ISO 9001:2026 implementation roadmap
The six phases that take an organisation from first gap assessment to ISO 9001 certification, with typical durations and what the 2026 edition changes.
Before you start
ISO 9001 is a management system standard, not a documentation exercise. The roadmap below works because each phase produces evidence that processes run as described. Decide three things first: the scope (sites, products and services), who in leadership owns the programme, and the date your customers or tenders need the certificate.
The six phases
Assess
Compare current practice with ISO 9001:2026 clause by clause, define the scope and agree a prioritised roadmap with leadership. Output: gap report, scope and plan.
Design
Set the quality policy and objectives, map processes and their interactions, build the risk and opportunity register, and write documented information at the level your processes need.
Implement
Run the processes and generate records: customer requirements reviews, supplier evaluation, production or service controls, nonconformity handling and corrective action.
Train
Awareness for all staff, role training for process owners and Internal Auditor training for the people who will audit the system.
Verify
Complete a full internal audit cycle and a management review, then a mock certification audit. Close corrective actions before the real audit.
Certify and sustain
An accredited certification body carries out Stage 1 (readiness and documentation) and Stage 2 (implementation on site). After certification, annual surveillance audits and recertification every three years keep the certificate valid.
What ISO 9001:2026 changes
ISO 9001:2026 was published in September 2026 and replaces ISO 9001:2015, with a three-year transition for certified organisations. The structure stays the same, clauses 4 to 10, with the Plan-Do-Check-Act cycle and risk-based thinking. Expectations on managing change are sharper, and climate considerations are part of the core requirements. If you are starting now, build to the 2026 edition; if you hold a 2015 certificate, plan a transition gap review.
How long it takes
- Greenfield, no system: typically 6 to 9 months.
- Basic systems in place: typically 4 to 6 months.
- Already certified, transition or integration: typically 3 to 5 months.
Scope, number of sites and how quickly decisions are made have more effect on the timeline than the standard itself.
Certification decisions are made by independent, accredited certification bodies. AEC prepares organisations for certification and does not guarantee certification outcomes.
Want a roadmap for your organisation?
Start with a gap assessment. We reply with a proposal and a timeline for your scope.