ISO 9001:2026 — transition support
ISO 9001:2026 transition consulting — without the invented deadline.
What the transition actually involves
There is a great deal of noise around this revision, and most of it is selling urgency against a date that does not exist. So we will start with the two facts that matter. The sixth edition of ISO 9001 is scheduled for 16 September 2026 — announced by ISO/TC 176/SC 2 on 7 August, and a committee schedule rather than an accomplished fact. And no transition deadline has been published by anybody. The mandatory document that will set one is still listed in Global ACI's own records without a number.
What is worth doing now is not driven by a deadline at all. It is driven by the shape of the changes. ISO describes the revision as evolutionary rather than revolutionary, with the main updates clarifying and strengthening requirements around quality culture, ethical behaviour, leadership, and the treatment of risks and opportunities. Two of those — culture and leadership evidence — are the slowest things in any management system to build, because they need a track record rather than a document. You cannot produce twelve months of demonstrable practice in the month before an audit.
The other practical change is more mundane and affects almost everyone: risks and opportunities are treated distinctly. Most organisations run a single combined register. That needs restructuring, and it is far easier done calmly than in a queue.
And if you hold ISO 14001 as well, the case for acting is stronger, because that standard has already published — 15 April 2026, with the 2015 edition withdrawn the same day. We keep a separate reference page on it. Two transitions planned together cost materially less than two transitions run separately.
What's included
A transition engagement scales to what you actually need, and the first step exists to find out which. We would rather run a delta assessment and tell you the job is small than sell you a package before either of us knows.
-
Delta assessment against the 2026 edition
A clause-by-clause read of your existing system against the new edition — what genuinely changes for you, what does not, and what an auditor will actually ask to see. Most systems need less work than the market is currently implying, and we would rather tell you that than sell you a rebuild.
-
Quality culture evidence
The hardest new area, and the one with almost no practical guidance published anywhere. Culture is not a poster. We build the evidence an auditor can examine — how leadership decisions are recorded, how concerns are raised and closed, what happens when quality and schedule conflict, and how any of that is demonstrable twelve months later.
-
Splitting risks from opportunities
The most disruptive practical change for a working system. A single combined risk-and-opportunity register — which is what most organisations have — needs reworking into distinct treatments. We do that as a restructure of what you already have rather than a new document set.
-
Climate and interested-party context refresh
The 2024 climate amendment moved from bolt-on to embedded. Clause 4 context and interested-party analysis get revisited properly rather than having a paragraph appended, which is what most transitions do and what auditors have started noticing.
-
Internal audit and management review against the new text
An auditor-grade internal audit run against the 2026 requirements before your certification body sees the system, and a facilitated management review that produces recorded decisions on the gaps it finds.
-
Certification body liaison
Establishing when your specific certification body expects to be accredited for the 2026 edition, what they will want at your transition audit, and whether it can ride an existing surveillance visit rather than becoming a separate event.
-
Combined with a new certification
If you are not yet certified, you certify to ISO 9001:2015 now and transition later like everyone else — but we build the 2026 requirements in from the start, so your transition is a confirmation rather than a project.
How we work
Every transition looks different because four things differ: your current edition, your certificate expiry, your audit cycle, and your certification body. The sequence below is fixed; the effort inside step three is not.
- 01
Establish what you actually face
Before any work is scoped: what edition you hold, when your current certificate expires, when your next surveillance and recertification audits fall, and which certification body you use. Those four facts determine the whole shape of a transition, and they differ enough between organisations that generic advice is close to useless.
- 02
Delta assessment
Two to three weeks. A clause-by-clause comparison of your system against the 2026 edition, producing a written finding list ranked by effort and by likelihood of being raised at audit. Fixed scope, fixed price, and a clear picture of whether you have a small job or a real one.
- 03
Close the gaps
Length depends entirely on the delta assessment. For a mature system that is genuinely operating, this is usually weeks rather than months, concentrated in leadership evidence and the risk register restructure. For a system that has been certificate-shaped rather than operating, the transition is the moment that becomes visible — and it is better to find out now than at the audit.
- 04
Verify before the certification body does
An internal audit against the new requirements and a management review that records what leadership decided about the findings. This is the step that separates a transition audit with no findings from one with several.
- 05
Transition audit support
We are available during the audit itself. Most transitions are conducted at a scheduled surveillance or recertification visit rather than as a standalone audit, which is usually the cheapest route — but it has to be arranged in advance with your certification body.
If you hold more than one standard
The harmonized structure means transitions overlap. Where they overlap, they should be planned as one exercise rather than several — and where a standard is outside what we do, we say so plainly.
ISO 14001:2026
Already published — 15 April 2026, with the 2015 edition withdrawn the same day. If you hold both standards, the two transitions should be planned as one exercise. They share the harmonized structure and much of the changed material sits in the same clauses. Doing them separately is paying twice.
ISO 45001
Also on the harmonized structure. Where an integrated management system covers quality, environment and safety, a transition touches the shared clauses once — context, interested parties, leadership, planning, internal audit, management review — rather than three times.
