The International Organization for Standardization (ISO) this week published ISO 9001:2026, the first significant revision to the world’s most widely used quality management standard in more than a decade.
More than a million organizations worldwide are certified to the standard, ranging from large corporations and small and medium-sized enterprises to private companies and government agencies, ISO officials say.
“This flagship international standard represents a real symbol and a roadmap to excellence, quality, and trust,” ISO Secretary General Sergio Mujica said at a Sept. 16 briefing announcing the release.
“The core principles of quality remain – the quality culture, the role of leadership, the continuous improvement mindset – but the world has changed significantly, and we all need to be able to understand the context we work in and to identify the challenges and opportunities and to react accordingly,” he added. (Related Expert White Paper: “Building a Culture of Quality in Medical Device Organizations: Best Practices for QMSR Compliance,” QualityHub, March 2026.)
The revision drew on more than 150 experts from 67 countries and 21 liaison organizations over nearly three years, according to Sam Somerville, Chair of ISO Technical Committee (TC) 176 Sub-Committee (SC) 2, the international working group that led the standard’s review.
“Quality is built through conversations – conversations that explore ideas, challenge assumptions, and help people learn, improve, and move forward with confidence,” Somerville said at the briefing. “No matter what people’s background, where they lived, what language they spoke, or the organizations that they represented, we are all working toward the same goal.”
Key Changes at a Glance
Somerville says the 2026 edition of ISO 9001:
- Adds a dedicated section of key terms and definitions, something the standard never had before;
- Introduces Annex A, offering formal clarification on the intent behind specific requirements to address longstanding confusion among users;
- Sharpens the focus on leadership, quality culture, and ethical behavior as drivers of quality, rather than a compliance checkbox;
- Draws a clearer line between risk and opportunity, treating opportunity as the pursuit of a positive outcome rather than merely the absence of risk;
- Expands internal audit requirements to include explicitly defined audit objectives, alongside existing criteria and scope; and
- Updates provisions around organizational knowledge.
There is a three-year transition period for organizations to migrate from ISO 9001:2015 to the updated 2026 version.
Culture and Leadership, Not Just Documentation
The clause on leadership is one of the longest in the standard, and Mujica and Somerville framed it as central to this revision.
“It’s not just about ticking boxes; it’s about doing the right thing,” Somerville said. “It’s not just about doing what’s seen; it’s about doing it right because it is the right thing to do – whether an auditor is due to come in and look at it or not.”
“This is an evolution, not a revolution.” – Sam Somerville
That shift reflects a common practitioner view that the standard only delivers value when leadership visibly owns it rather than delegating quality to a single department. At its core, ISO 9001 is meant to help organizations build a framework to do what they say they do, do it consistently, and keep finding ways to do it better, making certification a byproduct of good business practice rather than a standalone check-the-box exercise for auditors.
That same practical framing applies to the risk-versus-opportunity split; opportunity is meant to represent the pursuit of a positive outcome, not something that emerges by default when risk is low.
What Quality Teams Should Do Now
ISO officials stressed that certified organizations shouldn’t expect (or need) a wholesale system overhaul. “This is an evolution, not a revolution,” Somerville said, encouraging stakeholders to read the entire updated standard.
Somerville noted that reading the whole standard should be “really obvious” but “many people” don’t bother to, instead only reading operative requirements found in Clauses 4 through 10.
Practical next steps cited during ISO’s briefing include:
- Using the new Annex A language to confirm the intent behind requirements before revising documentation;
- Reviewing how leadership visibly owns quality culture and ethical conduct rather than delegating it to the quality function;
- Separating risk and opportunity in planning and risk-assessment processes rather than treating them as two sides of the same exercise; and
- Updating internal audit programs to reflect the newly required audit objectives.
ISO also flagged two resources in development to support the transition: ISO 9002, an application guidance document, and a handbook aimed specifically at small enterprises. Somerville pointed teams toward the Auditing Practices Group section of the TC 176 website for auditing guidance in the interim.
