ISO 9001 is the international standard that specifies requirements for a quality management system (QMS), enabling an organization to supply products and services that consistently meet customer, statutory and regulatory requirements. It is produced by ISO/TC 176/SC 2, the subcommittee on quality systems, whose page on 23 October 2026 listed three published standards and one standard under development (ISO, no date).
The sixth edition, ISO 9001:2026, was published in September 2026 and replaces the withdrawn ISO 9001:2015 together with its Amendment 1:2024 (ISO, 2026b). That change puts two decisions before quality professionals. Organizations decide whether to carry out a new QMS directly to the 2026 edition or to transition an existing ISO 9001:2015 certification before the accreditation deadlines expire. Individuals, meanwhile, decide which credential matches their quality role. This article addresses both decisions.
Standards Academy teaches ISO 9001 as the management system through which top management delivers the quality outcomes the governing body expects. ISO 37000, written in ISO/TC 309/WG 1 under the convenorship of Standards Academy's director, sets the governing body's oversight of performance and conformance (ISO, 2021, Clause 6.4); ISO 9001 is the instrument management uses to meet that expectation for products and services.
Scope and purpose of ISO 9001
ISO 9001:2026 applies to organizations of any size and any sector: manufacturers, service providers, public-sector bodies, charities and commercial businesses alike. The standard is deliberately generic. It does not prescribe how a product should be made or a service delivered. It specifies what a quality management system is to achieve so that outputs consistently conform to requirements (ISO, 2026b).
An organization may use ISO 9001 in three distinct ways. First, as an internal management framework, without any external assessment. Second, as a contractual reference, where a customer requires conformity as a condition of supply. Third, as the basis for ISO 9001 certification, in which an independent, accredited certification body audits the QMS and issues a certificate. Certification to ISO 9001 is organizational and granted only by an accredited certification body, never by PECB, and never by Standards Academy.
The purpose of the standard is practical. It requires an organization to understand its internal and external context, identify and meet customer requirements, control the processes and risks that affect conformity, set measurable quality objectives, evaluate performance against those objectives, and pursue continual improvement.
Two companion documents support the requirements standard. ISO 9000:2026, published in May 2026 as the fifth edition, supplies the fundamentals and vocabulary on which ISO 9001 depends (ISO, 2026a). ISO 19011:2026, the fourth edition published the same month, provides guidelines for auditing management systems (ISO, 2026c). Neither is a certification standard; both are reference documents. An auditor quoting a definition cites ISO 9000, and an audit programme manager planning internal audits follows ISO 19011.
PECB credentials and training routes for quality management
A PECB credential attests the competence of a person. It confers no status on an organization's QMS. The usual route is consistent across levels: complete a training course, pass the relevant examination, and apply to PECB for the personal credential. The choice of course hence depends on the role the person performs within or around the quality management system.
The decision table below maps three common quality roles to the matching PECB credential and the Standards Academy course that prepares for it.
| Role | Credential | Course | Formats |
|---|---|---|---|
| Team member, coordinator or professional needing a working knowledge of QMS concepts and the structure of ISO 9001:2026 | PECB Certified ISO 9001 Foundation | ISO 9001 Foundation | Self-Study and eLearning |
| Quality manager or consultant responsible for establishing, implementing, maintaining and improving a QMS | PECB Certified ISO 9001 Lead Implementer | ISO 9001 Lead Implementer | Self-Study and eLearning |
| Internal auditor, audit programme manager or third-party auditor planning and conducting QMS audits | PECB Certified ISO 9001 Lead Auditor | ISO 9001 Lead Auditor | Self-Study and eLearning |
A quality manager accountable for building and running the system needs implementation depth, so the Lead Implementer credential fits. An internal auditor assessing conformity against ISO 9001:2026, applying the auditing guidance of ISO 19011:2026, needs audit methodology, so the ISO 9001 Lead Auditor credential fits. A professional who simply needs to understand the requirements, perhaps because the organization is pursuing certification or managing a transition, is served by the Foundation level.
Organizations and roles within scope
Because ISO 9001:2026 is sector-neutral, the organizations within its scope range from a three-person engineering consultancy to a multinational manufacturer, and from a hospital trust to a software house. What varies is how each organization interprets the requirements against its own processes, products and services.
Within any such organization, several roles carry defined responsibilities under the standard:
Top management holds accountability for the effectiveness of the QMS, sets the quality policy and objectives, and demonstrates leadership and commitment (Clause 5.1).
