ISO 9001.
Connect customer requirements, processes and improvements in a quality management system and select suitable evidence.
- ISO 9001:2026
- By Derya Altinay
- As of: 10/22/2026
- Reading time: 7 min.
Short answer.
ISO 9001 is the international requirements standard for quality management systems, or QMS. It helps organisations translate customer requirements into reliable processes, evaluate results and implement improvements. The current edition is ISO 9001:2026. Independent certification can confirm the management system within its defined scope; certification is a separate decision.
ISO 9001:2026 and quality management.
A quality management system organises how a service or product is delivered and improved. It connects customer requirements with responsibilities, processes and evaluation of their results. ISO's QMS introduction describes this as an ongoing task. Inspection of the finished product is just one possible part of quality work.
According to ISO's publication announcement, the current sixth edition, ISO 9001:2026, was published on 16 September 2026. It replaces the 2015 edition. The public revision explanation emphasises leadership and quality culture, alongside clearer consideration of risks and opportunities. The climate connection introduced by the 2024 amendment continues; the old amendment is not an additional amendment to the new edition.
An existing QMS does not categorically need rebuilding because of the revision. Examine which processes actually work and which decisions need adjustment. Separate operational improvement from planning an external audit. The new standard edition and the status of an existing certificate are different questions.
Who ISO 9001 is suitable for.
According to the public audience description, ISO 9001 addresses organisations of different sizes and sectors. Quality management is therefore relevant to services too. A development company, maintenance service and manufacturer have different delivery chains; all can nevertheless clearly define what their customers expect and how the organisation reliably delivers it.
The desired evidence should fit the business task. Ask a customer which activity and sites they want assessed. Examine additional industry or contractual requirements separately. Applying a general management standard does not automatically provide product approval or fulfil every customer requirement.
QMS requirements at a glance.
ISO's public topic overview describes quality management from direction-setting to improvement. The following areas provide general context for this work; the practical examples do not replace examining standard requirements within the specific scope.
Understand context and service scope.
Clarify which services or products the QMS covers and which expectations are relevant. For a support service, for example, a traceable boundary between your own handling, product development and external partners helps keep handover responsibilities clear.
Connect leadership and responsibility.
Management gives quality work direction and resources. One practical question is who decides when objectives conflict: for example, when promised delivery speed can only be maintained with additional inspection capacity. Responsibility must be visible in everyday work.
Address objectives, risks and opportunities.
Quality objectives need a connection to delivery. Distinguish developments threatening achievement of an objective from improvements offering additional benefits. Named responsibility and verifiable results turn an intention into a manageable task.
Support people and working foundations.
Competence, available resources and understandable information support execution. Check, for example, whether a deputy knows and applies the same approval criteria. Documentation is useful when it explains a task or records a traceable decision.
Control delivery.
Planning and execution must align. Consider the path from a customer enquiry to the result, including necessary changes and external contributions. Outsourced activities should be included in your own assessment of their impact on promised delivery.
Evaluate results.
The organisation needs information on whether its processes achieve intended results. Select meaningful feedback and records. A metric is particularly helpful when it triggers a decision and its limitations are known, rather than merely being reported regularly.
Complete improvements effectively.
Fixing an individual error and improving a working method are different outcomes. Record what changed and how the organisation will later recognise whether the change holds. ISO's process approach connects execution, review and subsequent adaptation.
Introduce quality management into operations.
Define a service or product.
As a practical starting point, choose a specific service or product and describe customer needs, key participants and the intended QMS boundary.
Trace the process together.
Walk through the actual path from order to result with the people performing the work, and clarify handover responsibilities.
Record requirements and objectives.
Define traceable quality objectives and determine which requirements, risks and opportunities must be addressed for the selected service or product.
Implement the working method.
Provide the necessary responsibilities, information and resources, and use real cases to check whether the agreed execution is feasible in daily work.
Evaluate results and changes.
Use feedback, internal examinations and management review to initiate reasoned improvements and verify their effect later.
Plan external evidence.
If certification is desired, clarify scope, applicable edition and examination procedure with a suitable body based on the QMS in operation.
What ISO 9001 certification says.
An ISO 9001 certificate concerns the quality management system within its stated scope. It is not a blanket quality seal for every product the organisation makes. When using it as supplier evidence, check whether the described service or product is actually covered. A familiar company name alone does not answer that question.
The external certification body makes the certification decision; according to ISO's certification publication, ISO itself does not issue certificates. Check issuer, underlying edition, scope and current status. Accreditation confirms a body's competence for the relevant activity and is distinct from certification of the examined company.
Existing ISO 9001:2015 certificates require separate consideration during the move to the new edition. In its current revision explanation, ISO names a three-year transition and recommends coordination with the certification body. This does not mean every organisation has the same next audit deadline. Agree a specific transition plan and continue maintaining the management system during it.
Quality and other management systems.
ISO 27001 concerns information security, ISO 22301 business continuity and ISO 42001 AI management. These objectives differ from ISO 9001 quality management. Shared responsibility, documentation and evaluation processes can be integrated; the respective scopes and independent requirements still require examination.
In Secani.
Secani provides an editorial working aid for ISO 9001:2026. Profile details consider in-house development, production, outsourced quality processes, measuring equipment and an existing 2015-edition certificate, among other things. The catalogue supports structured work and refers to main sections; it replaces neither access to the standard nor independent professional examination or a certification decision.
Start with a specific service or product.
Name a service or product, an owner and a verifiable customer requirement. Then discuss how the actual process supports that requirement and what information management needs for a decision. This enables targeted improvement of an existing process before defining the scope and effort of a larger certification project.
Sources.
- ISO 9001:2026 – current edition, topics and audiences
- ISO – publication of the 2026 edition on 16 September 2026
- ISO – changes and transition to ISO 9001:2026
- ISO – quality management and the process approach
- ISO – introduction to quality management systems
- ISO – external certification and accreditation
- ISO/IEC 27001:2022 – information security management
- ISO 22301:2019 – business continuity management
- ISO/IEC 42001:2023 – AI management systems
Frequently asked questions.
Yes. ISO 9001 addresses organisations of different sizes and sectors, including services. The specific QMS design depends on delivery, context and relevant requirements.
No. Introducing a QMS and obtaining external ISO 9001 certification are different decisions. Whether particular evidence is needed depends on customer requirements and applicable provisions, among other things.
No. Quality management and information security management pursue different objectives. Shared workflows can be connected, while the requirements of both systems remain independent.
No. Transition of existing certificates must be planned separately. Clarify the specific status and applicable transition conditions with your certification body.
Make quality work traceable.
Discuss how you can work with the editorial QMS catalogue in Secani.
This page provides general context on ISO 9001 and replaces neither the standard text nor professional examination. The applicable edition, specific scope and agreed certification conditions take precedence.