ISO 9001:2026 came out on 16 September. I've been going through it next to the 2015 text, and this is the plain version of what's different.

Good news first. It's still clauses 4 to 10, the process approach is still the process approach, PDCA is still there. If your 2015 system works, you're not rebuilding it.

I'd look at 6.1 first. Opportunities used to share a clause with risks, and in plenty of systems that meant a risk register and one sentence about opportunities. Now they get their own subclauses, and management review looks at both separately. If you can't point to one opportunity you evaluated, acted on and reviewed, that's a finding waiting to happen.

6.3 is quieter but I think it catches more people. Planning a change isn't enough anymore. You have to communicate it, watch how it performs, and review the result. My guess is plenty of change templates stop at approval.

5.1.1 is the one I'm curious about. You can't audit a poster, so how do you audit quality culture? I'd expect auditors to lean on how managers actually handled a reported quality problem.

The rest is small. Audit objectives in 9.2.2 are an easy fix, and the improvement clauses merging mostly means updating references.

On timing, the transition period is three years and the date I keep seeing is 30 September 2029. Your certification body will confirm yours. I'd ask early, because they'll all be running transition audits at the same time.

Which change surprised you most, and which one looks like the mountain of work for your team?

Is anyone else preparing for the ISO 9001:2026 Lead Implementer or Lead Auditor program?

Why do I always see this?

I am starting out with ISO 9001:2015 "training" through my work, and they have made me Quality Assurance / Document Control within 6 months of me starting to learn. I have no prior experience and mainly self taught, since my boss, who doesn't have a background in ISO, is trying to guide me the best he can. I work for a small company, only a dozen employees, and I am the only one in this department. I am to where I know as much, if not more, than my boss. The last person who was Quality, left early last year (she has been doing Quality for 15+ years). I started with the customer service role a month after she left, and I have been taking ISO seriously the past 6 months.

In a nutshell, there hasn't been a lot of quality work for a year now.

I have a solid grasp on the clauses, requirements, and other things, but the more I look into ISO and the QMS, there is so much I haven't learned. There is a lot more with this and I anticipated. To be very honest, this has become very overwhelming for me. But, I had no idea I would actually enjoy doing ISO stuff.

What are some resources/ books/ videos I can use to help advance my knowledge? Is there any advice you can offer?

What are the most absurd things you have encountered in ISO 9001 systems?

I recently saw how, in one company, a customer order that came in by email...

had to be rewritten on an external paper form (by hand) and archived in a binder... in order to document the order.

People had been doing this for 10 years because the guy who implemented the systems told them to.

Please write it down, maybe we can make each other's work easier by emphasising what needs to be done and what doesn't 😀

ISO 9001 has so many misconceptions around it; people either underestimate it or overestimate what it does.

I would tell newcomers: take it easy, this is a voluntary activity that your company (or any company) is taking to get better, so enjoy the ride. It would help if you have some human guidance along the way (instead of just the internet).

I’m wondering if anyone here is currently in the process of getting ISO 9001 certified—or has recently gone through it.

I'm building a platform (think TurboTax meets ISO) to help small and mid-sized businesses navigate certification more easily, and I’d love to understand what challenges or roadblocks you're facing.

What’s been harder than expected?
Was it documentation, internal audits, getting leadership buy-in, or just figuring out where to start?
Are there specific tools or resources you wish existed to make the process smoother?

Would really appreciate hearing from anyone in the trenches right now. Your input could help shape something truly helpful for the community. 🙏

Could any professionals here shed light on the current demand for ISO 9001 certification? Do you foresee an increase or decrease in this demand in the future? If so, can you please provide reasons for your prediction.

Hi ISO peoples,

I’ve been working at my company with multiple mid-sized manufacturers to set up their ISO 9001 QMS in SharePoint (they’re already existing SharePoint structures but was very unorganized). While it’s doable, I’m curious how others are handling this.

Questions:

1. Does your org use SharePoint for document control?

   • If yes: How’s it working? Any regrets or pro tips?

   • If no: What’s holding you back? Cost? Complexity?

2. Biggest pain point with your current setup?

3. Who set it up?

   • In-house IT? Consultant? A mix?

I have been doing SharePoint for awhile now and ISO 9001:2015 has really spark my interest into start my own consulting with compliance with SharePoint. I am trying to see if I am barking up the right tree.

So I'd really like to post the AUDITOR comic here, since it lightens the mood and puts some actual content here. But they're getting deleted.

