In This Article
- ISO 9001 is being revised by ISO/TC 176 with a Committee Draft expected in 2025 and publication estimated 2027-2028
- Climate action and sustainability integration are confirmed focus areas aligned with the ISO London Declaration
- Digital transformation and organizational resilience are expected new themes in the revision
- A 3-year transition period is standard, so organizations will have until approximately 2030-2031 to transition
- Current ISO 9001:2015 certified organizations should start monitoring changes now but do not need to act immediately
Why Is ISO 9001 Being Updated?
ISO 9001:2015 has served the global quality community well for over a decade. With more than one million certified organizations worldwide, it remains the most widely adopted management system standard. However, the business environment has changed significantly since 2015, and ISO's systematic review process has determined that a revision is necessary to keep the standard relevant and effective.
ISO standards are reviewed on a regular cycle, typically every five years, to determine whether they remain current or need updating. The systematic review of ISO 9001:2015, conducted by ISO/TC 176 (the technical committee responsible for quality management standards), identified several areas where the standard needs to evolve:
- Climate change and sustainability have become central business concerns since 2015
- Digital transformation has fundamentally changed how organizations operate, deliver products and services, and interact with customers
- Global supply chain complexity has increased, as highlighted by pandemic-era disruptions
- Stakeholder expectations around transparency, resilience, and social responsibility have intensified
- The Harmonized Structure (formerly Annex SL) has been updated and needs to be incorporated
This article is based on publicly available information from ISO/TC 176, national standards body publications, and expert analysis as of January 2026. The revision is still in development, and specific requirements may change as the standard progresses through Committee Draft (CD), Draft International Standard (DIS), and Final Draft International Standard (FDIS) stages. We will update this article as new information becomes available.
Expected Timeline
The ISO 9001 revision is progressing through the standard ISO development process. Based on current information and typical ISO development timelines, the expected schedule is:
| Stage | Expected Timing | Description |
|---|---|---|
| Committee Draft (CD) | 2025 | Working draft circulated among TC 176 members for comment and ballot. CD stage is currently underway. |
| Draft International Standard (DIS) | 2026 | Refined draft circulated to all ISO member bodies for comment and voting. This is when the broader community gets to review the proposed changes. |
| Final Draft International Standard (FDIS) | 2027 | Near-final version for a final yes/no vote by ISO member bodies. Minor editorial changes only. |
| Publication | 2027-2028 | Official publication of the new standard. The exact date depends on how smoothly each stage proceeds. |
| Transition Period | 3 years from publication | Certified organizations will have a transition period (typically 3 years) to upgrade their QMS to the new version. |
It is worth noting that ISO development timelines can shift. The transition from the 2008 to 2015 version took the full three-year transition period, and many organizations left their transition to the final year. Early preparation provides a significant advantage.
Key Changes Expected
While the final content of the revised standard is not yet confirmed, several themes have emerged from TC 176 publications, working group discussions, and national standards body communications. The revision is expected to be more significant than a minor amendment, though the fundamental structure and philosophy of ISO 9001 will be preserved.
Updated Harmonized Structure
The revised standard will adopt the latest version of the ISO Harmonized Structure (HS). This updated framework introduces some structural refinements that affect all ISO management system standards. Key aspects include:
- Explicit requirements related to climate change consideration (Amendment 1 to the HS)
- Potential refinements to the "documented information" terminology
- Clearer integration with other management system standards
- Updated definitions and terms
Greater Emphasis on Organizational Knowledge and Innovation
Clause 7.1.6 (Organizational Knowledge) in the current standard is relatively brief. The revision is expected to strengthen requirements around knowledge management, organizational learning, and innovation. Organizations may need to demonstrate more systematically how they capture, share, and apply knowledge, and how they foster innovation to improve quality outcomes.
Strengthened Process Approach
The process approach remains central to ISO 9001, but the revision may introduce more specific requirements around process metrics, process interaction management, and process owner accountability. This reflects the maturation of process management practices across industries.
Climate and Sustainability Integration
Perhaps the most discussed change in the upcoming revision is the integration of climate change and sustainability considerations. This aligns with the ISO London Declaration (2021), in which ISO committed to ensuring that climate change is addressed across all its standards.
What This Means in Practice
The revised standard is expected to require organizations to:
- Consider climate change as a contextual factor when determining external issues relevant to the QMS (Clause 4.1)
- Include climate-related stakeholder requirements when identifying interested parties and their expectations (Clause 4.2)
- Address climate-related risks and opportunities within QMS planning (Clause 6.1)
- Consider environmental sustainability in product design, service delivery, and supply chain management
It is important to understand that ISO 9001 is not becoming ISO 14001. The climate and sustainability requirements will be integrated within the quality management context - meaning organizations need to consider how climate factors affect their ability to consistently deliver quality products and services, not implement a full environmental management system. Think of it as climate-aware quality management rather than quality-integrated environmental management.
