ISO 9001:2026 explained: what the sixth edition changes

ISO 9001 is the most adopted management-system standard in the world, with well over a million certified organisations across every industry. Its 2026 sixth edition replaces the long-running 2015 version and folds in the 2024 climate-change amendment. If you already run a quality management system, the good news up front: the structure you know — clauses 4 to 10 — is intact, and nothing here forces you to rebuild. The changes sharpen the standard rather than reinvent it.

Here is what actually moved, and why it matters for your next audit.

Quality culture and ethical behaviour

The biggest tonal shift is that quality culture and ethical behaviour are now written into the requirements — in leadership (top management must promote them), in awareness (your people must understand them), and even in the environment for the operation of processes. It is the standard acknowledging what auditors have long known: a QMS lives or dies on culture, not paperwork.

Risks and opportunities, addressed separately

In 2015, risks and opportunities were bundled into a single clause. The 2026 edition splits them: Clause 6.1.2 covers actions to address risks, and 6.1.3 covers actions to address opportunities, each with its own determine-analyse-evaluate-and-act cycle. In practice that means two registers, not one — a risk register and an opportunity register — which is exactly how a healthy improvement programme already thinks.

Splitting risks from opportunities is the standard admitting that 'risk-based thinking' was quietly doing two different jobs — protecting the downside and pursuing the upside — and they deserve their own attention.

Stronger management of change, and climate on the agenda

Clause 6.3 (planning of changes) is reinforced: when you change the QMS, you now weigh purpose and consequences, impact on integrity, resources, responsibilities, communication, and how you will monitor, evaluate and review the change. And from the 2024 amendment, you must determine whether climate change is a relevant issue in your context (4.1) and account for interested parties' climate-related requirements (4.2).

There is also housekeeping that helps in practice: a small set of core terms now lives in Clause 3, Annex A has expanded explanatory guidance, and Clause 10 has been reordered so continual improvement leads.

What stays exactly the same

There is still no Annex A and no Statement of Applicability — a point that trips up teams coming from ISO 27001. Every clause 4 to 10 requirement applies unless you can justify an exclusion, most commonly Clause 8.3 (design and development) if you do not design. The process approach, the Plan-Do-Check-Act cycle, and the certification rhythm — Stage 1, Stage 2, annual surveillance, three-yearly recertification — all carry over.

In Compliance One, the full ISO 9001:2026 clause library ships enabled by default with an applicability register, native QMS registers (quality objectives, opportunities, process map, calibration, customer satisfaction, nonconforming outputs and more), and the shared clause 4 to 10 evidence cross-mapped to ISO 27001 and 22301 — so the sixth edition is a configuration, not a rebuild.