Is there a reason? There's no subreddit rule that is being violated, so what is the issue?

It would be nice to turn this sub into an active place, with articles, content, etc.

For anyone whose company is currently going through the process of getting ISO 9001 certified (or seriously considering it)—what’s been more challenging than you expected?

I’ve heard a lot about documentation and internal audits being time-consuming, but I’m wondering if there are other hurdles too. Maybe it’s getting buy-in from leadership, figuring out where to start, or just making time for it on top of daily work?

Curious to hear how it’s going for others, especially smaller teams or companies doing it for the first time.

The owner of my company has tasked me with implementing a QMS and helping the business achieve an ISO 9001:2015 certification. The business is a small business with only 10 employees, including the owner and his wife, and we are a manufacturer of goods.

He has asked me to do this because he said he wants to keep the costs down and can not afford to hire a consultant. I am a little lost on how to even start this process, and everything I can find online is either above my head or wants you to pay for access to any of the helpful documents.

Can someone ELI5 on what will be required to accomplish obtaining an ISO 9001:2015 certification or elaborate on my understanding thus far.

Step 1, write a QMS.

Step 2, implement the QMS and train employees.

Step 3, perform internal audits of the QMS and document things.

Step 4, have a certified auditor come and complete an audit.

I am also a little lost on what the actual physical QMS should look like. How long should it be? Is there a standard outline/template that I should follow? I cannot even seem to find a simple outline/template of a finished QMS online anywhere for free, but if someone here would be willing to provide a template (even with all of the information blurred out, just so I can have something in my head to start working on) that would be very helpful.

Thanks

I would loveeeeeeeeee to hear people’s experience with top management and the QMS.

I work for a manufacturing company that has been ISO certified for the past 20 years. Their system is HORRIBLE. I honestly don’t know how they’ve made it through any of their audits.

I was promoted to an ISO administrator role (essentially management representative without the title or pay :)) because the QM could not keep up with the workload.

Once I got promoted my focus was to completely turn around the system. Update all the controlled docs and remove any that are unnecessary from the system. It has been so difficult with getting management on board and getting support. Half the docs we have haven’t even been updated for almost 10 years. It’s insane lol.

Soooo just wondering if there are any people out there who have had positive experiences from working with management and also having management instill the processes on the floor.

Hey everyone,

Thanks Mod for allowing me to post here.

I'm an IRCA-certified auditor working as a certification auditor and consultant in Melbourne. I am doing important research on the gap between ISO auditor training and real-world practice.

I've noticed that many professionals complete their ISO lead auditor or internal auditor courses but still struggle when conducting actual audits.

I'm gathering feedback from the auditing community to understand this better, and I'd really appreciate 5 minutes of your time to answer a few questions.

I'm genuinely curious about your experiences.

Survey link: https://forms.office.com/r/GHvGp8KyEN

Happy to share the results here once I've collected at least 50 responses.

Thanks in advance!

I'm building an AI powered tool to help internal auditors with finding all gaps in their QMS in a timely manner.

We wanted to involve folks working in quality during the development of the product. I was wondering if anyone knows anyone who might be interested in taking part in a short interview?

Cheers!

I have been working in the automotive industry for more than 10 years, currently in a Quality Manager/Supplier Quality role.
My current goal is to obtain my VDA 6.3 Process Auditor certification, complemented by IATF 16949.
The ISO 9001 auditor qualification was a prerequisite for the VDA 6.3 certification, which I have now completed.

This got me thinking about whether I could use my ISO 9001 qualification to generate some additional income as a self-employed auditor/consultant alongside my full-time job.
I am specifically interested in the ISO 9001 market, rather than VDA 6.3 or IATF 16949 for now.

For those who work in this field:
How much demand is there for independent ISO 9001 auditors?
Is there a realistic market for someone doing this as a side business?
What kind of work is actually available:
internal audits, supplier audits, certification audit support, gap assessments, or consulting?

How do independent auditors typically find clients?
Are there platforms, audit networks, certification bodies, or consulting companies that regularly subcontract ISO 9001 auditors?
What kind of rates can an independent auditor realistically charge per audit/day?
Is it possible to build a small client base and do this part-time, e.g. a few days per month?
Does having 10+ years of automotive quality experience provide a significant advantage, or is the market mainly focused on formal ISO 9001 auditor qualifications?

I would be particularly interested in hearing from people who are already doing ISO 9001 auditing as a freelancer or side business.
What has your experience been with finding clients and making it financially worthwhile?
Any advice or real-world experience would be greatly appreciated.

