ISO Compliance Insights & Best Practices
CART
ISO Compliance Insights & Best Practices
An ISO 9001:2026 transition checklist is short if you build it from the standard rather than from the noise. ISO published the sixth edition in September 2026; it replaces ISO 9001:2015, and of its 65 requirements only 19 are revised, new or renumbered. A certified organization does not rebuild its QMS — it adds four things, splits one register, extends one form, re-points its clause references and re-audits. This checklist is those steps in the order they should happen, with the evidence an auditor will ask for at each.
For the clause-by-clause comparison behind the checklist, see ISO 9001:2026 changes. For the standard itself, start with our complete ISO 9001 guide.
| # | Step | Clause | Evidence to produce |
|---|---|---|---|
| 1 | Buy the 2026 text and brief top management | — | Licensed copy; briefing record |
| 2 | Plan the transition as a QMS change | 6.3 | Change request with all seven considerations |
| 3 | Gap-assess the 19 changed requirements | — | Transition gap assessment with closing actions |
| 4 | Record the climate-change determination | 4.1, 4.2 | Determination record approved by top management |
| 5 | Define quality culture and ethical behaviour | 5.1.1, 7.1.4, 7.3 | Signed policy; awareness briefing records |
| 6 | Separate risks from opportunities | 6.1.2, 6.1.3 | Two registers, each with effectiveness results |
| 7 | Extend change planning to seven considerations | 6.3 | Updated procedure and form |
| 8 | Re-point clause references and update wording | 10.1, 6.1, 7.5 | Document change records; no live “10.3” |
| 9 | Re-audit against the 2026 edition | 9.2 | Audit programme and reports on 2026 criteria |
| 10 | Hold a management review that records the transition | 9.3 | Minutes with inputs g) and h) taken separately |
Everything on this ISO 9001:2026 transition checklist assumes someone has read the published standard. Secondary commentary written before publication — including drafts and previews — can be wrong in detail. The text is 36 pages from iso.org or your national standards body. Brief top management on the six headline changes and on the one that names them personally: clause 5.1.1 now asks them to promote quality culture and ethical behaviour.
The transition is a change to the QMS, so plan it the way the 2026 edition asks changes to be planned. Raise a change request that records the purpose and potential consequences, the impact on QMS integrity, the resources and information needed, any reallocation of responsibilities, how the change will be communicated, how its effectiveness will be monitored and evaluated, and how the results will be reviewed. The last three considerations are new in 2026 — using them on the transition itself is the first piece of evidence that you understand them.
Do not re-assess all 65 requirements. Nineteen are revised, new or renumbered, and those are the rows on the ISO 9001:2026 transition checklist that need an answer: what the current system does, what the gap is, who closes it and by when. The rest need only a wording check — “maintain documented information” became “shall be available as documented information”, and “retain” became “shall be available as evidence of”.
The changed rows are: 4.1, 4.2, 5.1.1, 5.2.1, 5.3, 6.1.2, 6.1.3, 6.3, 7.1.3, 7.1.4, 7.1.6, 7.3, 8.3.1, 8.3.3, 9.1.2, 9.1.3, 9.3.2, 9.3.3 and 10.1.
Clause 4.1 now says, in the main text, that the organization shall determine whether climate change is a relevant issue. If you applied Amendment 1:2024 you already have this; if you never did, you need a recorded determination before your transition audit. “Not relevant, because…” is a valid conclusion if it is true for your sites, supply chain, products, regulators and customers. The absence of any determination is a finding. Record the reasoning, have top management approve it, and add climate-related interested-party requirements (customers asking for carbon data, for instance) to the interested-parties register.
This is the step on the ISO 9001:2026 transition checklist that a 2015 system has no document for. The 2026 edition asks top management to promote quality culture and ethical behaviour (5.1.1), notes that both influence the environment for the operation of processes (7.1.4), and requires people to be aware of them (7.3). The standard does not name a document, but a short signed policy is the simplest evidence for all three: what the organization expects — truthful records, speaking up, no retaliation, fairness — how leaders promote it, how concerns are raised, and how it is measured. Then add it to the induction and annual awareness briefing, because the awareness item is the one an auditor tests by interview.
