ISO 9001:2026 Transition: Preserve Evidence While You Change

An ISO 9001:2026 transition should preserve reliable evidence while changing only what the new edition or the business genuinely requires. The safest approach is to control the transition as a QMS change: establish criteria, protect valid records, assign process owners, test revised arrangements and obtain enough operating evidence before the transition audit.

ISO 9001:2026 is the current edition, published on 16 September 2026. Existing ISO 9001:2015 systems provide the starting point, not a problem to discard. ISO states that certified organizations have a transition period and should agree applicable timing with their certification body.

Define the transition outcome first

A weak project objective is “update all QMS documents.” A stronger outcome is:

The organization can demonstrate conformity to ISO 9001:2026 through effective processes, competent ownership and traceable evidence, while maintaining customer and operational performance during the change.

Set the project boundary around the certified scope, locations, processes and interfaces. Identify changes already underway—new systems, acquisitions, outsourcing or product launches—because they may affect the transition evidence.

Record three decision levels:

• Standard-level: what changed between editions and how the organization interprets the effect.
• Process-level: which processes, owners, controls and measures are affected.
• Evidence-level: what will prove implementation and continued operation.

The comparison of ISO 9001:2015 and ISO 9001:2026 provides a starting point for the change themes. Use a licensed copy of the current standard for the formal assessment.

Establish a controlled evidence baseline

Before editing documents, take an evidence baseline. This protects the audit trail and prevents the team from losing records that remain valid.

For each QMS process, record:

• approved procedures and current revision;
• owner and responsible roles;
• operational forms, system records and reports;
• objectives and recent performance;
• risk and opportunity decisions;
• relevant competence evidence;
• recent internal-audit and corrective-action results; and
• management-review decisions affecting the process.

Mark each item as retain, revise, replace or retire, with a reason. Do not overwrite historical evidence to make it look as though the new method always existed. Preserve records under the retention rules that applied when they were created, and document the effective date of each revised arrangement.

This makes the transition auditable. An assessor can see the old control, the decision to change it, the approved new control and the evidence generated after it became effective.

Perform the gap assessment at clause and process level

A clause-only review can miss operational effects. A process-only review can overlook cross-cutting requirements. Use both views.

The clause view should identify the requirement or clarified intent, current conformity, evidence, gap, action and owner. The process view should show where the change lands in sales, design, purchasing, operations, inspection, service delivery, support and improvement.

For example, stronger emphasis on quality culture and ethical behaviour affects leadership and awareness, but its evidence may appear in procurement, inspection, complaint handling and release decisions. The clearer separation of risks and opportunities affects planning, yet the actions belong to operational owners.

Rate gaps by effect rather than by document count:

Priority	Meaning	Example response
High	Current practice could fail a revised requirement or important outcome	Immediate owner, interim control and leadership oversight
Medium	Practice exists but intent, consistency or evidence is weak	Planned improvement and targeted sampling
Low	Conformity exists; minor alignment or clarity is needed	Controlled editorial update
No change	Existing arrangement remains effective	Retain with documented rationale

The last category is important. A documented “no change” decision demonstrates review and reduces unnecessary work.

Assign ownership to process leaders

The QMS manager can coordinate the transition, but cannot own every operational result. Assign each action to the person with authority over the affected process.

Leadership should own quality culture, ethical expectations and strategic alignment. Process owners should own risk and opportunity actions, controls and measures. Human resources or learning teams may support competence, but line managers must verify that people can perform their work. Internal auditors should remain sufficiently independent from the actions they later assess.

Use one transition register with:

• source requirement or change theme;
• affected process and location;
• present evidence;
• required action and intended outcome;
• accountable owner and supporting roles;
• due date and dependencies;
• implementation evidence;
• operating-evidence period; and
• verification and closure decision.

Do not close an action merely because a document was approved. Closure should require the evidence defined for that action.

Sequence changes to create operating evidence

Work backwards from the intended audit date. Revised processes need time to run. Internal audit and management review then need to evaluate their results.

