ISO 9001:2026 Changes and How Malaysian Companies Should Transition

ISO 9001:2026 was published on 16 September 2026, replacing ISO 9001:2015. If your company holds an ISO 9001 certificate, you do not need to panic: there is a three-year transition period, and your 2015 certificate stays valid while you move across. But three years goes quickly when transition audits have to line up with your surveillance cycle, so it pays to plan now.

This article explains what changed, what the transition period means for Malaysian companies, and a simple way to get through it with one audit rather than two.

The transition period

The transition runs for three years from publication, which puts the end at around September 2029. Accreditation bodies and certification bodies set the exact cut-off dates, so confirm yours with your certification body. In practice most companies will transition at a scheduled surveillance or recertification audit, which avoids paying for an extra audit visit.

What changed in ISO 9001:2026

The structure is familiar. The changes are about emphasis, and auditors will test them:

• Quality culture and ethics. Top management is expected to promote a culture of quality, accountability and ethical behaviour, and to show it, not just write it in the policy.
• Risks and opportunities. A list of risks is no longer enough. Auditors expect to see risks analysed, prioritised and acted on, with the actions followed up.
• Planning of changes. Significant changes to processes, products or the organisation need to be planned, communicated, monitored and reviewed.
• Climate change. Following the 2024 climate amendment, you must consider whether climate change is relevant to your context, your interested parties and your quality objectives.
• Organisational knowledge. More attention to how knowledge is captured, kept and shared, which matters when experienced staff leave.
• Harmonised Structure. ISO 9001:2026 follows ISO's Harmonised Structure, which makes it easier to run with ISO 14001, ISO 45001 and ISO 27001 as one integrated system.

Auditors are also expected to look more closely at digital records and data integrity. If your quality records live in spreadsheets that anyone can edit, this is a good moment to tidy them up.

A practical transition plan

1. Book a gap analysis. Compare your current system against the 2026 requirements. For a well-run 2015 system the gaps are usually small and specific.
2. Update the documents that changed. Context, risks and opportunities, change management, quality objectives and the knowledge section are the usual ones.
3. Brief top management. Leadership and culture are where auditors will start, so the people at the top need to know what they will be asked.
4. Train the QMR and internal auditors. Internal audits after the update should check the new requirements.
5. Run one internal audit and management review on the updated system.
6. Schedule the transition audit with your certification body, ideally at your next surveillance or recertification visit.

If you also hold ISO 14001

ISO 14001:2026 was published in April 2026 and has its own transition, with Malaysian deadlines set by the Department of Standards Malaysia. Because both standards now share the same structure, doing one combined gap analysis and one combined transition audit saves time and audit days. See the ISO 14001:2026 deadlines.

Training for the transition

AISO runs a one-day ISO 9001:2026 course that covers what changed, plus QMR 2.0: how a Quality Management Representative can run the system with AI tools so records, audits and KPIs stay current. The training is HRD Corp claimable. Details and early-bird pricing are on the ISO 9001:2026 page.

Frequently asked questions

Is my ISO 9001:2015 certificate still valid? Yes, during the transition period. Plan to move to ISO 9001:2026 before your certification body's cut-off date.

Do we need to rewrite our whole quality manual? No. Most companies update a handful of documents and records. The bigger change is showing that leadership, risk management and change planning work in practice.

How long does the transition take? For a well-maintained system, the gap work is usually a matter of weeks. The timing is driven mostly by when your certification body can schedule the transition audit.

Can we transition ISO 9001 and ISO 14001 at the same time? Yes, and it is usually the cheaper route because both share the Harmonised Structure.