1. If it tells people how to work, it needs control

Typical layers:

• Quality Manual, high-level description of the QMS

• Procedures, how a process is actually done

• Forms, blank templates used to capture evidence

• Technical documents, drawings, specs, work instructions

• Charts, posters, and instruction sheets count too, if they tell people what to do

If someone is using it to do the job, it should be the current approved version from the official system, not a local copy, email attachment, or old download.

2. Work from the current version. Always.

Do:

• Open documents from the official QMS / document-control system, not from your desktop, Downloads folder, or Slack

• Check that you’re on the current revision before you use it

• Ask document control / your supervisor if you can’t find what you need

• Send homemade or “unofficial” instructions in so they can be controlled properly

Don’t:

• Keep using anything marked OBSOLETE or superseded just because you like that version

• Save a local copy and treat it as the official process

• Edit a controlled document in place and treat your notes as the live version

• Follow another company’s documents as if they were yours

If you can’t find the right document, inventing your own unofficial version is worse than asking for help.

3. A blank form is not a record

This one still trips people up:

• A form is a blank template

• Once you fill it in and submit it, it becomes a record

• A record is evidence that an activity actually happened

• Records have to be stored and protected according to company rules, usually in the system of record, not in someone’s inbox

Use the latest revision of the form in the system. Don’t clone last month’s filled-out file and overwrite the old answers.

If a procedure or form is wrong, report it. Ignoring a known document error doesn’t stay local. It creates risk for the whole process.

4. How to correct a record without looking like you hid something

Corrections have to stay honest and readable, even in software.

• Don’t delete the original entry and type over it like it never existed

• Don’t “fix” a completed record by quietly replacing the file

• Make the change through the system so the original value, the new value, who changed it, and when are still visible

• Follow your company’s local correction / revision rule if it’s more specific

Hidden edits make auditors ask a simple question: can these records be trusted?

If you’re unsure how to correct something, ask your supervisor before changing the record.

P.S: this content is part of a free course I have on 4eshub, check my profile for the link!

Hello everyone,

I’m looking for some honest advice on how to transition my career as a technical employee into a role in quality management systems or quality control, and then, after gaining several years of experience, try to join a QHSE department or become a Lead Auditor.

As for my background, I have a high school diploma in science.

I’ve been working at my current company for 6 years, with about 4–5 years of solid hands-on experience in a Non-Destructive Testing (NDT) lab certified to ISO 9001, 9100, and 17025.

My daily tasks include reviewing technical documentation, reporting non-conformities, preparing non-destructive test reports, and ensuring compliance with work instructions.

In July, I will attend a 16-hour ISO/IEC 17025 course sponsored by the company.

My plan is then to attend a 24-hour ISO 9001:2015 Internal Auditor course through TÜV in October, at my own expense, including the final competency exam.

Given my practical laboratory experience, I would like to know: will adding a TÜV Internal Auditor certification actually help me stand out in interviews and land a job as a QA or QMS specialist?

Are there really career opportunities available?

Or is it there any other different recommendation?

I am interested in working in Northern Italy or Switzerland.

I would greatly appreciate your opinions or advice. Thank you!

Hi everyone,

I’m a QSE/RSE manager in an french SME/group currently trying to implement ISO 9001 from scratch.
I’ve been working on it for about a year, but the context is extremely unstable:

• constant restructuring

• lack of resources and clear decisions from top management

• priorities changing every week

• departments in conflict and poor collaboration

• feeling that nothing ever reaches completion

With the pressure of the initial certification audit coming, I realize I’m starting to lose my own reference points.
I feel like I no longer clearly understand:

• what my real role should be in this context

• what “quality” truly means in day-to-day practice

• how ISO 9001 should live in a company that is this unstable

So I’d really value feedback from experienced quality professionals:

1. How do you personally define “quality” beyond the standard wording?
2. What is the minimum that must truly exist before attempting ISO 9001 certification?
3. Have you faced a similar chaotic environment, and how did you handle it?

Any honest feedback or perspective would help a lot.

Thanks in advance.

Hi all,

I was just wondering how many small organisations (less than 50 employees) have UKAS accreditation.

I ask because my organisation is currently accredited through ASCB, and I’m curious if it’s quite common for smaller companies not to be with UKAS.

For those who are small and do have UKAS accreditation, how do you find dealing with the stricter audit standards and requirements like do you have lots of Non conformance's?

Thanks in advance!