ISO 9001:2026: what changes underneath isn't the paperwork

The new edition of ISO 9001 is already part of the conversation. And more useful than any summary of changes is a simple question: does your company already know the standard is being updated?

The revision is described as evolutionary, not revolutionary. The process approach and risk-based thinking remain at the centre. But there are two movements that shouldn't be read lightly: risks and opportunities are treated separately, and quality culture and ethical behaviour appear explicitly, especially in leadership.

A three-year transition period is expected, subject to what the IAF and your certification body confirm. Three years sounds like a lot — until you remember how long it takes an organisation to change how it manages risk and how it decides.

And doubts are normal. Almost nobody is clear on what "quality culture" means in practice, or how it gets audited.

My reflection is that the real change isn't in the documents, it's in where quality lives. If risk and ethics become visible requirements, it's no longer enough for top management to sign a policy and delegate the rest. The standard asks for genuine involvement: leaders who ask about the real risks, who hold uncomfortable decisions, and who set the example when doing the right thing costs time or money.

I've seen it in audits: the management systems that work aren't the ones with the most procedures, they're the ones with leadership that actually uses them to decide.