Actions to address risks and opportunities — what changed from 2015 to 2026
Cut against the approved final draft (FDIS approved 7 August 2026) · ISO 9001:2026 publishes 16 September 2026
In 2015, risks and opportunities travel together through one blended requirement — and in most systems the 'opportunity' column quietly became decoration. The 2026 edition restructures the clause so the two are determined and acted on as distinct disciplines: risk-based thinking to protect what must not go wrong, and opportunity-based thinking to pursue what could go better. Same register, same planning cycle — but opportunities now need the same seriousness risks get: identified, evaluated, actioned, and checked for effect.
ISO 9001:2015 said
Risks and opportunities addressed together in a single blended requirement — opportunities routinely neglected.
ISO 9001:2026 says
Restructured: risk and opportunity are documented and pursued distinctly; 'opportunity-based thinking' arrives alongside risk-based thinking. 'Opportunity' itself remains undefined — define it yourself.
What to actually do
Give opportunities their own evaluation logic, owners and outcome reviews; action a few genuinely; review effectiveness at management review.
Full clause guidance
Get the free ISO 9001:2026 Readiness Scorecard
Free, instant download. We'll only email you the occasional practical quality update — no spam, unsubscribe anytime.
Based on the approved final draft of ISO 9001:2026 (ISO/FDIS 9001, approved 7 August 2026); the text and clause numbering are frozen at this stage. Qlause provides interpretive guidance only and is not a substitute for the standard — refer to your licensed copy of ISO 9001:2026 for the authoritative text.