01
Greater emphasis on leadership
FRAMEWORK REFERENCE
ISO 9001: quality management, 2026 edition.
ISO 9001 sets the requirements for a quality management system. The current edition, ISO 9001:2026, was published on 16 September 2026 and replaces ISO 9001:2015. This page sets out what it requires, what changed, and how it relates to ISO 27001.
What ISO 9001 is
The standard specifies requirements for a quality management system where an organisation needs to show it can consistently provide products and services that meet customer and applicable statutory and regulatory requirements, and aims to enhance customer satisfaction.
It is written for any organisation of any size or sector.
Certification is issued by a certification body, in the UK usually one accredited by UKAS, after an audit. Goldline is not a certification body.
What changed in ISO 9001:2026
Source: ISO news release, 16 September 2026, read 2 October 2026.
02
A culture of quality and ethical behaviour
03
Greater clarity on the consideration of risks and opportunities to support strategic decision-making
04
A new section to help users understand the intent of the requirements and apply them consistently
05
Adoption of the latest Harmonized Structure for ISO management system standards, which makes integration with other management system standards easier
ISO describes the 2026 edition as a natural evolution for organisations already using ISO 9001:2015.
Transition from the 2015 edition
Organisations certified to ISO 9001:2015 move to the 2026 edition within a transition period that is set for accredited certification by the International Accreditation Forum and applied by each certification body. The length and end date are confirmed by your certification body, and this page does not state them. A certificate to the 2015 edition stays valid during the transition period.
A transition is a gap read of the current system against the new clause set, a plan for the changes, and an audit by the certification body at the next surveillance or recertification visit, or a separate transition audit, as the body decides.
Who asks for ISO 9001
Public sector and framework tenders in the UK where a quality management system is a pass or fail question
Prime contractors and larger customers in manufacturing, engineering and construction supply chains
Regulated customers who ask for it alongside ISO 27001 in supplier due diligence
Buyers who treat it as the baseline before asking about information security
Which buyer asks for what is set by that buyer. The diagnostic reads the clause or the questionnaire before anything is scoped.
ISO 9001 and ISO 27001
Both now follow the Harmonized Structure, clauses 4 to 10, so context, leadership, planning, support, performance evaluation and improvement can be built once. Clause 8 differs: product and service realisation for ISO 9001; information security risk treatment, the Statement of Applicability and the Annex A controls for ISO 27001.
Goldline does not sell ISO 9001 on its own. Goldline's practice is information security and AI governance. Where ISO 9001 is needed alongside ISO 27001, Goldline builds both as one management system: the Integrated Sprint at £12,500 plus VAT. Where a business needs ISO 9001 only, a quality consultant is the better route and Goldline will say so.