How This Differs from ISO 14001
| Aspect | ISO 9001 (Expected) | ISO 14001 |
|---|---|---|
| Focus | How climate affects quality outcomes | Managing environmental impacts |
| Scope | Climate as a context/risk factor for QMS | Full environmental management system |
| Requirements | Consider and address climate relevance | Environmental aspects, impacts, compliance obligations |
| Depth | Proportionate to relevance to quality | Comprehensive environmental program |
Digital Transformation Considerations
The 2015 version of ISO 9001 was drafted before cloud computing, artificial intelligence, and digital-first business models became mainstream. The revision is expected to address how digital transformation affects quality management.
Expected Areas of Change
- Digital products and services: Clearer guidance on applying quality requirements to software, digital platforms, AI-powered services, and data-driven products
- Documented information in digital environments: Updated requirements reflecting that most organizations now manage documentation electronically, including considerations for digital signatures, cloud storage, and data integrity
- Digital monitoring and measurement: Recognition of automated monitoring, real-time data collection, and analytics-driven quality management
- Cybersecurity as a quality concern: Where digital systems are integral to product or service delivery, their security affects quality outcomes
- Remote and hybrid work: Considerations for managing quality in distributed work environments
AI and Automation
As organizations increasingly use AI and automation in their processes, the revised standard may address:
- Validation of AI-driven decision-making in quality-critical processes
- Competence requirements for personnel overseeing automated systems
- Traceability and transparency of automated quality decisions
- Change management for AI/ML models that evolve over time
Risk-Based Thinking Evolution
Risk-based thinking was introduced as a concept in ISO 9001:2015, replacing the previous "preventive action" requirement. The revision is expected to evolve this concept further, reflecting the increased maturity of risk management practices across organizations.
Expected Enhancements
- More explicit connection between risk identification and process controls
- Supply chain risk management: Greater emphasis on understanding and managing risks across the supply chain, informed by lessons from recent global disruptions
- Opportunity management: More balanced treatment of opportunities alongside risks, encouraging organizations to actively pursue improvement and innovation
- Resilience considerations: The ability of the QMS to adapt and recover from disruptions, linking quality management with organizational resilience
- Integration with enterprise risk management: Better alignment between QMS risk management and broader organizational risk frameworks
Despite these enhancements, ISO 9001 is still not expected to mandate a formal risk management process equivalent to ISO 31000. Risk-based thinking will remain a principles-based approach rather than a prescriptive methodology. The flexibility that allows organizations of all sizes to implement risk management proportionately is likely to be preserved.
Preparing Early: Practical Steps
While the final standard is not yet published, organizations can take several practical steps now to prepare for the transition. Early preparation reduces transition stress and may also improve your current QMS.
1. Monitor ISO/TC 176 Publications
Stay informed about the revision's progress by following:
- ISO/TC 176 official communications and newsletters
- Your national standards body (BSI, ANSI, DIN, BIS, etc.) for country-specific updates
- Your certification body, which will publish transition guidance as the standard develops
- ISO.org for official stage progression updates
2. Conduct a Gap Assessment Against Known Changes
Even before the final standard is published, you can assess your readiness against the themes that are clearly emerging:
| Area | Gap Assessment Question | Action If Gap Exists |
|---|---|---|
| Climate Context | Does your context analysis (4.1) consider climate-related factors? | Add climate factors to your internal/external issues analysis |
| Sustainability Stakeholders | Have you identified climate/sustainability-related interested parties and requirements? | Update your interested parties register |
| Climate Risks | Are climate-related risks included in your risk considerations? | Assess how climate change could affect your quality outcomes |
| Digital Maturity | Is your documented information system suitable for a digital-first environment? | Review document control for digital adequacy |
| Knowledge Management | Do you systematically capture, share, and apply organizational knowledge? | Strengthen knowledge management practices |
| Supply Chain Resilience | Do you assess and manage quality risks across your supply chain? | Enhance supplier risk assessment and monitoring |
3. Strengthen Climate-Related Practices
- Review how climate change could disrupt your supply chain, raw material availability, or service delivery
- Consider how changing environmental regulations affect your products or services
- Evaluate whether your customers are increasingly requiring sustainability information
- If you already have ISO 14001, leverage existing environmental analysis for your QMS context
4. Review Digital Maturity
- Assess whether your document control system adequately manages digital documents (version control, access, integrity)
- Review how digital tools are used in monitoring and measurement, and ensure they are validated
- If AI or automation is used in quality-critical processes, ensure validation and oversight mechanisms are in place
- Consider cybersecurity as a quality risk where applicable
5. Embed Risk-Based Thinking More Deeply
- If you have been treating risk-based thinking informally, consider formalizing it with a simple risk register
- Extend risk consideration beyond your own operations to your supply chain
- Balance risk management with opportunity identification and pursuit
- Build resilience into your quality processes by considering business continuity scenarios
Transition Planning
Based on previous ISO management system standard transitions, organizations should expect a three-year transition period from the date of publication. Here is a recommended approach for managing the transition effectively.
