ISO 9001-2026 A Clause-by-Clause Breakdown of What has Changed in Clauses 4–10 — and What It Means for Your QMS | Jay Wiessner
ISO 9001:2026 vs. ISO 9001:2015
ISO 9001-2026 A Clause-by-Clause Breakdown of What's Changing in Clauses 4–10 — and What It Means for Your QMS
The sixth edition of ISO 9001, published in September 2026, is here — and it cancels and replaces the familiar 2015 edition that has anchored quality management systems worldwide for over a decade. If you're a certified organization, an auditor, or a consultant guiding clients through the transition, the good news is this: the core architecture hasn't changed. The High-Level Structure, the Plan-Do-Check-Act cycle, and the ten-clause format are all still there. The requirements inside those clauses, however, have been sharpened, reorganized, and in a few places, meaningfully expanded.
At My ISO Consultants, we've spent the day going line-by-line through both standards. Below is a practical comparison of Clauses 4 through 10 — the requirements clauses that every certified QMS must satisfy — followed by our take on what organizations should start doing now to prepare for transition.
The Big Picture: Six Headline Changes
ISO itself frames the revision around several main themes, and every clause-level change below traces back to one of these:
• Terminology integration: Core management system terms and definitions are now built directly into Clause 3, rather than requiring a side-reference to ISO 9000.
• Quality culture: Requirements now explicitly address quality culture and ethical behavior — particularly within leadership, awareness, and the working environment.
• Separation of risk and opportunity: Risks and opportunities are no longer bundled together. They are now determined, analyzed, and actioned as two distinct requirements.
• Interested-party requirements tied to the QMS: Clause 4.2 now requires organizations to explicitly determine which relevant interested-party requirements will actually be addressed through the QMS — a genuinely new decision point, not just a reworded stakeholder list.
• Stronger change management: Clause 6.3 (Planning of changes) has been expanded from four considerations to seven, adding communication, monitoring, and review of change effectiveness.
• Deeper explanatory guidance: The informative Annex A has roughly doubled in length to provide richer clarification, while Annex B (guidance on related standards) has been folded in and removed as a standalone annex.
ISO 9001-2026 A Clause-by-Clause Breakdown:
Clause 4 — Context of the Organization
Clause | ISO 9001:2015 | ISO 9001:2026 |
4.1 | Determine external/internal issues relevant to purpose and strategic direction. | Same requirement, plus a new explicit line: the organization “shall determine whether climate change is a relevant issue.” |
4.2 | Determine relevant interested parties and their relevant requirements; monitor and review that information over time. | NEW REQUIREMENT (4.2 c): organizations must now also determine which of those relevant requirements will be addressed through the quality management system — an explicit, documented one-to-one link between interested-party requirements and QMS processes, not just a stakeholder register. A related note also flags that requirements can relate to climate change. |
4.3 | Determine scope; justify exclusions; scope available as documented information. | Essentially unchanged — wording tightened slightly. |
4.4 | Titled “Quality management system and its processes.” Establish, implement, maintain, improve the QMS and its processes (8 sub-items). | Retitled simply “Quality management system.” Same intent, renumbered/clarified list (9 sub-items) with sharper action verbs. |
Takeaway: Two things change your context-of-the-organization work under 2026. First, climate change is now a named, mandatory consideration — not optional guidance — even if the documented conclusion is “not relevant.” Second, and more operationally significant, Clause 4.2 no longer stops at identifying interested parties and their requirements. You must now explicitly decide and document which of those requirements your QMS will actually address. A generic stakeholder matrix that lists everyone's expectations without stating which ones the QMS owns will likely draw an audit finding under the new edition.
Clause 5 — Leadership
Clause | ISO 9001:2015 | ISO 9001:2026 |
5.1.1 | 10 leadership commitments, including “promoting the use of the process approach and risk-based thinking.” | 12 commitments — adds explicit duties to promote quality culture and ethical behavior, and separately promote risk-based AND opportunity-based thinking. |
5.2 | “Policy” — split into 5.2.1 Establishing / 5.2.2 Communicating. | Retitled “Quality policy” with the same two-part structure; content essentially unchanged. |
5.3 | “Organizational roles, responsibilities and authorities” — 5 assigned responsibilities. | “Roles, responsibilities and authorities” — 6 items; reporting on performance and reporting on improvement opportunities are now split into two distinct duties. |
Takeaway: “Quality culture” and “ethical behavior” are brand-new, named expectations of top management — not just implied by leadership commitment. Auditors will likely start asking leadership how they demonstrate and reinforce culture, not just policy.
Clause 6 — Planning
Clause | ISO 9001:2015 | ISO 9001:2026 |
6.1.1 | Determine risks and opportunities to give assurance, enhance desirable effects, prevent/reduce undesired effects, achieve improvement. | Same intent, reordered priorities: assurance, prevent/reduce undesired effects, continual improvement, enhance desired effects. |
6.1.2 | Single subclause: “Actions to address risks and opportunities” — both handled together. | Split into two subclauses: 6.1.2 Actions to address risks and 6.1.3 Actions to address opportunities — each requires its own determine/analyze/evaluate/plan/integrate/evaluate-effectiveness cycle. New note ties risk actions to business continuity during disruptions. |
6.2 | Quality objectives — 7 attributes (consistent, measurable, monitored, communicated, updated, documented, relevant). | Same 8 attributes, reordered; substantively unchanged. |
6.3 | Planning of changes — 4 factors to consider (purpose/consequences, QMS integrity, resources, responsibilities). | Expanded to 7 factors — adds communication of the change, how effectiveness will be monitored/evaluated, and how results will be reviewed. |
Takeaway: This is the biggest structural change in the requirements clauses. If your risk register still treats “risks and opportunities” as one combined exercise, you'll need to separate the analysis and action-planning for each under the 2026 edition. Change management (6.3) also now demands a documented feedback loop — communicate, monitor, evaluate, review — not just a plan.