IATF 16949
Built on ISO 9001, so the automotive sector standard will need its own alignment. We do not offer IATF 16949 consulting and will say so on the first call rather than the third. If your certificate is IATF, you need a firm that works in it.
AS9100
Likewise built on ISO 9001 and likewise outside what we do. Aerospace suppliers should be asking their certification body about the AS9100 revision timetable, not about ours.
Who this is for
Transition work is worth scoping now if you recognise your organisation here:
- Manufacturers holding ISO 9001:2015 with a certificate expiring 2027 or later
- Suppliers whose customers audit their quality system directly, not just their certificate
- Organisations running integrated ISO 9001 and ISO 14001 systems, where 14001:2026 is already published
- Companies certified some years ago whose system has drifted from what is documented
- Businesses about to certify for the first time who want the 2026 requirements built in now
- Quality managers who have been asked by a board or a customer what the revision means and need a defensible answer
Frequently asked
Straight answers about the 2026 transition
Is ISO 9001:2026 published yet?
Not as of the last time we checked this page. The standard sits at ISO stage 60.00 — under publication — and ISO/TC 176/SC 2 announced on 7 August 2026 that the sixth edition is scheduled for release on 16 September 2026. That is a committee-confirmed schedule rather than an accomplished fact, and this standard has already slipped once, so we are describing it that way. Our transition tracker carries the current stage and the evidence behind it.
When is the transition deadline?
There isn't one, and that is a verifiable statement rather than an evasion. Transition periods for accredited certification are set by the accreditation community in a mandatory document. That community is now Global ACI, and its own published record of inherited work still lists the relevant document as “IAF MD XX Transition Requirements for ISO 9001” — the number is unallocated, which means the document has not been issued. Anyone quoting you a deadline today is not sourcing it from ISO or from Global ACI. We will update the day one appears.
Then why start now, if there is no deadline?
Three reasons, none of them urgency. First, the work is smaller and cheaper when it is not compressed against a date — and when a deadline does appear, every consultant and certification body in the country will be busy at once. Second, the changes concentrate in leadership evidence and quality culture, which are the slowest things to build because they need a track record rather than a document. Third, if you also hold ISO 14001, that standard published in April 2026 and the two transitions are cheaper done together. If none of those apply to you, waiting is a perfectly reasonable decision and we will say so.
What actually changed in the 2026 edition?
Less than the market is implying, and we are careful here because ISO publishes no change list at all — no news item, no abstract on the project page. The only content description ISO itself publishes is in its guidance brochure for the new edition, which says the revision is evolutionary rather than revolutionary, that the familiar structure remains, and that the main updates clarify and strengthen requirements including quality culture, ethical behaviour, leadership, and the treatment of risks and opportunities. Certification bodies working from the final draft consistently report the risk-and-opportunity split as the most disruptive practical change. We separate what ISO has said from what is being reported on our tracker.
We are certifying for the first time. Should we wait for the 2026 edition?
No. Certification bodies cannot issue accredited certificates to a new edition until their own accreditation has been extended to cover it, which takes time after publication. So a company starting today certifies to ISO 9001:2015 and transitions during whatever window is eventually set, like every existing certificate holder. What we do differently is build the 2026 requirements into the system from the start — the leadership evidence, the separated risk and opportunity treatment — so that your transition is a confirmation rather than a second project.
Will our transition be a separate audit?
Usually not, and this is worth asking your certification body about early because it affects cost materially. Most transitions are conducted at a scheduled surveillance or recertification audit, sometimes with additional audit time added. A standalone transition audit is the expensive route. Which applies to you depends on your certification body and where you sit in your three-year cycle.
How much will the transition cost?
For a system that is genuinely operating rather than certificate-shaped, considerably less than the market is currently implying — the changes are real but concentrated. The honest answer is that it depends on the delta assessment, which is exactly why we sell that as a fixed-scope, fixed-price piece of work first. If the assessment says you have very little to do, we will tell you that and you can stop there. Our certification cost breakdown covers how audit days are set.
Local context
ISO 9001 in specific markets
We work from the Kansas City metro. These pages set out what ISO 9001 actually means in each market — the named programme, regulator or customer requirement that drives it there, rather than the same page with the city name swapped.
- Kansas City, MO Our home metro. 1,449 manufacturing establishments under 100 employees, a defense supply chain anchored by the Kansas City National Security Campus, two auto assembly plants, and the largest animal health cluster in the world.
- Springfield, MO The one market where ISO 9001 is written into the industry's own credential: MEMA's Manufactured Again certification requires ISO 9001:2015 or IATF 16949:2016, with no equivalent-system route.
- Des Moines, IA New equipment capacity arriving with a supplier qualification cycle behind it, in one of the few states in this region that runs its own OSHA plan covering private-sector workers.
- Peoria, IL The metro where the ISO 9001 claim everyone repeats does not survive checking — and where PPAP, not certification, is what actually blocks a shipment.
- Akron, OH Polymer processing is the textbook case of clause 8.5.1 validation — output you cannot verify by inspection — which makes accredited test data, not inspection records, your conformity evidence.
