The wait is over. ISO 9001:2026, the sixth edition of the world's most widely used quality management standard, was published on 16 September 2026. It replaces ISO 9001:2015, the version behind more than 1.4 million certificates worldwide.

The good news: this is an evolution, not a rewrite. According to ISO, customer focus, the process approach, risk-based thinking and continual improvement stay at the heart of the standard, and the clause structure stays the same.

For quality and document controllers, though, there's real work to do. New requirements create new records, some clauses are renumbered, and knowledge management gets more attention. Here's what the sixth edition means for your documented information.

ISO 9001:2026 at a glance

• Published: 16 September 2026 (edition 6)
• Replaces: ISO 9001:2015, now withdrawn
• Structure: the same harmonized structure as other ISO management system standards
• Headline themes: quality culture and ethics, a clearer split between risks and opportunities, strategic alignment, and a new explanatory Annex A
• Transition deadline: 30 September 2029 for certified organizations

The key changes, clause by clause

Clause 4.1, climate change. Organizations must determine whether climate change is a relevant issue. This came in through the 2024 amendment to ISO 9001:2015 and is now built into the standard.

Clause 5.1, quality culture and ethics. Top management must now promote a quality culture and ethical behavior. According to DQS, employee awareness of this is addressed in clause 7.3.

Clause 5.2, strategic alignment. The quality policy must connect more clearly to the organization's context and strategic direction.

Clause 6.1, risks and opportunities split. Risks (6.1.2) and opportunities (6.1.3) now have separate sub-clauses. ASC Food Safety's clause-by-clause comparison notes that many organizations will need a separate opportunities register.

Clause 7.1.6, organizational knowledge. This is the most enhanced area. Commentators describe the new emphasis as knowledge being retained, applied and shared, not held by individuals or locked in folders.

Clause 7.5, documented information. The core document control requirements carry over. Commentators report wording refinements and clearer recognition of digital and cloud-based systems. Check the published text for the exact wording.

Clause 9.3, management review. Inputs expand, with the effectiveness of actions on risks and on opportunities now reviewed separately.

Clause 10, improvement. Sub-clauses are consolidated, so any references to the old clause 10.3 need updating.

Annex A. A new informative annex explains key concepts and terms, including documented information and organizational knowledge.

What this means for document control

Even where requirements haven't changed much, your documents will. Here's the practical impact:

• Renumbered and new clauses: update clause cross-references in the quality manual, procedures, forms and audit checklists.
• Separate risks and opportunities: create or split registers, with owners and review dates.
• Quality culture and ethics: keep dated evidence of leadership actions, not just posters or policy statements.
• Climate determination: record the decision, rationale, owner and date in your context register.
• Organizational knowledge: capture lessons learned, know-how and expert knowledge in a searchable, controlled form.
• Expanded management review: update the agenda template and minutes to cover the new inputs.
• Revised quality policy: issue a new, approved version and show it has been communicated.

For most organizations, this means dozens of controlled documents updated, re-approved and re-communicated, all with a clean audit trail. That's hard to manage with shared drives and email.

Why knowledge management is the big one

The stronger focus on organizational knowledge is the change most likely to expose gaps. Auditors will want to see how critical know-how is captured, kept current and made available to the people who need it. It shouldn't depend on one senior engineer's memory.

We explored this risk in What Happens to Your Organization's Knowledge When a Senior Leader Leaves?. A document management system that connects knowledge to processes, assets and projects turns this from a risk into evidence.

How M-Files supports ISO 9001:2026 document control

M-Files was named a Leader in the 2026 Gartner® Magic Quadrant™ for Document Management. For ISO 9001:2026 it helps you:

• Update clause references fast. Metadata lets you find every document that cites a clause, then route them for revision and approval together
• Control versions and approvals with automatic versioning, workflows and a full audit trail
• Run separate registers for risks and opportunities, with owners, reviews and reminders
• Capture organizational knowledge so lessons learned and expert know-how are searchable, including with AI search (M-Files Aino)
• Prove communication by tracking who has read and acknowledged the new quality policy and procedures
• Work inside Microsoft 365, so people don't have to change how they work

Your first five steps

1. Buy the standard and read the new Annex A
2. Run a gap analysis against clauses 4.1, 5.1, 5.2, 6.1, 7.1.6, 9.3 and 10
3. List every controlled document that references ISO 9001 clauses
4. Plan revisions in batches, starting with the quality manual and policy
5. Agree transition timing with your certification body

How EDMS Consultants can help

EDMS Consultants has supported quality-driven organizations since 1999. For the ISO 9001:2026 transition we can:

• Assess your document control with our free DMS & AI Readiness Assessment
• Set up M-Files for controlled documents, registers and knowledge capture
• Migrate your QMS documents from shared drives with metadata and clause mapping
• Automate review, approval and read-and-acknowledge workflows

In Malaysia? Read ISO 9001:2026 in Malaysia: What SIRIM-Certified Organizations Need to Do Before 2029. For the basics of digital document control, see ISO 9001 Compliance: How Digital Document Management Can Support Your QMS.

Frequently asked questions

When was ISO 9001:2026 published? ISO 9001:2026 was published on 16 September 2026. It is the sixth edition and replaces ISO 9001:2015.

Is ISO 9001:2026 a major change? No. The structure and core principles stay the same. The main changes cover quality culture, ethics, risks and opportunities, strategic alignment and organizational knowledge.

Has clause 7.5 on documented information changed? The core requirements carry over, with wording refinements reported. The bigger document impact comes from new records and renumbered clauses elsewhere.

How long do certified organizations have to transition? Until 30 September 2029, according to the transition requirements published by Global ACI.

Do we need new software for ISO 9001:2026? No, the standard doesn't require specific software. But a DMS makes it much easier to revise, approve and prove control of many documents at once.

Get transition-ready

Talk to our team about preparing your document control for ISO 9001:2026.

Gartner does not endorse any vendor, product or service depicted in its research publications. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. GARTNER and MAGIC QUADRANT are registered trademarks of Gartner, Inc. and/or its affiliates and are used herein with permission.

‍