What is ISO 9001?

A Practical Guide to ISO 9001:2026

ISO 9001 is the international standard that sets out the requirements for a quality management system (QMS). It’s the only standard in the ISO 9000 family that organizations can be certified to. With more than one million certificates issued to organizations in 189 countries, it’s the most widely used quality management standard in the world.

The current edition, ISO 9001:2026, was published on September 16, 2026. Organizations certified to ISO 9001:2015 have until September 30, 2029, to transition. If you’re implementing a QMS for the first time, the 2026 edition is the one to follow.

Key sections on this page:

• What ISO 9001 requires
• What changed in ISO 9001:2026
• Transitioning from ISO 9001:2015
• Common pitfalls
• How isoTracker can help
• Useful resources
• Frequently asked questions

What ISO 9001 requires

ISO 9001 follows the harmonized structure shared by ISO’s management system standards, including ISO 14001 and ISO 45001. Clauses 1 to 3 cover scope, references, and terms. The requirements themselves sit in clauses 4 to 10.

The standard sets out outcomes rather than methods, so the evidence varies with the size and nature of the organization. The table below summarizes each clause and the kind of evidence auditors typically look for.

Clause	What it covers	Evidence auditors typically look for
4. Context of the organization	Internal and external issues, interested parties, the scope of the QMS, and its processes	A defined QMS scope, and a current view of the issues and stakeholder requirements that affect it
5. Leadership	Top management commitment, customer focus, the quality policy, roles and responsibilities, and (new in 2026) quality culture and ethical behavior	Leaders who can explain the quality policy and objectives, and evidence that they take an active part in the QMS
6. Planning	Actions to address risks and opportunities, quality objectives, and planning for changes	Measurable objectives with plans to achieve them, and actions taken on identified risks and opportunities
7. Support	Resources, competence, awareness, communication, and documented information	Competence and training records, and current, controlled versions of documents
8. Operation	Planning and controlling how products and services are delivered, from customer requirements and design to external providers, release, and nonconforming outputs	Records of requirement reviews, supplier evaluations, and product or service release, and of how nonconforming outputs were handled
9. Performance evaluation	Monitoring and measurement, customer satisfaction, internal audit, and management review	An internal audit program, management review records, and performance and customer satisfaction data
10. Improvement	Nonconformity and corrective action, and continual improvement	Corrective actions with identified root causes and effectiveness checks, and evidence of improvement over time

For more on documentation, see isoTracker’s guide to control of documented information under ISO 9001.

What changed in ISO 9001:2026

ISO 9001:2026 is the sixth edition of the standard. It builds on ISO 9001:2015 and keeps the same structure. ISO describes the revision as focused on clarity and usability, and most requirements are unchanged. The main changes are summarized below, based on overviews published by ISO and certification bodies.

Clause	What’s changed	What to review
3. Terms and definitions	A small set of core quality management terms is now defined in the standard itself	Whether key terms in your procedures are used consistently with the definitions
4. Context	Climate change and sustainability are explicitly part of the organization’s context. (The climate change requirement was first added by a 2024 amendment to ISO 9001:2015.)	Whether you’ve determined if climate change is relevant to your QMS, and recorded why
5. Leadership	Top management is responsible for promoting quality culture and ethical behavior	How leaders demonstrate these values, for example through communication, management review, and how they respond when problems are reported
6. Planning	Risks and opportunities are addressed separately, with more emphasis on pursuing opportunities; requirements for planning changes to the QMS are also strengthened	Whether your risk register (or equivalent) covers opportunities as well as risks, with actions assigned, and how you plan and record changes to the QMS
7. Support	Awareness requirements now include quality culture and ethical behavior	Induction, training, and internal communications
8 and 9. Operation and performance evaluation	Largely unchanged; clause 8 mainly has terminology updates	Clause references in procedures and audit checklists
10. Improvement	Leadership’s role in driving continual improvement is more explicit	Evidence that top management drives improvement beyond corrective action
Annex A (expanded)	Guidance, now around 15 pages, clarifying the standard’s structure, terminology, and clauses	A useful reference when planning your gap analysis

Transitioning from ISO 9001:2015

Transition requirements are set by Global ACI, the successor to the International Accreditation Forum (IAF). The key dates are:

• September 16, 2026: ISO 9001:2026 is published.
• March 31, 2028: from this date, new and initial certifications can only be issued to ISO 9001:2026.
• September 30, 2029: ISO 9001:2015 certificates cease to be valid.

