisions, objectives, operational controls and improvement activities. Practical evidence may include leadership participation in management reviews, decisions based on quality performance, removal of operational barriers and follow-up on significant quality issues.

Organizations should review whether their leadership involvement is visible in practice or exists mainly in policies, meeting minutes and organizational charts.

Greater Emphasis on Quality Culture

Quality culture is one of the most notable themes in the revision. A quality culture exists when people understand the importance of meeting requirements, take responsibility for their work, report problems honestly and support improvement rather than concealing errors.

This does not necessarily require a separate quality culture manual or procedure. Organizations should instead examine how leadership behaviour, communication, competence, recognition, supervision and accountability influence everyday decisions.

Evidence of a healthy quality culture may include:

• Employees being willing to report defects, delays and process failures.
• Managers addressing root causes rather than assigning blame.
• Quality objectives being understood beyond the quality department.
• Operational teams being encouraged to recommend improvements.
• Performance incentives not encouraging employees to bypass controls.
• Lessons from complaints, audits and nonconformities being shared appropriately.

Ethical Behaviour Within Quality Management

The revision introduces a clearer connection between leadership, ethical behaviour and quality culture. Within a quality management system, ethical behaviour can affect the reliability of records, product acceptance, inspection results, customer communication and the reporting of nonconforming outputs.

Organizations should consider whether employees face pressure to alter data, hide delays, release products without proper approval or make commitments that cannot be fulfilled. Relevant controls may include escalation channels, approval authorities, data integrity measures and clear expectations for honest reporting.

This quality-related emphasis does not automatically require an anti-bribery management system. Organizations facing broader bribery risks may separately consider ISO 37001 anti-bribery management systems.

Clearer Separation of Risks and Opportunities

ISO 9001:2015 commonly refers to risks and opportunities together. In practice, some organizations created a single register but focused almost entirely on preventing negative events. Opportunities were often listed only to complete a template.

ISO 9001:2026 provides greater clarity by treating risks and opportunities as related but distinct considerations. Risks concern uncertainty that may negatively affect intended results, while opportunities may support improvement, innovation, customer value or better organizational performance.

Organizations may need to demonstrate a more deliberate approach to opportunities, such as:

• Improving a process to reduce lead time or rework.
• Using customer feedback to develop a better service.
• Introducing technology that strengthens process control.
• Developing alternative suppliers to improve resilience.
• Expanding employee competence to support new capabilities.
• Integrating related management systems to reduce duplicated work.

The standard is not expected to prescribe a compulsory risk register or a specific risk methodology. The method should remain proportionate to the organization’s size, complexity, sector and operational exposure.

Climate Change and Sustainability in Organizational Context

Climate change considerations were added to ISO 9001:2015 through Amendment 1:2024. Organizations are required to determine whether climate change is a relevant issue, while recognizing that interested parties may have climate-related requirements.

The revised edition incorporates these considerations into the updated framework. This does not mean every organization must establish a separate climate programme or environmental management system. The organization must determine whether climate-related matters can affect the intended results of its quality management system.

Relevant examples may include:

• Flooding, heat or severe weather affecting operations and deliveries.
• Raw-material shortages or changes in supplier availability.
• Customer specifications concerning lower-impact materials.
• Temperature-sensitive storage and transportation requirements.
• New contractual, statutory or regulatory obligations.
• Changes in product design or service delivery caused by environmental conditions.

Organizations needing a structured system for managing environmental impacts and compliance obligations may integrate ISO 9001 with ISO 14001 environmental management.

Updated Terms and Definitions

The revised standard includes more quality-management-specific terms and definitions within Clause 3. This should reduce unnecessary cross-referencing and help users interpret the requirements more consistently.

ISO 9000:2026 has also been published with updated fundamentals, concepts and vocabulary aligned with the revised ISO 9001 framework. Organizations should remember that ISO 9000 supports interpretation, while certification is conducted against ISO 9001.

Expanded Guidance in Annex A

ISO 9001:2026 includes a substantially revised Annex A explaining the structure, terminology and intent behind important requirements. This informative guidance is intended to reduce misinterpretation and help organizations apply the standard in a practical manner.

Annex A does not add separate certifiable requirements. Auditors and implementers should use it to understand the clauses rather than treating every explanatory statement as an additional mandatory control.

Closer Alignment With Other ISO Management System Standards

The revised wording and structure improve alignment with other management system standards. This is particularly useful for organizations combining quality management with:

• ISO 14001 for environmental management.
• ISO 45001 for occupational health and safety.
• ISO/IEC 27001 for information security.
• ISO 22301 for business continuity.

