ISO 9001 is the international standard that sets out the requirements for an organization to establish, implement, maintain and continually improve a quality management system (QMS). Its purpose is to put in place processes that let products and services meet customer expectations and legal requirements consistently. The International Organization for Standardization (ISO) says more than one million certificates have been issued in 189 countries, making ISO 9001 the most widely used quality management standard in the world.
The current edition is now ISO 9001:2026. According to ISO's standard page, the sixth edition was published on 16 September 2026 and the 2015 edition has been withdrawn. Certified organizations will move to the new edition within the time frame set by their certification cycle.
In short:
- ISO 9001 is a management system standard for organizations of any size and sector; it governs the processes that deliver quality, not the technical specification of a product (ISO).
- The 2026 edition keeps the framework; it improves clarity, puts more weight on quality culture and leadership, and treats risks and opportunities separately (ISO).
- Certification is voluntary; for a company holding a 2015 certificate, the first step is to agree the transition timetable with its certification body.
What is ISO 9001 and what is it for?
ISO describes ISO 9001 as a standard that helps organizations improve performance, meet customer expectations and demonstrate their commitment to quality. In practice it means a company can show that it delivers reliable products or services time after time through defined processes and trained staff, rather than depending on a few people who "know how it's done".
The definition of quality behind the standard reflects the same idea. In the core vocabulary of ISO 9000:2026, quality is the degree to which the inherent characteristics of an object fulfil requirements, where the object can be a product, but also a service, process, person or organization. Quality is therefore measured by how far requirements are met, not by how premium something looks.
According to ISO, any sector can use the standard, from manufacturing and services to healthcare, education, government and non-profits. Certification bodies and other third parties also use ISO 9001 to assess an organization's conformity.
Which areas does an ISO 9001 quality management system cover?
ISO summarizes the scope of the standard in seven areas:
- Context of the organization: identifying the internal and external factors that affect the intended results of the QMS.
- Leadership: the role of top management in setting up and maintaining the system.
- Planning: measures to reach quality objectives and improve the system's effectiveness.
- Support: resources, competence, awareness, communication and documented information.
- Operation: planning, implementing and controlling the processes needed to meet customer requirements.
- Performance evaluation: monitoring, measuring, analysing and evaluating the QMS.
- Improvement: continually increasing the system's effectiveness based on the evaluation results.
This structure is shared with other ISO management system standards. ISO notes that ISO 9001 and the environmental standard ISO 14001 have a common structure, so an organization using one can add the other to its existing system more easily; see What is ISO 14001 for the environmental side. The same logic applies to information security: ISO 27001 can sit under the same roof.
Has ISO 9001:2026 been published, and what has changed?
Yes. ISO's standard page gives the following details:
| Item | ISO 9001:2026 |
|---|---|
| Status | Published (60.60) |
| Publication | September 2026 (16 September in the page text) |
| Edition | 6 |
| Pages | 36 |
| Technical committee | ISO/TC 176/SC 2 |
| Replaces | ISO 9001:2015 and its 2024 Amendment 1 (both withdrawn) |
ISO explains that the decision to revise was reached by consensus in August 2023, following a global consultation that year. The main directions of the new edition are:
- Clarity: helping organizations of every size, maturity and purpose understand the requirements better.
- Quality culture and leadership: greater emphasis on both.
- Risks and opportunities separated: so that organizations act proactively to pursue beneficial results.
- Alignment: closer alignment with other ISO management system standards, making integrated systems easier.
ISO says the edition builds on the trusted framework with targeted updates to stay relevant in a fast-changing digital landscape. In other words, a system built to the 2015 edition is not thrown away; it is reviewed.
What should a company certified to ISO 9001:2015 do?
According to ISO, ISO 9001:2015 is no longer the current edition and organizations are encouraged to refer to the 2026 edition. Certified organizations must transition within the time frame set by their certification cycle and are asked to contact their certification body for details.
A practical order for the transition (a planning suggestion, not a requirement from a source):
- Get the transition timetable from your certification body in writing, so it is clear which edition the next surveillance or recertification audit will use.
- Run a gap analysis of your current documents against the new requirements on quality culture, leadership, risks and opportunities.
- Repeat the internal audit and management review against the new edition.
- Consider an integrated approach: ISO 14001 was also revised in 2026, and handling both transitions in one plan avoids duplicated work.
How do sector-specific quality standards differ from ISO 9001?
ISO 9001 is generic by design. ISO lists sector standards built on it, including ISO 13485 for medical devices, ISO 22163 for railways, ISO 29001 for petroleum and natural gas and ISO/IEC/IEEE 90003 for software. ISO 13485, for example, focuses on regulatory compliance for medical devices, omitting some generic ISO 9001 requirements while adding sector-specific ones.
Aviation, space and defence follow the same logic, but with a family developed outside ISO by the sector's own body, the IAQG: AS9100D for design and production, and AS9110C for maintenance organizations.
Is ISO 9001 certification mandatory?
No. According to ISO, organizations implementing ISO 9001 choose whether or not to seek certification. A certificate is a way to show customers and other stakeholders a commitment to consistent quality, and one issued by an accredited conformity assessment body can add a further layer of confidence. Some customers and tenders do require an ISO 9001 certificate from suppliers, in which case it becomes a contractual condition.
Conclusion: is ISO 9001 a certificate or a way of working?
ISO 9001 is a framework that moves quality away from individual attentiveness and ties it to defined processes, measurement and regular management review. ISO 9001:2026, published on 16 September 2026, keeps that framework and sharpens it with quality culture, leadership and a clearer split between risks and opportunities. A practical start is to get the transition timetable from your certification body, run a short gap analysis and plan the internal audit against the new edition.
"ISO 9001:2026 – Quality Management System" is part of Orient Global's corporate training catalogue; details are on the trainings page.
#interimmanagement #forwarddeployedengineering #iso9001 #qualitymanagementsystem #quality