Standard status
- Current published edition
- ISO 9001:2026 (published September 16, 2026)
- Assessments conducted against
- The 2026 edition. ISO 9001:2015 may still be used by bodies not yet transitioned until the transition deadline below, after which only the 2026 edition applies.
- Transition deadline
- September 30, 2029
- Scheme type
- Management systems (quality)
ISO 9001 is the international standard for a quality management system, the way an organization runs itself so that it consistently meets customer and regulatory requirements and improves over time. An organization certified to ISO 9001 has had that system assessed against the standard by a certification body. The sixth edition, ISO 9001:2026, was published on September 16, 2026, replacing the 2015 edition and incorporating the 2024 amendment on climate change. What turns an ISO 9001 certificate into something a customer or a buyer can rely on is not only the standard itself. It is whether the certification body that issued it was independently accredited.
What a quality management system is
A quality management system is the set of policies, processes and responsibilities through which an organization plans, delivers, checks and improves the quality of what it provides. ISO 9001 does not prescribe a single way of working. It sets out what a capable quality management system must address, and leaves each organization to meet those requirements in a way that fits its own size, sector and risk. The standard is explicit about the latitude it allows: two organizations that both meet it need not be built alike, need not arrange their documents in the order the clauses run, and need not adopt the standard's vocabulary for internal use.
The standard is built on a small set of quality management principles, drawn from ISO 9000 and carried through successive editions. They are customer focus, leadership, engagement of people, the process approach, improvement, evidence-based decision making, and relationship management. Read together, these describe an organization that understands what its customers need, directs its people toward meeting those needs, manages its work as connected processes rather than isolated tasks, and improves on the basis of evidence rather than assumption.
ISO 9001 is the most widely adopted management system standard in the world. ISO's own annual survey has recorded more than 1.5 million ISO 9001 certificates across more than 170 countries, held by organizations of every size and in almost every sector. That reach is the reason the standard functions as a common language of quality between a buyer and a supplier who may never meet.
What ISO 9001 requires
The requirements rest on three ideas that run through the whole standard: managing the work as connected processes, thinking about risk and opportunity throughout, and the plan-do-check-act cycle of planning, doing, checking and improving. They are then set out across seven areas, clauses 4 to 10, and an organization is assessed against all of them at a scope that fits what it does.
Context of the organization
The organization works out which internal and external issues bear on what it is for and where it is going, and which of them could stop its quality management system doing what it is meant to do. Climate change is one it has to consider by name. It then identifies the interested parties who matter to the system, establishes what they require, and decides which of those requirements the system will carry. From that it fixes the system's boundaries, names the products and services inside them, justifies anything in the standard it treats as not applicable, and establishes the processes the system is made of, with their inputs, outputs, order, criteria, resources, responsibilities and risks.
Leadership
Top management demonstrates leadership and commitment to the system, keeps the focus on knowing what customers require and what the law requires and on meeting both consistently, establishes a quality policy, and assigns responsibilities and authorities for named outcomes, among them holding the system together when changes are made. Among the things top management promotes, the 2026 edition names quality culture and ethical behavior, the process approach, and risk-based and opportunity-based thinking.
Planning
Working from its context and from what its interested parties require, the organization settles which risks and which opportunities it is going to act on. It then identifies, analyzes and weighs its risks and plans action scaled to what each one could cost, and does the same again separately for opportunities, with action there judged against its own circumstances. It sets quality objectives that can be measured, tracked, communicated, revised when they need to be and evidenced in writing, plans how each will be met, and plans any change to the system so that it happens under control rather than by drift.
Support
The resources the system needs: people, infrastructure, the working conditions its processes require, monitoring and measuring equipment with traceable measurement where that matters, and organizational knowledge, which has to be kept, put to use and passed on as far as the system needs. With them, the competence of anyone whose work affects how the system performs, the awareness those people need, the internal and external communication the system depends on, and the records the standard and the organization require.
Operation
The core of delivery: planning and controlling the processes that deliver, communicating with customers, pinning down and reviewing requirements before committing to supply, design and development where it applies, keeping control of whatever is bought in or outsourced, controlling production and service delivery including identification and traceability, preservation, what happens after delivery and changes along the way, releasing nothing until the planned checks are complete, and dealing with anything that fails to conform.
Performance evaluation
Monitoring, measuring, analyzing and evaluating how the system performs, including monitoring customer satisfaction and evaluating the effectiveness of actions taken on risks and on opportunities separately; internal audit against both the standard and the organization's own requirements, under a planned audit program; and management review by top management against a defined set of inputs, producing decisions on improvement, changes and resources.
Improvement
Keeping the system suitable, adequate and effective over time, acting on what evaluation and management review turn up to find opportunities and pursue them; and meeting nonconformity with correction, a look at the cause, and corrective action matched to the harm done, so the same problem does not return or surface somewhere else.
What changed in ISO 9001:2026
ISO describes the sixth edition as a technical revision of the 2015 standard rather than a rewrite, and it also incorporates the 2024 amendment on climate change. The clause structure and the seven quality management principles carry over, so an organization with a well-run quality management system will recognize the framework it already operates. The changes are concentrated in a few places.