Clause 7 — Support
Clause | ISO 9001:2015 | ISO 9001:2026 |
7.1.4 | Environment for operation of processes — social, psychological, physical factors. | Same factors, plus a new line noting these factors “can be influenced by the organizational quality culture and ethical behavior.” |
7.2 | Competence — “retain documented information as evidence of competence.” | Reworded: “Appropriate documented information shall be available as evidence of competence” — part of a document-wide terminology cleanup (see below). |
7.3 | Awareness of 4 items: policy, objectives, contribution, implications of nonconformity. | 5 items — adds awareness of “the organizational quality culture and ethical behavior.” |
7.5 | Documented information split into “maintain” (controlled documents) vs. “retain” (records) language. | Unified into consistent “shall be available as documented information” / “documented information shall be available as evidence of” phrasing, clarified in new Annex A.2(e). |
Takeaway: Watch for a subtle but pervasive language shift. The 2015 edition's two verbs — “maintain” documented information and “retain” documented information — are replaced throughout 2026 with unified “available as” phrasing. It reads differently in nearly every clause (7.2, 8.2.3, 8.3.3–8.3.6, 8.4.1, 8.5.3, 8.6, 8.7.2, 9.1.1, 9.2.2, 9.3.3, 10.2.2) but does not change the underlying intent.
Clause 8 — Operation
Clause | ISO 9001:2015 | ISO 9001:2026 |
8.1 | “The organization shall ensure that outsourced processes are controlled (see 8.4).” | Broadened to “externally provided processes, products or services that are relevant to the quality management system are controlled” — aligns terminology with Clause 8.4. |
8.2.1 | Customer communication — 5 items, including “establishing specific requirements for contingency actions, when relevant.” | 5 items, expanded to explicitly cover “information related to contingency actions... including any related to disruptions to the provision of products or services” — stronger resilience/continuity focus. |
8.3–8.7 | Design & development, external providers, production/service provision, release, and nonconforming outputs — full requirement sets. | Substantively unchanged in requirements; documented-information language modernized throughout (see Clause 7 note). |
Takeaway: Operational requirements are the most stable part of the revision. The one notable shift is a sharper emphasis on disruption/contingency planning in customer communications — consistent with the new risk note in 6.1.2 about maintaining conformity “during and after a disruption.”
Clause 9 — Performance Evaluation
No structural changes. Monitoring, measurement, analysis and evaluation (9.1), internal audit (9.2), and management review (9.3) carry the same sub-clause numbers and requirements in both editions. The only differences are the same document-wide “available as documented information” terminology updates seen elsewhere, and Annex A.9 now provides considerably more explanatory guidance on interpreting these clauses.
Clause 10 — Improvement
Clause | ISO 9001:2015 | ISO 9001:2026 |
Structure | Three subclauses: 10.1 General, 10.2 Nonconformity and corrective action, 10.3 Continual improvement. | Two subclauses: 10.1 Continual improvement (absorbs the former “General” content), 10.2 Nonconformity and corrective action. |
Content | Continual improvement actions include improving products/services, addressing needs/expectations, correcting/preventing/reducing undesired effects. | Same three actions retained verbatim under the merged 10.1 heading; corrective action requirements (10.2) are otherwise unchanged. |
Takeaway: A tidy-up, not a substantive change — the former standalone “10.1 General” clause is merged directly into Continual Improvement, trimming the clause count from three to two.
What This Means for Your Organization
• Close the loop on interested-party requirements: Go beyond your interested-party matrix and explicitly document, for each relevant requirement you've identified, whether it is addressed through your QMS — and how. This is the new 4.2 c) requirement, and it's the kind of gap an auditor will specifically probe for.
• Split your risk register: Update your risk and opportunity register to show separate identification, analysis, and action-planning for risks versus opportunities, per new Clauses 6.1.2 and 6.1.3.
• Document your quality culture: Ensure leadership can articulate how they promote quality culture and ethical behavior — and that awareness training (7.3) reflects this expectation.
• Address climate change explicitly: Add a documented consideration of climate change to your context-of-the-organization analysis (Clause 4.1), even if you conclude it is not currently significant.
• Strengthen change management: Rebuild your change-management procedure to include communication planning and post-implementation effectiveness review, not just impact assessment (Clause 6.3).
• Revisit contingency planning: Confirm your business continuity or disruption-response planning is reflected in both customer communications (8.2.1) and risk planning (6.1.2).
• Relax on terminology: Don't panic over “retain” vs. “available as” language changes in your procedures — the intent is unchanged, but it's a good opportunity to refresh terminology during your next document review cycle.
The Bottom Line
ISO 9001:2026 is an evolution, not a revolution. Organizations with a mature, well-embedded QMS under the 2015 edition will find the transition manageable — most of the heavy lifting is in Clause 4.2 (explicitly linking interested-party requirements to the QMS) and Clause 6 (splitting risk from opportunity, expanding change management), plus weaving quality culture and ethical behavior into leadership and awareness practices. As always, certification bodies will publish a formal transition timeline; until then, this is the moment to start gap-assessing your QMS against the sixth edition so you're ahead of the curve rather than reacting to it.
Need help mapping your current QMS against ISO 9001:2026? My ISO Consultants can run a clause-by-clause gap assessment and build your transition roadmap — reach out and let's get started.