Process owners manage the individual processes that make up the system, with responsibility for inputs, outputs, performance indicators and risks.
Quality managers and QMS coordinators maintain the system day to day, manage documented information and coordinate management review.
Internal auditors evaluate whether the QMS conforms to ISO 9001:2026 and to the organization's own arrangements, following the guidance of ISO 19011:2026.
Employees and contractors performing work that affects product or service conformity shall be competent, aware of the quality policy and of their contribution to quality objectives.
External providers and suppliers fall within scope where their processes, products or services affect the organization's ability to meet requirements; Clause 8 requires controls over externally provided processes.
The mapping between these roles and PECB credentials follows the decision table in the previous section. Top management and process owners typically need Foundation-level understanding. The quality manager building or transitioning the system is the natural candidate for the Lead Implementer credential, while the internal audit function points towards the ISO 9001 Lead Auditor credential.
The seven quality management principles and the process approach
ISO 9001:2026 rests on seven quality management principles defined in ISO 9000:2026 (ISO, 2026a). They are not auditable requirements; every requirement in the standard rests on at least one of them:
Customer focus, the primary aim of quality management is meeting customer requirements and striving to exceed customer expectations.
Leadership, leaders at all levels establish unity of purpose and create conditions in which people engage with quality objectives.
Engagement of people, competent, enabled people throughout the organization are essential to creating and delivering value.
Process approach, consistent, predictable results are achieved more effectively when activities are understood and managed as interrelated processes functioning as a coherent system.
Improvement, successful organizations maintain an ongoing focus on improvement.
Evidence-based decision making, decisions based on the analysis and evaluation of data are more likely to produce intended results.
Relationship management, sustained success depends on managing relationships with interested parties, including suppliers and partners.
The process approach deserves particular attention because it shapes how the whole standard is applied. Each process is defined with its inputs, outputs, responsibilities, resources, performance indicators and controls, and the interactions between processes are managed deliberately. The standard pairs this with the Plan-Do-Check-Act (PDCA) cycle (plan the process, operate it, check its performance, act on the results) and with risk-based thinking, which requires the organization to determine the risks and opportunities that could affect conformity and to plan actions to address them.
For a quality manager drafting a process map, or an auditor tracing a nonconformity to its source, these principles are working tools. They supply the rationale an auditor applies when judging whether a documented process actually delivers its intended result.
Requirements of a quality management system
The requirements of ISO 9001:2026 follow the harmonized structure used across ISO management system standards, the same structure found in ISO 14001, ISO 21502 and ISO 28000, which makes integrated management systems considerably easier to build. The substantive requirements sit in Clauses 4 to 10, and the 2026 edition adds an informative Annex A explaining key terms and the intent of the requirements (ISO, 2026b).
Context of the organization (Clause 4). The organization determines the external and internal issues relevant to its purpose, identifies interested parties and their requirements, and defines the scope of the QMS and its processes.
Leadership (Clause 5). Top management demonstrates commitment, establishes a quality policy, and assigns roles, responsibilities and authorities. Customer focus is an explicit leadership obligation.
Planning (Clause 6). The organization addresses risks and opportunities, sets measurable quality objectives, and plans changes to the QMS in a controlled manner.
Support (Clause 7). This clause covers resources, competence, awareness, communication and documented information, the infrastructure, people and records that keep the system operating.
Operation (Clause 8). The longest clause, covering operational planning and control, requirements for products and services, design and development, control of externally provided processes, products and services, production and service provision, release, and control of nonconforming outputs. Design and development and the control of externally provided processes are frequent focal points in third-party audits, because nonconformities most often arise there.
Performance evaluation (Clause 9). Monitoring, measurement, analysis and evaluation, internal audit, and management review. Internal audits are planned and conducted using the guidance of ISO 19011:2026.
Improvement (Clause 10). Nonconformity and corrective action, and continual improvement of the suitability, adequacy and effectiveness of the QMS.
ISO 9001:2026 and the transition from the 2015 edition
ISO 9001:2026 was published on 16 September 2026 as the sixth edition of the standard. It replaces ISO 9001:2015 and Amendment 1:2024, both of which are now withdrawn (ISO, 2026b; ISO, 2015). Any organization implementing a QMS today should write it to the 2026 edition. The main changes are clearer requirements, a stronger treatment of leadership and quality culture, the separation of risks from opportunities, and the new Annex A (ISO, 2026b).