An integrated management system can use shared processes for organizational context, interested parties, objectives, competence, documented information, internal audits, corrective action and management review. However, each standard’s subject-specific requirements must still be addressed.

ISO 9001:2026 Clause-by-Clause Change Overview

What Is Unlikely to Require a Complete Rebuild?

Organizations with a mature and effective ISO 9001:2015 system should not assume that every procedure, form and process must be rewritten. The revised edition retains the established quality management framework.

Core elements expected to remain relevant include:

• The process approach and Plan-Do-Check-Act cycle.
• Customer focus and applicable customer requirements.
• The scope of the quality management system.
• Quality policies and measurable objectives.
• Control of documented information.
• Competence, awareness and communication.
• Operational planning and control.
• Control of externally provided processes, products and services.
• Monitoring, measurement, analysis and evaluation.
• Internal audits and management reviews.
• Nonconformity, corrective action and continual improvement.

The objective should be to identify genuine gaps and improve effectiveness, not to change document numbers or rewrite established controls merely to appear compliant with a new edition.

How to Prepare for ISO 9001:2026

1. Maintain the Existing Quality Management System

Continue implementing ISO 9001:2015 and Amendment 1:2024. Internal audits, management reviews, corrective actions, performance monitoring and improvement activities should continue according to the existing programme.

Allowing the current system to weaken while waiting for the revision would make the eventual transition more difficult.

2. Obtain an Authorized Copy of the Published Standard

When ISO 9001:2026 is formally released, obtain an authorized copy from ISO, the Department of Standards Malaysia or another approved standards distributor. Do not base the complete transition solely on presentations, summaries or uncontrolled draft copies.

3. Conduct a Structured Gap Assessment

Compare existing processes and evidence against the published requirements. The gap assessment should identify:

• Requirements already met by the existing system.
• Terminology or clause references needing correction.
• Processes requiring stronger implementation.
• New expectations concerning leadership, culture and opportunities.
• Documents and records that genuinely need revision.
• Training and awareness requirements.

4. Review Organizational Context

Reassess internal and external issues, interested parties and relevant requirements. Consider whether climate conditions, supply-chain changes, digital dependence, skills shortages, customer expectations or regulatory developments could affect quality outcomes.

The context review should lead to meaningful planning decisions. It should not be maintained as an isolated list that has no connection with objectives, risks, resources or operational controls.

5. Separate Risk and Opportunity Discussions

Organizations may continue using one planning tool, but the method should show that opportunities receive real consideration. Management reviews, strategic planning sessions and process meetings can be used to discuss both protection from negative outcomes and potential improvement.

6. Evaluate Quality Culture and Ethical Behaviour

We recommend examining how employees respond when quality problems occur. Useful questions include:

• Can employees stop or escalate work when requirements are not met?
• Are mistakes reported promptly and investigated fairly?
• Do targets encourage employees to bypass inspections or approvals?
• Are quality records complete, accurate and protected from inappropriate alteration?
• Do managers act consistently with the organization’s stated quality commitments?
• Are improvement suggestions acknowledged and evaluated?

7. Update Competence and Awareness Activities

Provide role-appropriate training on the revised requirements. Top management, process owners, internal auditors and general employees do not necessarily need the same level of technical detail.

Training effectiveness should be evaluated through interviews, observations, process performance, audit results or other appropriate evidence rather than attendance records alone.

8. Complete an Internal Audit and Management Review

Before a transition audit, conduct an internal audit covering the revised requirements and the effectiveness of implemented changes. Any identified nonconformities should be corrected and subjected to appropriate root-cause analysis.

Top management should then review transition readiness, including the gap assessment, training status, audit results, quality performance, resource needs and outstanding actions.

9. Coordinate With the Certification Body

Organizations holding accredited certification should ask their certification body about:

• The official transition period.
• When audits to ISO 9001:2026 will become available.
• Whether transition can be completed during surveillance or recertification.
• Additional audit time or evidence requirements.
• The final date for certification to ISO 9001:2015.
• How certificate expiry and recertification timing affect the transition plan.

ISO has confirmed that certified organizations will receive a transition period. However, businesses should not assume its duration until the official arrangements are issued by the relevant accreditation and certification bodies.

Should a Company Delay ISO 9001 Certification?

Organizations beginning their certification journey generally do not need to place the project on hold. A properly implemented ISO 9001:2015 system already contains the majority of the management-system foundation expected to continue under the revised edition.

A practical approach is to:

• Implement the current requirements properly.
• Avoid unnecessary or excessively rigid documentation.
• Strengthen leadership participation and process ownership.
• Address the 2024 climate action amendment.
• Design risk and opportunity processes that can be adjusted easily.
• Discuss audit timing with the intended certification body.