ISO 9001:2015 dealt with risks and opportunities in one sentence. ISO 9001:2026 gives them separate clauses: 6.1.2 requires risks to be determined, analyzed and evaluated, with actions proportionate to their potential impact; 6.1.3 requires the same cycle for opportunities, with actions appropriate to context. Clause 9.1.3 then evaluates the effectiveness of each set of actions separately, and clause 9.3.2 lists them as separate management-review inputs.
A single register where “opportunity” was a column nobody filled in no longer evidences this. Split it, give opportunities their own scoring (value and achievability rather than likelihood and impact), and make sure every action carries an effectiveness result. Our guide to ISO 9001 risks and opportunities walks the mechanics.
Clause 6.3 kept the four 2015 considerations and added three. A change form built for 2015 has boxes for purpose and consequences, QMS integrity, resources, and responsibilities; it is missing communication, effectiveness monitoring and evaluation, and review of results. Add the three boxes, update the procedure, and re-run one recent change through the new form so there is a completed example before the audit.
The renumbering is the tedious line on any ISO 9001:2026 transition checklist, and it bites in two places. Continual improvement moved from 10.3 to 10.1 — there is no clause 10.3 in ISO 9001:2026 — and 6.1.2 now means risks only, with opportunities at 6.1.3. Search every procedure, audit checklist, training deck, competence matrix and software field for “10.3”, “10.1 General” and “6.1.2” and correct each. While you are in the documents, update the documented-information wording from step 3. Log every edit as a document change so the trail exists.
Nothing on an ISO 9001:2026 transition checklist is finished until it has been audited. Train the internal auditors on the changes, update the audit checklist to the 2026 numbering and the new items, and audit the whole system against it before the certification body does. The auditors should test the new requirements the way an external auditor will: interview staff about the quality culture and how to raise a concern, ask to see the opportunity register’s effectiveness column, and open a change record to check all seven considerations. Close the findings through corrective action.
Hold a management review with the 2026 inputs. Two are new as separate items: the effectiveness of actions taken to address risks and the effectiveness of actions taken to address opportunities. Take them separately, minute them separately, and record the review’s conclusion that the transition change from step 2 achieved its purpose. That minute, with the audit reports from step 9, is what the certification body reads first.
The transition period is set by the IAF in a resolution issued on publication and applied by accreditation and certification bodies. Previous ISO 9001 transitions allowed three years, which would put the end around September 2029; confirm the exact date with your certification body. Two practical points: certification-body capacity is limited in the final months of any transition, and a transition audit is normally combined with a scheduled surveillance or recertification visit rather than run separately, so book the slot early. Sector schemes built on ISO 9001 — IATF 16949, AS9100, ISO 13485 — reference it by edition and move on their own timetables.
Working through this ISO 9001:2026 transition checklist on your own is a few weeks of quality-manager time. The ISO 9001 Toolkit — 84 editable templates rebuilt on the published 2026 text, $99 — ships the transition guide, a gap-assessment workbook pre-loaded with the 19 changed rows, the culture policy, the climate determination record, separate risk and opportunity registers and the seven-consideration change form, so steps 2 to 8 start from finished documents.
Yes, if you want to stay certified. ISO 9001:2015 is withdrawn, and certificates to it lapse at the end of the IAF transition period. Organizations certifying for the first time should implement against the 2026 text now.
Of 65 requirements in clauses 4 to 10, 16 are revised, 2 are new as separate clauses (6.1.2 and 6.1.3) and 1 is renumbered (10.1). Forty-six are unchanged in substance.
Usually not as a separate charge. Certification bodies generally fold the transition into a scheduled surveillance or recertification audit, sometimes with a modest time uplift. Ask yours; practice varies.
Only if opportunities are analyzed, actioned and evaluated in their own right and the results can be shown separately from risks. In practice a second register, or a clearly separated section, is the easiest way to evidence 6.1.3 and the separate inputs in 9.3.2.
The standard names no document. It requires top management to promote quality culture and ethical behaviour and people to be aware of them; a short signed statement is the simplest evidence of both, and it gives the awareness briefing something concrete to cover.
September 21, 2026
September 21, 2026
September 20, 2026
September 20, 2026
September 19, 2026