- Tulsa, OK API does not require ISO 9001 for the monogram — it runs the other way. A Q1-registered organisation may receive ISO 9001 registration at no extra cost once it demonstrates conformance, on a combined audit. Knowing which direction that runs can save you a second project.
- Birmingham, AL No Alabama programme requires ISO 9001 — we checked ALDOT and the waterworks specifications and it is not there. What operates here is customer flow-down, which is a harder problem than a regulation.
- Chattanooga, TN ISO 9001 does not satisfy 10 CFR 50 Appendix B — only NQA-1 does. Published state guidance gives both ranges: nine to eighteen months to build NQA-1 from nothing, nine to twelve with an ISO 9001 system already running. At the top of those ranges that is a third off. At the bottom it is nothing.
- Greenville, SC 1,408 manufacturing establishments across two metros — 947 in Greenville-Anderson-Greer and 461 in Spartanburg, with 1,208 under 100 employees between them — and the great majority are not in an automotive chain.
- St. Louis, MO Missouri is one of very few states that writes a quality management system into a licence condition by regulation — and the rule names ISO as one of four standard families rather than requiring ISO 9001, which is a distinction worth getting right.
- Nashville, TN The headquarters city of the American hospital industry — and one of the CMS-deemed accreditation routes builds ISO 9001 certification in as its endpoint rather than treating it as an optional extra.
- Chicago, IL The third-largest manufacturing metro in the country — 8,444 establishments under 100 employees across thirteen counties and two states — where three of the biggest clusters run on credentials an ISO 9001 certificate does not discharge.
- Detroit, MI Almost every manufacturer here has been told they need IATF 16949 — and IATF's own published eligibility rules exclude service-only operations, contract-managing firms and off-highway work, which includes defense ground vehicles.
- Pittsburgh, PA The only metro we serve with a reactor company's global headquarters inside it — and a funded local supplier tier building components that involve no nuclear material, where the nuclear quality programme never applies at all.
- Columbus, OH Central Ohio's supplier base widely believes that selling to Honda requires IATF 16949. Honda is not a member of the task force that mandates it, which makes the answer a contract question rather than an assumption.
- Oklahoma City, OK An unusually small-shop metro — 93% of manufacturers here have fewer than 100 employees — where the largest federal aerospace institutions publish ISO certifications rather than the AS9100 everyone assumes.
ISO 9001 pages by city
- ISO 9001 in Cleveland, OH Northeast Ohio has the largest small-manufacturer base of any Ohio metro. Most of those shops are not device companies — they are who device companies buy from.
- ISO 9001 in Minneapolis, MN The Twin Cities are known for medical devices. But 3,749 manufacturers here have fewer than 100 employees, and the overwhelming majority of them make something else entirely.
- ISO 9001 in Cincinnati, OH The aerospace supplier requirements published here are tiered. One tier asks for ISO 9001 and nothing more. Which tier appears on your purchase order decides everything.
- ISO 9001 in Grand Rapids, MI The furniture standard everyone cites here names ISO 14001 and ISO 50001. It does not mention ISO 9001 anywhere — which means the ISO 9001 driver in this metro is something else entirely.
- ISO 9001 in Indianapolis, IN Indiana's biggest manufacturing names sit in credentials we cannot serve. The 1,445 small manufacturers around them are a different market, and it is the larger one.
- ISO 9001 in Fort Wayne, IN Fort Wayne's largest employers work to standards we do not offer. What is left is 528 small manufacturers whose quality requirement comes from a customer, not a regulator.
- ISO 9001 in Memphis, TN Memphis is known for orthopedic devices. That cluster is contracting rather than growing, which changes which certificate is worth owning here.
- ISO 9001 in Louisville, KY There are twenty chemical facilities in one Louisville corridor. ISO 9001 governs the quality of what they make. It does not govern whether the plant is safe, and confusing the two is dangerous.
- ISO 9001 in Milwaukee, WI A $2 billion automation expansion is underway in this metro. New capacity means new supplier approvals, and supplier approvals are when somebody asks to see your quality system.
- ISO 9001 in Elkhart, IN Elkhart has a concentration of small manufacturers more than four times the national median, and its defining industry is shipping fewer units this year than last. Those two facts together make one argument.
- ISO 9001 in Denver, CO If you manufacture in Denver and run your own laboratory, you are looking at two standards that are not interchangeable — and one of them is not a certification at all.
- ISO 9001 in Lexington, KY Nearly every headline figure and company name attached to Lexington manufacturing has moved in the last two years. Several of the ones still circulating are wrong.
Also relevant to ISO 9001: Cleveland, OH , Memphis, TN , Louisville, KY , Milwaukee, WI , Elkhart, IN , Denver, CO , Grand Rapids, MI , Lexington, KY , Minneapolis, MN , Indianapolis, IN , Fort Wayne, IN , Cincinnati, OH .
Other standards we cover
Related management systems
Ready to scope your ISO 9001 engagement?
Send a short note describing your current state, your target, and your timeline. We respond within one business day with clarifying questions and a path to a no-pressure scope call.
Last reviewed August 2026