ISO 9001:2015 is the fifth edition of the international standard that sets requirements for a quality management system. Clauses 4 to 10 hold the requirements that auditors test, and since 16 September 2026 a newer edition, ISO 9001:2026, has existed. If your certificate is to the 2015 edition, it stays usable through a transition period, so you need to understand both.
Last reviewed: 17 October 2026. Facts checked. We searched for the 2015 structure and the 2026 revision. We opened the Wikipedia page on the ISO 9000 family and the ISO TC 176 news page on the 2026 release. Several certification-body pages (SGS, NSF) returned errors and were not opened. ISO 9001 is a paid document, so we describe structure only as far as those pages confirm. We could not confirm the clause numbering of the 2026 edition.
Where 2015 sits today
Editions, per Wikipedia: 1987, 1994, 2000, 2008 and 2015. ISO's TC 176 news page states that ISO 9001:2026 was published on 16 September 2026, the news post being dated 23 September 2026.
The same page lists a transition timetable: accreditation bodies ready by 31 March 2027, new and initial certifications to the 2026 edition only from 31 March 2028, and organisations certified to 2015 having until 30 September 2029. The page says this timeline is managed by a third party and not by ISO. Treat the dates as a guide and confirm them with your certification body.
So the 2015 edition is no longer the newest. It still defines the system most certified companies run today.
The structure of ISO 9001:2015
The standard has ten clauses.
| Clause | Heading |
|---|---|
| 1 | Scope |
| 2 | Normative references |
| 3 | Terms and definitions |
| 4 | Context of the organization |
| 5 | Leadership |
| 6 | Planning |
| 7 | Support |
| 8 | Operation |
| 9 | Performance evaluation |
| 10 | Improvement |
Clauses 1 to 3 give scope and definitions. Auditors test clauses 4 to 10. The 2015 edition adopted the high level structure shared with other management system standards such as ISO 14001, which is why an ISO 27001 or ISO 14001 audit feels familiar.
What each requirement area asks, in plain words
- Context. Know your situation, interested parties and scope before you design the system.
- Leadership. Top management takes part, sets the policy and gives people clear roles.
- Planning. Think about risks and opportunities, set objectives and plan changes.
- Support. Provide people, equipment, skills, awareness and controlled documents.
- Operation. Plan and control how you deliver the product or service, including suppliers.
- Performance evaluation. Measure, run internal audits and hold management reviews.
- Improvement. Fix problems at the cause and keep improving.
Our clause-by-clause internal audit checklist turns each area into audit questions. Our QMS explainer gives the general picture of a quality management system.
What auditors look for
Auditors want evidence that the system runs, not only that it is written.
- A scope that is honest. If the company excludes something, there must be a reason.
- Management involvement. Minutes, decisions, resources, not only a signed policy.
- Risk and objectives. Risks that were thought about and objectives that are tracked.
- Controlled operations. Work follows the stated method, and suppliers are checked.
- Internal audits that happened. Planned, impartial and recorded.
- Management review with real inputs. Our management review input checklist lists what to bring.
- Corrective actions closed with an effectiveness check. Use a nonconformity and corrective action register.
Certification is pass or fail. Findings are graded as major or minor in practice. See major vs minor nonconformities.
How the clauses fit together
Read the clauses as a loop. Context and leadership set direction. Planning turns direction into objectives and risk actions. Support and operation carry the work out. Performance evaluation measures it, and improvement feeds what was learned back into planning. Auditors use this loop to follow a thread: if a risk is named in planning, they look for the control in operation, the measure in evaluation and the fix in improvement.
What the 2026 edition means for you
The TC 176 page says the revision gives clearer wording, a stronger focus on leadership, quality culture and accountability, and clearer treatment of risks and opportunities. It adds a new Annex A on key terms and the intent of requirements, and it aligns more closely with other ISO management system standards.
Our advice is practical. Do not rewrite your system today. Get the 2026 text, compare it with your current procedures, and plan the move for a surveillance or recertification audit. A gap assessment is a fair way to start, and the gap analysis template gives you a format.
Frequently Asked Questions
Is ISO 9001:2015 still valid?
Certificates to the 2015 edition stay valid through the transition. The page we read gives 30 September 2029 as the end of that period. Confirm with your certification body.
Which clauses are audited?
Clauses 4 to 10. Clauses 1 to 3 are scope, references and definitions.
Is ISO 9001 mandatory?
No. Certification is optional unless a customer, tender or regulator asks for it.
How long does a certificate last?
Wikipedia says certificates are renewed at regular intervals, usually about every three years. Your certification body sets the cycle.
Who certifies a company?
An accredited certification body. ISO itself does not certify organisations.
Related Articles
Statutory facts on this page are checked against their sources, and the page says where it relied on secondary reporting. How we verify · Report an error