Your certification body must itself be accredited to audit against the 2026 edition before it can carry out your transition audit, so it’s worth confirming timing early. The usual steps are:

1. Get the standard. Buy a copy of ISO 9001:2026 and brief top management, since several of the changes fall to them.
2. Run a gap analysis. Compare your current QMS against the changes above. For most organizations, the gaps are likely to be concentrated in leadership, planning, and awareness.
3. Update your system. Revise affected procedures, your risk and opportunity register, awareness training, and internal audit checklists.
4. Build evidence. Run an internal audit and a management review against the 2026 requirements before your transition audit.
5. Schedule your transition audit. Agree on timing with your certification body. The transition audit can often be combined with a surveillance or recertification audit.

If you’re pursuing certification for the first time, our ISO 9000 guide sets out the full certification process step by step.

Common pitfalls

Updating documents without changing practice. Revising clause references and terminology is the quickest part of a transition. Auditors will look for evidence that the new requirements have changed how the organization operates.

Relying on the quality policy to show culture. A quality policy that mentions ethics won’t demonstrate quality culture on its own. Auditors are more likely to look at everyday records, such as issues raised and acted on, corrective actions closed properly, and management reviews that lead to decisions.

Risk registers without opportunities. Many registers list only threats. With risks and opportunities now addressed separately, opportunities need owners and actions too.

Leaving the transition late. Gaps are cheaper to close well before the transition audit, when there is still time to generate evidence that changes are working.

How isoTracker helps with ISO 9001

isoTracker is cloud-based, modular QMS software built for small and mid-sized businesses. Each module supports specific ISO 9001 requirements, and modules can be used together on a single platform or on their own.

Module	How it supports ISO 9001
Document Control	Controls documents with versioning, approval workflows, review reminders, and audit trails (clause 7)
Training Management	Links training to the competencies each role requires, grades tests automatically, and can deliver training automatically when a controlled procedure is revised (clause 7)
Risk Management	Records risks and opportunities, assigns actions, and schedules reviews with automatic reminders (clause 6)
Audit Management	Plans and runs internal audits with reusable checklists and graduated scoring, and links findings directly to corrective action (clause 9)
Complaints Management	Logs customer complaints, keeps complainants informed, and feeds recurring issues into CAPA (clauses 8 and 9)
Non-Conformance Management	Records, investigates, and tracks nonconforming outputs from any source (clauses 8 and 10)
CAPA	Supports root cause analysis with 5 Whys and fishbone tools, schedules effectiveness checks, and can enforce two-step closure (clause 10)

Pricing is published and subscription-based, so you pay only for the modules and users you need. A free 60-day trial gives you full access to every module, with free email support and no credit card required.

What our customers say

“isoTracker has been a very user-friendly tool for ISO management. Also, isoTracker Solutions leads the pack in customer service and keeping the customer informed. We have been pleased with the product.”

– Bradley Gillespie, Chemist @ Molex Group, LLC, USA

“isoTracker is my ROCK! Passed another audit, and the system shined brighter than last year!”

– Daniel Wood, Food Safety Manager @ SunWest Milling Co Inc, USA

Useful resources

From isoTracker:

• What is ISO 9000?: how ISO 9001 fits into the ISO 9000 family, and the steps to certification
• Improving quality management reviews: a practical guide for ISO 9001 compliance
• Guide to internal quality audits under ISO 9001
• ISO 9001: what is control of documented information?

Authoritative third-party sources:

• ISO 9001:2026: International Organization for Standardization
• Transition requirements for ISO 9001:2026: Global Accreditation Cooperation (Global ACI)
• ISO 9001:2026 key changes and guidance: BSI
• ISO 9001 Auditing Practices Group: guidance on auditing quality management systems from an informal group of ISO/TC 176 and accreditation experts

Last reviewed: September 2026