Core terms now appear in the standard
Clause 3 previously did no more than point the reader at ISO 9000. It now carries a short set of core management system definitions in the standard itself. ISO 9000 is still the normative reference for quality management terminology as a whole, so the change adds convenience rather than a new source of definitions.
Quality culture and ethical behavior
This is new to the requirements and appears in several places rather than as a clause of its own. Promoting quality culture and ethical behavior is now among the things top management shows leadership through, and a note ties both to an organization's values, attitudes and the way it actually conducts itself. Anyone working under the organization's control has to be aware of them. The clause on working conditions adds that culture and ethics can shape some of the factors that make conditions suitable in the first place. And the quality policy may now carry them too, reflecting how the organization thinks about quality and what it expects of people's conduct, so far as that suits its circumstances.
Risks and opportunities separated
The 2015 edition handled risks and opportunities as a pair throughout. The 2026 edition identifies them together and then parts them: one subclause for working out what they are, one for acting on risks, one for acting on opportunities. The two are also held to different tests. Action on a risk is scaled to how much that risk could cost the system's intended results. Action on an opportunity is measured instead against the organization's own circumstances and against whether it moves the organization toward the results it is after. The split carries through to performance evaluation and to management review, where action on risks and action on opportunities are now judged as two items rather than one.
Management of change strengthened
Where the 2015 edition listed four things to weigh before changing the quality management system, the 2026 edition lists seven, and frames the list as what makes a change actually take hold. The three additions are telling people about the change, settling in advance how its effectiveness will be tracked and judged, and settling how its results will be reviewed once it is in. Read with the standing requirement that the system holds together across a change, the effect is that a change is now expected to be closed out and checked, not merely planned.
Climate change
The requirement to consider whether climate change bears on the organization, introduced by the 2024 amendment to the 2015 edition, is now part of the standard itself, with a note that interested parties may bring climate-related requirements of their own. An organization that already applied the amendment has nothing new to do here.
Annexes
The explanatory Annex A has been expanded. It is informative material on how the standard is put together, what its terms mean and what the requirements are driving at, and it adds no requirements of its own. Annex B, which listed other standards from the same ISO committee, is gone; those pointers now sit in Annex A and on the committee's own website.
Smaller changes to note
Several changes are not in ISO's own summary but show up on a clause-by-clause reading. Where the 2015 edition required documented information to be maintained or retained, the 2026 edition requires it to be available, which shifts the emphasis from the act of keeping a record to the record being there when it is needed. Clause 10 is reorganized: continual improvement moves up to 10.1, the old general subclause goes, and improvement is left as those two headings. Management review "outputs" become management review "results". Customer satisfaction is now monitored as such, with the organization choosing how it gathers and reviews the information, where the 2015 edition at 9.1.2 asked it to "monitor customers' perceptions of the degree to which their needs and expectations have been fulfilled". Organizational knowledge must now be kept, used and passed on, and is tied to what the system is meant to achieve rather than to product and service conformity. And customer communication about contingency actions is now a matter of giving customers information about them, interruptions to supply included, where the 2015 edition asked for specific contingency requirements to be established.
What the new edition means for an organization already certified
An organization certified to ISO 9001:2015 moves to the 2026 edition during a transition period rather than at the moment of publication. For certificates issued by ASCB-accredited certification bodies, the transition deadline is September 30, 2029. After that date only the 2026 edition applies.
The detail that governs any particular certificate, including when the move will be assessed and what the certification body will look at, comes from the certification body that issued it. An organization planning its move confirms that detail with its certification body. The current status of the standard itself can be checked at iso.org.
Certification is not the whole story
A certificate shows that a certification body assessed an organization and judged its quality management system to meet ISO 9001. That judgment applies at the scope stated on the certificate, and it reflects what was found at the time of assessment. That raises an obvious question that the certificate itself cannot answer: who checked the certification body?
That is what accreditation does. Accreditation is the independent assessment of the certification body itself, carried out by an accreditation body. ASCB accredits certification bodies that certify management systems against ISO/IEC 17021-1, the international standard that sets the requirements for those bodies, together with the sector-specific requirements that apply to a given scope. ASCB itself works to ISO/IEC 17011, the international standard for accreditation bodies.
So an accredited ISO 9001 certificate has been checked at two levels. The organization was assessed against ISO 9001 by the certification body. The certification body was, in turn, assessed against ISO/IEC 17021-1 by an accreditation body working to ISO/IEC 17011. A certificate from a certification body that holds no accreditation has been checked only at the first level, with no independent check on the certifier that issued it.
Accreditation is a periodic, risk-based assessment of a certification body against the requirements of the relevant standard, carried out by sampling and reflecting what was found at the time of assessment. It is not a continuous or exhaustive check, and it is not a guarantee of any individual certification decision or of any certified organization's products, services or outcomes. What it provides is independent, repeated assessment of the body issuing certificates against the requirements of ISO/IEC 17021-1, including its impartiality and the consistency of its decisions.
