If your organization holds an ISO 9001:2015 certificate from SIRIM QAS International or any other accredited certification body in Malaysia, the clock has started. ISO 9001:2026 was published on 16 September 2026. Every certified organization must move to the new edition by 30 September 2029.

Three years sounds like plenty of time. But once you allow for audit cycles, document updates and internal audits, the real window is shorter. Here's what Malaysian organizations need to know, and a practical plan to get there.

The transition timeline

The transition requirements come from Global ACI, the global body for accreditation. In Malaysia, accreditation of certification bodies is managed by the Department of Standards Malaysia (Standards Malaysia).

16 September 2026: ISO 9001:2026 published. Start your gap analysis.

31 March 2027: accreditation bodies ready to assess the new standard. Certification bodies begin preparing transition audits.

30 June 2027: certification bodies submit transition declarations. Ask your certification body when it can audit you to the 2026 edition.

31 March 2028: new certifications only to ISO 9001:2026. Organizations certifying for the first time must use the new edition.

30 September 2029: transition deadline. Your ISO 9001:2015 certificate must be transitioned by this date.

According to the ISO/TC 176 announcement, you can transition during a routine surveillance or recertification audit, or through a separate transition audit.

Why you shouldn't wait until 2029

• Audit slots fill up. Certification bodies in Malaysia, including SIRIM QAS, will see demand peak close to the deadline.
• Your audit cycle matters. If your recertification falls in 2028, that's the natural point to transition. Missing it may mean paying for an extra audit.
• Customers and tenders will ask. Government-linked companies, multinationals and export customers often require current certification from suppliers.
• Document changes take time. Updating, approving and communicating dozens of controlled documents takes months, not weeks.

What's changing (in brief)

The sixth edition keeps the same structure but strengthens several areas:

• Quality culture and ethical behavior promoted by top management (clause 5.1)
• Quality policy aligned to strategy (clause 5.2)
• Separate treatment of risks (6.1.2) and opportunities (6.1.3)
• Stronger organizational knowledge requirements (clause 7.1.6)
• Climate change considered as part of context (clause 4.1)
• Expanded management review inputs (clause 9.3)
• A new Annex A explaining key concepts

For a detailed look at what this means for your documents, read ISO 9001:2026 Is Published: What the Sixth Edition Changes for Document Control.

A practical transition plan for Malaysian organizations

Phase 1: Understand (Q4 2026 to Q1 2027)

1. Buy ISO 9001:2026 and brief top management
2. Ask your certification body about its transition audit approach and timing
3. Run a gap analysis against the changed clauses

Phase 2: Update (2027)

1. Revise the quality policy and objectives to link with strategy
2. Split risk and opportunity registers, and assign owners
3. Set up a knowledge management process for critical know-how
4. Update the quality manual, procedures, forms and audit checklists with new clause references
5. Record your climate change determination in the context register

Phase 3: Embed (2027 to 2028)

1. Train staff on quality culture, ethics and their role in the QMS
2. Run internal audits against ISO 9001:2026
3. Hold a management review using the expanded inputs

Phase 4: Certify (by your next suitable audit, and no later than 30 September 2029)

1. Complete the transition audit and close any findings

The document control challenge

Most of this plan comes down to documents: revising them, approving them, communicating them and proving it to the auditor. Organizations that still run their QMS on shared drives and email usually find this is where the transition slows down.

It's also where digital document control pays off. When every controlled document is tagged with the clauses it covers, you can find everything that needs updating in minutes. Then you can route it through approval in one go, with a full audit trail ready for your SIRIM QAS or other certification body audit.

How EDMS Consultants can help

EDMS Consultants has helped Malaysian organizations manage controlled documents and compliance since 1999, with 500+ projects for 150+ clients. For the ISO 9001:2026 transition, we offer solutions to fit your size and needs:

• M-Files is best for mid-sized and large organizations and regulated industries. It gives you metadata-driven document control, clause mapping, approval workflows, read-and-acknowledge tracking, risk and opportunity registers, and AI search for organizational knowledge.
• SmartShare suits SMEs moving off shared drives. It's a cloud DMS with version control, check-in/check-out, audit trails and fast setup.
• DocuSign speeds up approvals, with electronic sign-off of policies, procedures and management review minutes, backed by audit trails.
• Wrench SmartProject fits EPC and project-based firms that need controlled engineering documents and project quality records.
• Fiix and Maintwiz suit manufacturing and asset-heavy sites, keeping the maintenance and calibration records that support clause 7.1.5 (monitoring and measuring resources).

We can help you:

• Assess your current document control with our free DMS & AI Readiness Assessment
• Map your QMS documents to ISO 9001:2026 clauses
• Migrate documents from shared drives with the right metadata
• Automate review, approval and communication workflows
• Prepare audit-ready reports for your certification body

Frequently asked questions

When must Malaysian organizations transition to ISO 9001:2026? By 30 September 2029. This is a global deadline that applies to all accredited certification bodies, including SIRIM QAS.

Will my ISO 9001:2015 certificate still be valid during the transition? Yes, until you transition or the deadline passes. Confirm the exact arrangements with your certification body.

Can I transition during my surveillance audit? Yes. Transition can take place during a routine surveillance or recertification audit, or in a separate transition audit.

Can new companies still certify to ISO 9001:2015? Only until 31 March 2028. After that, new certifications are issued to ISO 9001:2026 only.

Do we need a consultant to transition? Not necessarily. But many organizations use outside help for the gap analysis and document updates, which are the most time-consuming steps.

Start your transition now

Talk to our team about making your ISO 9001:2026 transition smooth and audit-ready.

‍