Transition Timeline Approach
| Phase | Timing (Relative to Publication) | Activities |
|---|---|---|
| Awareness | Now - Publication | Monitor development, attend briefings, preliminary gap assessment, budget planning |
| Planning | Publication + 0-6 months | Obtain the new standard, conduct detailed gap analysis, develop transition project plan, allocate resources |
| Implementation | Publication + 6-24 months | Update documentation, implement new/changed requirements, train staff, conduct internal audits against new requirements |
| Certification | Publication + 18-30 months | Schedule transition audit with certification body, address findings, obtain new certificate |
| Buffer | Publication + 30-36 months | Contingency period for any delays or additional findings to resolve before transition deadline |
Key Transition Considerations
- Certification body capacity: During previous transitions, certification bodies experienced high demand in the final year. Early movers have better scheduling flexibility
- Cost planning: Budget for obtaining the new standard, potential consulting support, staff training, and audit fees
- Integration with other standards: If you hold multiple ISO certifications, plan transitions together where possible to reduce effort and cost
- Surveillance audit alignment: Work with your certification body to align the transition with your regular surveillance audit schedule
Organizations that began their ISO 9001:2008 to 2015 transition early reported a smoother, less stressful experience. Those that waited until the final year faced resource constraints, certification body scheduling challenges, and rushed implementations. The same pattern is expected for this transition. Begin your preparation now, even before the final standard is published - many of the expected changes represent good management practice regardless of the standard's final requirements.
The ISO 9001 revision is not a threat to your existing QMS - it is an opportunity to modernize your quality management approach. Organizations that embrace the changes proactively, rather than treating them as a compliance burden, will gain a competitive advantage through better risk management, stronger supply chain resilience, and closer alignment with evolving customer and market expectations.
Frequently Asked Questions
When will the new ISO 9001 be published?
The new version of ISO 9001 is expected to be published in 2027-2028. The Committee Draft (CD) stage is underway as of 2025, followed by the Draft International Standard (DIS) expected in 2026 and the Final Draft International Standard (FDIS) in 2027. These timelines may shift depending on the consensus process within ISO/TC 176 and whether additional ballot rounds are needed at any stage.
Will I need to recertify when the new version is released?
Yes, organizations certified to ISO 9001:2015 will need to undergo a transition audit to the new version within the transition period, which is typically 3 years from the date of publication. This means if the standard is published in 2028, the transition deadline would be approximately 2031. The transition audit can often be combined with a scheduled surveillance or recertification audit to minimize disruption and cost.
What are the main changes expected in ISO 9001:2026?
Key expected changes include: integration of climate change and sustainability considerations aligned with the ISO London Declaration; digital transformation requirements addressing cloud computing, AI, and digital-first business models; enhanced risk-based thinking with greater emphasis on supply chain resilience; strengthened knowledge management and innovation requirements; and adoption of the updated ISO Harmonized Structure. The fundamental PDCA and process approach framework is expected to be preserved.
Should I wait for the new version before getting certified?
No, do not wait. Certify now under ISO 9001:2015 and transition later when the new version is published. Waiting means losing years of competitive advantage, customer confidence, and process improvement benefits that certification delivers. Organizations that are already certified will have a well-established QMS foundation, making the transition significantly easier than starting from scratch with the new version. The transition from 2008 to 2015 proved that experienced organizations adapt much faster.
Will the revision affect my existing QMS?
Yes, updates to your QMS will be needed, but the fundamental framework of quality management remains unchanged. A well-built QMS based on ISO 9001:2015 will adapt easily because the core principles - process approach, risk-based thinking, PDCA cycle, and leadership commitment - are being enhanced rather than replaced. The main additions are expected to relate to climate context considerations, digital maturity, and strengthened supply chain risk management. Organizations that have been genuinely improving their QMS will find the transition manageable.