Why an accredited ISO 9001 certificate carries more weight
For the organization that holds it, an accredited certificate is evidence that has already been through two independent checks rather than one, which is what lets a customer or a buyer rely on it rather than take it unverified. For the buyer relying on it, the practical value is the same distinction seen from the other side: accredited certification narrows the field to certifiers who have themselves been independently assessed, and it can be verified rather than accepted without checking.
The accreditation behind an ISO 9001 certificate is also publicly checkable. Certificates issued by ASCB-accredited certification bodies are recorded on IRQAO, an independent register and validation service on which a certificate's current status can be confirmed, and the accredited status of the body that issued it can be confirmed on ASCB's verify page. A buyer does not have to rely on the paper document alone.
For an organization specifying certification in a tender or a supplier qualification process, the distinction to write in is between certification and accredited certification. Requiring accredited certification, rather than certification alone, is the single change that makes the credential independently verifiable at every level.
Is ISO 9001 certification the same as accreditation?
No, and the two words are often used as if they mean the same thing. Certification applies to the organization: a certification body certifies that an organization's quality management system meets ISO 9001. Accreditation applies to the certification body: an accreditation body assesses the certification body against ISO/IEC 17021-1. An organization is certified to ISO 9001. A certification body is accredited against ISO/IEC 17021-1. Accreditation is the final level of checking: accreditation bodies are not themselves accredited by a higher body, and what stands behind an accreditation body is the standard it works to. ASCB works to ISO/IEC 17011, the international standard setting the requirements for accreditation bodies.
How to check an ISO 9001 certificate
There are two separate checks, and they answer different questions. To confirm a specific certificate, verify it on the register on which the issuing body records its certificates; for ISO 9001 certificates issued by ASCB-accredited bodies, that is IRQAO. To confirm that the certification body itself is accredited, and to see the full scope of its accreditation, use ASCB's verify page. The two checks together are stronger than either alone: the first confirms the certificate is current, the second confirms the body that issued it was independently assessed and for what.
Where ISO 9001 sits among the standards
ISO 9001 is the central quality management system standard and sits in a wider family:
• ISO/IEC 17021-1: the standard a certification body is assessed against to certify ISO 9001, and the accreditation behind an accredited ISO 9001 certificate.
• ISO 9000: the quality management vocabulary and principles ISO 9001 draws on, and the normative reference for quality management terminology.
• ISO 9002: guidance on the application of the clauses of ISO 9001.
• ISO 9004: guidance on managing for the sustained success of an organization, going beyond the certifiable requirements of ISO 9001; it is guidance, not a certification standard.
• ISO 19011: guidance for auditing management systems, which informs how an ISO 9001 system is audited.
• ISO 10010: guidance on quality culture, which the 2026 edition points to in connection with the new quality culture and ethical behavior requirements.
• ISO 14001, ISO 45001 and ISO/IEC 27001: other widely held management system standards that share the same high-level structure as ISO 9001, so an organization can run them as one integrated system.
Common questions
What is ISO 9001?
ISO 9001 is the international standard for a quality management system. It sets out what an organization's system for consistently meeting customer and regulatory requirements must address, without prescribing a single way of meeting them.
What does ISO 9001 certification mean?
It means a certification body has assessed an organization's quality management system and judged it to meet the requirements of ISO 9001, at the scope stated on the certificate and at the time of assessment.
What is the latest version of ISO 9001?
ISO 9001:2026, the sixth edition, published on September 16, 2026. It replaces ISO 9001:2015 and incorporates the 2024 amendment on climate change.
What changed in ISO 9001:2026?
Core management system terms now appear in the standard itself; quality culture and ethical behavior enter the requirements through leadership, awareness, the quality policy and the conditions people work in; risks and opportunities are separated and acted on their own terms; the handling of change is strengthened; the climate change requirement from the 2024 amendment is incorporated; the explanatory Annex A is expanded and Annex B is removed.
How long is the transition to ISO 9001:2026?
For certificates issued by ASCB-accredited certification bodies, the transition deadline is September 30, 2029. Confirm the detail for any particular certificate with the certification body that issued it, and check the current status at
iso.org.
Does ISO 9001 certification guarantee product or service quality?
No. Certification concerns the organization's quality management system, assessed against the standard at a point in time. It is evidence that the system meeting the standard's requirements was in place and operating, not a guarantee about any individual product or service.
What is the difference between ISO 9001 certification and accreditation?
Certification is of the organization against ISO 9001. Accreditation is of the certification body against ISO/IEC 17021-1. Accreditation is the independent check on the certifier behind the certificate.
How do I check an ISO 9001 certificate is genuine?
Verify the certificate on the register on which the issuing body records it, and separately confirm on
ASCB's verify page that the certification body is accredited and for what scope.
Why does it matter whether the certification body is accredited?
Because accreditation is the only check that independently examines the certifier itself. Without it, a certificate rests solely on the body that issued it, with no independent check on the certifier.
How to apply
How to apply for accreditation to certify other organizations against ISO 9001, under ISO/IEC 17021-1, including the process, the fees and the application documents, is set out on Become Accredited.