Transition to ISO 9001:2026

Contents at a glance

1. Timeline and deadlines: publication, transition period, transition audit — and the deadline trapPublication 16 September 2026, national adoptions follow; transition period of three years under Global ACI-TECH-3-TR (from 31 March 2028 initial certifications only to 2026, transition by 30 September 2029); transition in the regular surveillance or recertification audit; who sets the binding audit date; the deadline trap when recertifying to 2015; timeline by audit cycle in three variants; what ISO 14001:2026 has to do with it
2. What stays, what changes: the revision at a glance — 90 percent staysHarmonized Structure (HS) instead of High Level Structure — ten clauses unchanged; overview of all changed sub-clauses (4.1, 4.2, 5.1, 6.1, 6.2, 6.3, 7.1.3, 7.1.4, 7.1.6, 7.3, 7.5, 8.2.1, 9.1.3, 9.2.2, 9.3.2, 10.1, Annex A) and the unchanged ones (policy, 8.3 to 8.7); changes of terms; amount of work for a small company (one day)
3. 4.1 and 4.2: climate change in the context and the requirements of interested partiesThe sentence from the 2024 amendment (“The organization shall determine whether climate change is a relevant issue”) and what it requires — a reasoned decision, not a climate programme; three typical answers for small companies; 4.2 new: which requirements of interested parties the QMS addresses, monitor changes; text modules for the context table
4. 5.1.1 and 7.3: quality culture, integrity and ethical behaviour — what management must demonstrateThe new item in 5.1.1 (promoting a quality culture, integrity, ethical behaviour, risk- and opportunity-based thinking); what makes “culture” auditable (behaviour on errors, customer information, rules for gifts, conflicts of interest, data); the ethics and quality culture check with twelve questions; evidence every small company already has; extending 7.3 awareness; what is not required (code of ethics, compliance officer, whistleblowing system)
5. 6.1: risks and opportunities separated — 6.1.2 and 6.1.3 with their own evaluationWhy the standard separates them (in 2015 opportunities were mostly treated as “inverted risks”); requirements 6.1.2 (determine, evaluate risks, actions) and 6.1.3 (determine, evaluate opportunities, actions); the opportunities table next to the risk table; evaluating opportunities (benefit × achievability); transition from the existing risk and opportunity analysis without rebuilding; link to 9.1.3 and 9.3.2
6. 6.2 and 6.3: quality objectives “where practicable” and the planning of changes with seven points6.2: measurable “where practicable”, otherwise capable of being evaluated — what that means for service providers and what not; 6.3: the seven points of the planning of changes (purpose and consequences, integrity of the QMS, resources, responsibilities, communication, evaluation of effectiveness, review after implementation); the change sheet; examples of planned changes in a small company (new software, new site, new employee in a key role, new product); the transition itself as a change under 6.3
7. 7.1.3, 7.1.4 and 7.5: infrastructure for hybrid work, psychological factors, “available as documented information”7.1.3 infrastructure explicitly for on-site, remote and hybrid work (equipment, connection, data security, access to documented information); 7.1.4 work environment including social and psychological factors (workload, availability, isolation); what that means for a small company without home office (almost nothing); 7.5 unified wording and notes on digital media, backups, access rights; text modules
8. 8.2.1: informing customers about disruptions, interruptions and delivery problemsThe new requirement in customer communication: proactive information about foreseeable disruptions; link to quality culture (honesty towards customers); the rule in the order process (when, who, how, evidence); examples: delivery delay, material shortage, illness of the fitter, IT failure at the service provider; three text modules for the customer e-mail
9. 9.1.3, 9.2.2 and 9.3.2: evaluating effectiveness separately, audit objectives per audit, new inputs to the management review9.1.3 analysis and evaluation: effectiveness of actions on risks and on opportunities separately; 9.2.2 audit programme: define audit objectives per internal audit (examples of objectives); 9.3.2 management review: new inputs — changes in the expectations of interested parties, effectiveness risks/opportunities separately, quality culture; how the ten chapters of the management review template are adapted (two headings, one line); audit plan line “objective of this audit”
10. Step 1 — the gap analysis: clause by clause against your own system, in three hoursProcedure: gap checklist (14 changed sub-clauses) with the columns requirement 2026, location in your own system, rating (fulfilled / adapt / new), action; who does it (quality manager with MD, three hours); what you need (manual, context table, risk analysis, management review, audit programme, briefing record, process sheet order); rating rules; typical results by type of company; the four points almost every company has to do anew
11. Step 2 — the action plan: traffic light, timeline, responsible persons — and implementation in one dayThe gap checklist becomes the action plan: per yellow/red row action, responsible, date, status; order of implementation (first define rules, then texts, then create evidence, then brief); the transition day as a schedule (8 hours); documents that change (manual, risk analysis, management review template, audit plan, process sheet order, briefing, change sheet); status note and handover sheet; what evidence must come into being before the audit
12. Step 3 — the transition audit: procedure, extra time, the auditor's twelve questions, certificateRegistering the transition with the certification body; extra time (often 0.5 day); procedure in the surveillance or recertification audit; what the auditor wants to see first (gap analysis, change list, minutes of decisions); the twelve typical questions on the 2026 points with evidence; findings on the transition and their classification; the new certificate (standard reference, expiry date unchanged); special case initial certification to 2026
13. Costs of the transition and funding: own effort, external support, public funding programmesCosts at a glance: text of the standard, extra time of the certification body (0.5 day), own effort (one day quality manager, two hours MD, 20 minutes per employee); external support as a fixed price by number of employees; public funding for consulting varies by country — Germany as example (BAFA “Förderung unternehmerischen Know-hows”: 50 % or 80 %, application before signing the contract, guideline extended to 31 December 2028); worked example; what is not fundable (certification fees, purchase of the standard)
14. Practice case: Nordlicht IT Service — gap analysis and text modules for a hybrid service providerPractice company Nordlicht IT Service, Flensburg, Germany (9 employees, 4 of them mostly in the home office, fictitious): current state of the system (manual excerpts, context table, risk table, audit plan, management review, process sheet service); task: complete the gap checklist, name the red points, write three text modules (5.1.1, 8.2.1, 7.1.3), formulate the audit objective, timeline to the surveillance audit on 12 May 2027; model solution with reasoning
15. Evidence: the transition folder for the auditor and the transition readiness gridThe transition folder (tab in the annual folder): gap checklist with traffic light, minutes of decisions of management, change list/handover sheet, change sheet “Transition”, changed documents with status, briefing record, registration with the certification body, first practice evidence per new rule; the transition readiness grid with 16 criteria (ready / almost / not yet); retention; calendar until the deadline; what remains to be done after the audit (management review with retrospective, effectiveness under 6.3 point 7)
16. Procedure in our companyProcedure in our company: contact person for quality questions, location of the manual, templates and records, approvals, fixed dates and next steps in the company