The accreditation rules governing the ISO 9001 transition were published by Global Accreditation Cooperation Incorporated (Global ACI) (Global Accreditation Cooperation Incorporated, 2026). Two dates define the timetable:
31 March 2028: from this date, new and initial accredited certifications may be issued only to ISO 9001:2026.
30 September 2029: the three-year transition period ends, and ISO 9001:2015 certificates cease to be valid.
An organization certified to ISO 9001:2015 may complete its transition during a routine surveillance audit, at recertification, or through a dedicated transition audit, in each case conducted by its accredited certification body. In practice, the organization updates its QMS to the 2026 requirements, trains the people affected, runs internal audits against the new edition, and then presents the updated system for assessment.
Standards Academy's ISO 9001 courses teach the 2026 edition against the governance expectation it serves, so that the quality manager and the internal auditor can show the governing body how the system meets its oversight duty under ISO 37000.
Frequently asked questions
What does ISO 9001 require?
ISO 9001:2026 requires organizations to determine their context, demonstrate leadership commitment, plan for risks and opportunities, provide adequate support and resources, control operational processes, evaluate performance through audits and management review, and pursue continual improvement including corrective actions for nonconformities.
Who certifies an organization to ISO 9001?
An accredited certification body certifies an organization to ISO 9001 after auditing its quality management system. Neither PECB nor Standards Academy certifies organizations. PECB credentials attest the competence of individual professionals, which is a separate matter from the organizational certification granted by an accredited certification body.
What changes in ISO 9001:2026?
ISO 9001:2026 is the sixth edition, published on 16 September 2026. It replaces and withdraws ISO 9001:2015 together with Amendment 1:2024, consolidating the amendment's content into a single current text. The changes clarify requirements, strengthen leadership and quality culture, separate risks from opportunities and add an explanatory Annex A. Organizations implementing or updating a QMS should now work to the 2026 edition (ISO, 2026b).
How long does an organization have to transition from ISO 9001:2015 to ISO 9001:2026?
Global ACI has set a three-year transition period ending 30 September 2029, by which date ISO 9001:2015 certificates cease to be valid. From 31 March 2028, new and initial accredited certifications may only be issued to ISO 9001:2026 (Global Accreditation Cooperation Incorporated, 2026).
Which credential suits a quality manager and which an internal auditor?
A quality manager responsible for establishing, implementing, maintaining and improving a quality management system is matched to the PECB Certified ISO 9001 Lead Implementer credential. Internal auditors and third-party auditors assessing conformity against ISO 9001:2026 are matched to the PECB Certified ISO 9001 Lead Auditor credential, which applies the guidance of ISO 19011:2026 for auditing management systems.
What are the seven quality management principles?
The seven principles are: customer focus, leadership, engagement of people, process approach, improvement, evidence-based decision-making, and relationship management. These principles underpin every requirement in ISO 9001:2026 and guide how organizations build and operate their quality management systems effectively.
References
Global Accreditation Cooperation Incorporated (2026) Global ACI publishes transition requirements for ISO 9001:2026. Available at: https://global-aci.org/en/news/global-aci-publishes-transition-requirements-for-iso-90012026/ (Accessed: 23 October 2026).
International Organization for Standardization (2021) ISO 37000:2021 Governance of organizations. Guidance. Geneva: ISO. Available at: https://www.iso.org/standard/65036.html (Accessed: 23 October 2026).
International Organization for Standardization (2015) ISO 9001:2015 Quality management systems. Requirements (withdrawn). Geneva: ISO. Available at: https://www.iso.org/standard/62085.html (Accessed: 23 October 2026).
International Organization for Standardization (2026a) ISO 9000:2026 Quality management. Fundamentals and vocabulary. Geneva: ISO. Available at: https://www.iso.org/standard/9000 (Accessed: 23 October 2026).
International Organization for Standardization (2026b) ISO 9001:2026 Quality management systems. Requirements. Geneva: ISO. Available at: https://www.iso.org/standard/9001 (Accessed: 23 October 2026).
International Organization for Standardization (2026c) ISO 19011:2026 Guidelines for auditing management systems. Geneva: ISO. Available at: https://www.iso.org/standard/19011 (Accessed: 23 October 2026).
International Organization for Standardization (no date) ISO/TC 176/SC 2 Quality systems. Available at: https://www.iso.org/committee/53896.html (Accessed: 23 October 2026).
