Map shared workflows without merging the scopes
Create a comparison register with one row per relevant requirement, its quality-management objective, any related ISMS process, available evidence and remaining work. A shared review meeting can discuss both systems, but its decisions must still address each system’s objectives. Do not label a security risk register as a complete quality-management analysis without checking what is missing.
ISO schedules the sixth edition of ISO 9001 for 16 September 2026. Checked on 8 September 2026: the official standard page lists it as under publication. At this check date, the new edition is therefore still a planned publication.
Publication is not a transition deadline
The official ISO page supports the planned publication date. This review did not confirm a final, universally applicable transition deadline. The previous categorical claim of a three-year transition ending in September 2029 has been removed. Confirm the transition arrangements and your certificate’s validity with your certification body.
Prepare a controlled comparison
Identify which edition your policies, contracts and audit programme reference. Assign an owner to compare the final requirements with your existing system once published. Record affected processes, available evidence, required changes and approval decisions. Do not treat a summary of a draft as the complete final standard.
Working alongside ISO 27001
Context analysis, document control, internal audits and management review can share an organisational workflow. Quality management and information security still have distinct objectives and scopes. An established ISMS can support the method of working, but does not demonstrate conformity with every quality management requirement.
Practical preparation checklist
- Verify final publication with ISO.
- Confirm applicable transition arrangements with the certification body.
- Compare the full new standard with current practices.
- Plan targeted changes, training and internal checks.
- Keep the source versions and recorded decisions.
The publication date, transition deadline and expiry date of an individual certificate are different facts. This page verifies the current publication plan, not an unconfirmed transition rule.