Quality management
ISO 9001 — Quality Management
Published Reviewed
What is ISO 9001?
ISO 9001 specifies requirements for a quality management system that controls processes, addresses risk and supports consistent delivery and continual improvement.
| Jurisdiction | International standard |
|---|---|
| Authority | ISO 9001:2026 |
| Current status | Published 16 September 2026; 2015 certificates have a transition period |
| Reviewed |
Why it matters operationally
ISO 9001 is the world’s most widely certified management standard and the default proof of process discipline in B2B supply chains — losing the certificate can mean losing approved-supplier status overnight. It runs on the same machinery as every ISO management standard: scoped system, process ownership, objectives, internal audit, management review, corrective action. ISO 9001:2026 was published on 16 September 2026. Organisations certified to the 2015 edition can transition under their accreditation and certification body’s arrangements.
Are you aware?
The dates that bind
ISO 9001:2026 published
The 2026 edition replaces the 2015 edition. Existing 2015 certificates remain valid during the applicable transition; confirm your audit plan and deadline with your certification body.
Surveillance audits do not wait
Annual surveillance between three-year recertifications expects a functioning loop: objectives tracked, nonconformities closed with cause analysis, internal audits done, management review held.
Where to start
- 1
Define the certification scope by products, services and sites — and keep customer-facing claims consistent with it.
- 2
Give every core process a named owner, measurable objectives and a record of how nonconformities are corrected.
- 3
Keep the audit trail current: internal audit programme, management review minutes and corrective-action log.
Authority links
Read the official sources
The official text is the authority. This guide is only a short orientation for operational planning.
Common questions
Frequently asked questions
Is ISO 9001 worth it for a small company?
Where customers require it, it is the ticket to the game — many industrial and public-sector buyers only work with certified suppliers. The standard scales: the requirements are the same, but the depth of documentation follows the size and risk of the organisation.
What do auditors actually check?
That the system runs: objectives with data behind them, nonconformities traced to cause and closed, internal audits covering the scope, management review with decisions, and process controls that match what staff actually do.
How does it relate to ISO 14001 and ISO 45001?
They share the same high-level structure, so one integrated management system can serve quality, environment and health & safety — one audit programme, one management review, three certificates.
Side by side
Compared against
Key terms in this guide
A quick self-check
Are you ready?
- Could you show this year’s internal audit results and the management review that acted on them?
- Does every open nonconformity have a cause analysis and an owner — or just a due date?
- Have you agreed your ISO 9001:2026 transition audit and deadline with your certification body?
Every question above has a written, evidence-backed answer in a well-run compliance record. If one made you pause, that pause is the gap.