A practical sequence is:

1. confirm the standard and transition criteria;
2. establish the evidence baseline;
3. complete gap and impact assessments;
4. approve priorities, resources and owners;
5. revise affected governance and processes;
6. communicate and build competence;
7. operate revised processes for a meaningful period;
8. sample results through internal audit;
9. address findings and verify effectiveness; and
10. complete management review and transition-readiness decisions.

The duration should follow risk and operating cycles, not an arbitrary number of weeks. A monthly supplier review needs enough elapsed time to show recurrence. A production-release control may generate evidence more frequently. If a process has not yet operated, present it honestly as newly implemented and explain the planned verification.

Protect traceability when documents change

Update controlled information selectively. Use change histories that explain substantive amendments rather than “updated for 2026.” Link revised procedures to the transition decision and effective date.

Avoid mass replacement of edition references where the reference is not necessary. A work instruction for calibrating equipment may remain technically correct without naming a standard edition. Conversely, audit criteria, scope statements, manuals, competence material and certification communications may require precise updates.

When combining management systems, maintain clear outcomes for each standard. The guide on integrating ISO 9001 and ISO 27001 for SaaS operations shows how shared processes can retain distinct criteria and conclusions.

Verify competence and awareness through behaviour

Transition communication should answer three questions for each role: what changed, what must I do differently, and what evidence will my work create?

Senior leaders may need to demonstrate decisions supporting quality culture and ethical behaviour. Process owners may need to distinguish risk responses from opportunity actions. Employees may need to recognize when an ethical concern affects conformity or customer trust.

Do not rely only on attendance. Evaluate effectiveness through interviews, observation, scenario responses, supervisory review and records from actual work. If a buyer can describe the escalation route for an inappropriate supplier inducement and a recent record shows that route was used, awareness has stronger support.

Design the internal audit around transition risk

The internal audit should test the revised edition, affected processes and the transition method itself. Update criteria and audit material only after auditors understand the new requirements.

Sample vertically. Select a strategic objective or change theme, trace it through process ownership, implementation and operating results, then examine management oversight. Also sample horizontally across locations or teams to test consistency.

Useful questions include:

• Did the gap assessment cover every applicable requirement and interface?
• Were retained arrangements supported by a reason and current evidence?
• Can owners explain the change and intended result?
• Are risks and opportunities recorded and acted on distinctly?
• Does observed leadership behaviour support stated quality culture?
• Did revised controls operate often enough to judge effectiveness?
• Were transition issues corrected and effectiveness verified?

The internal-auditor qualifications guide discusses competence and evidence principles that also matter for integrated or other management-system audits.

Readiness examples

Ready: All applicable changes have owners and evidence. Revised processes have operated, internal audit sampled them, findings were addressed and management review made a recorded readiness decision.

Conditionally ready: High-priority changes are effective, but one low-frequency process has limited operating evidence. The organization has disclosed the limitation, assessed risk and scheduled verification.

Not ready: Most actions were closed on document approval, personnel cannot explain revised responsibilities, and internal audit used the previous edition as its criteria.

Use management review to authorize readiness

Management review should receive decision-ready information: transition progress, unresolved risks, audit results, objective trends, resource constraints, competence status and certification timing. It should decide whether the QMS is ready, what remains open, who owns it and what evidence will close it.

Do not bury transition status inside a general presentation. Preserve the decisions and actions. The management-review evidence guide provides practical examples of traceable inputs, decisions and follow-up that transfer well to other management systems.

Finish with a defensible evidence package

An effective transition package does not need to duplicate the entire QMS. It should allow an auditor or leader to understand the change and select evidence efficiently.

Include the approved scope and plan, edition comparison, gap and impact assessment, action register, changed documented information, competence results, operating samples, internal-audit report, corrective-action verification and management-review decision.

ISO’s official ISO 9001:2026 page confirms the edition and publication status. Its transition overview explains the principal themes and advises certified organizations to plan with their certification bodies.

Preserve the evidence that still proves control. Change what needs to change, make ownership visible and allow revised processes to generate records. That approach protects continuity while giving the transition real operational value.