The correct certification route will depend on when the system is ready, when certification bodies begin auditing the new edition and the official transition rules. Certification audits and certificate issuance must be handled by an independent certification body, not by the consultant assisting with implementation.

Malaysian Considerations for the Transition

Malaysian organizations should distinguish between the publication of the international ISO standard, its adoption as a Malaysian Standard and the certification transition arrangements applied by accreditation and certification bodies.

The Department of Standards Malaysia previously adopted ISO 9001:2015 as MS ISO 9001:2015 and also adopted the 2024 climate action amendment. Following publication of the new international edition, organizations should monitor the Malaysian Standards Online platform for the applicable Malaysian adoption and final designation.

Businesses should also check contracts, tenders, supplier requirements and regulatory documents carefully. Some requirements may refer to a specific edition, while others may permit the current valid edition during an official transition period. ISO 9001 is generally voluntary, but it can become contractually or commercially required where specified by a customer, tender, scheme owner or other relevant party.

Common ISO 9001:2026 Transition Mistakes

• Claiming certification too early: Access to a final draft does not mean an organization is certified to the new edition.
• Rewriting every document: Change only what is necessary to address actual gaps and improve effectiveness.
• Treating quality culture as a slogan: Auditors will be more interested in leadership behaviour, employee awareness and operational evidence.
• Ignoring opportunities: A risk register containing only threats may not demonstrate meaningful opportunity-based thinking.
• Overcomplicating climate considerations: Determine relevance to the QMS instead of creating an unrelated environmental programme.
• Assuming a fixed transition period: Wait for official transition instructions and confirm the schedule with the certification body.
• Leaving the transition to the quality department: Leadership and process owners must participate in decisions and implementation.
• Using uncontrolled summaries as audit criteria: Final changes should be based on an authorized copy of the published standard.

How DR ISO Malaysia Can Support Your ISO 9001:2026 Preparation

DR ISO Malaysia can help organizations prepare for the revised ISO 9001 quality management system through a structured and proportionate transition programme.

Depending on your organization’s scope, readiness and existing system maturity, our support can include:

• ISO 9001:2026 gap assessment.
• Clause mapping between the existing and revised editions.
• Transition planning and responsibility assignment.
• Review of organizational context, interested parties, risks and opportunities.
• Leadership and process-owner briefings.
• Quality culture and employee awareness programmes.
• Revision of relevant policies, procedures, registers and records.
• Internal auditor transition training.
• Internal audits and management review preparation.
• Integration with other ISO management system standards.
• Post-transition maintenance and continual improvement support.

Our role is to provide consultancy, training, implementation and internal audit support. The independent certification audit and accredited certificate must be provided by an appropriate certification body.

Frequently Asked Questions About ISO 9001:2026

Has ISO 9001:2026 already been published?

ISO lists the sixth edition as under publication, with formal publication scheduled for September 2026. Until publication is completed, organizations should continue referring to ISO 9001:2015 and Amendment 1:2024 as the current certification basis.

Will an ISO 9001:2015 certificate become invalid immediately?

No. ISO has confirmed that certified organizations will receive a transition period. The certificate holder should follow the timetable and instructions issued by its certification body.

Will the transition period definitely be three years?

Organizations should not assume a particular duration until official transition arrangements are published. Plan early, but use confirmed instructions when determining audit and certificate deadlines.

Is ISO 9001:2026 a completely new management system?

No. It retains the familiar quality management structure and many established ISO 9001 requirements. The principal changes concern clarification, leadership accountability, quality culture, ethical behaviour, risks, opportunities, terminology and implementation guidance.

Does ISO 9001:2026 require an environmental management system?

No. Organizations must determine whether climate change and related external issues are relevant to the intended results of their quality management system. ISO 14001 remains the dedicated standard for environmental management systems.

Can an organization be certified to ISO 9000:2026?

No. ISO 9000 provides quality management fundamentals and vocabulary. ISO 9001 contains the certifiable quality management system requirements.

Do we need to replace all existing procedures?

Not necessarily. Existing documents can remain in use where they continue to support conformity and effective process control. The transition should be based on a gap assessment rather than a complete documentation rewrite.

Prepare for the Revision Without Disrupting Your Business

ISO 9001:2026 strengthens the connection between quality management, leadership conduct, organizational culture and long-term performance. Organizations with effective systems should treat the revision as an opportunity to improve how quality is managed rather than as a paperwork exercise.

DR ISO Malaysia can help your organization evaluate the changes, establish a proportionate transition plan, train relevant personnel and prepare the QMS for an independent certification audit. Contact DR ISO Malaysia to discuss your existing certification, implementation status and ISO 9001:2026 preparation requirements.