PublishedISO 9001:2026 published 16 Sept 2026 · 2015 certificates must transition by 30 Sept 2029What changed →
Internal Auditor course (ISO 19011:2026):free until 31 Oct · then $59 for three monthsStart free now →

Insights

Quality management, in plain language

Practical guidance on ISO 9001 and the 2026 transition, ISO 14001, food safety, core tools, problem solving and auditing — written by people who have run plants and audited them, not generic checklists.

Series: ISO 9001:2026 transition

Live series

ISO 9001:2026 was published on 16 September 2026, and ISO 9001:2015 certificates must transition by 30 September 2029. A clause-by-clause guide to what changed and how to prepare.

The ISO 9001:2026 Transition Toolkit →

★ISO 9001:2015 vs 2026: a side-by-side comparisonA clause-by-clause look at what actually differs between ISO 9001:2015 and the 2026 edition — and where the two are the same — so you can size the real gap for your own system.1The ISO 9001:2026 transition timeline: the 3-year clock, explainedISO 9001:2026 was published on 16 September 2026, and the transition rules are confirmed: certified organisations have until 30 September 2029. The four official dates, when your own audit actually switches, and a realistic plan to get there early.2ISO 9001:2026: what's changing, and how to get ahead of itISO 9001:2026 was published on 16 September 2026, and ISO 9001:2015 certificates must transition by 30 September 2029. Here is a plain-language map of what actually changed — and what did not.3Climate change in your context: clauses 4.1 and 4.2The one change that is already mandatory. What clauses 4.1 and 4.2 now expect, and the documentation an auditor will look for — even if climate change is not material to your business.4Quality culture and ethics: the new 5.1.1 and 7.3 expectationsISO 9001:2026 asks leadership to demonstrate a quality culture and ethical behaviour — and asks every employee to be aware of it. What that means in practice, without launching a 'culture programme'.5Risk and opportunity, pulled apart: the restructured clause 6.1Clause 6.1 is split into subclauses so that managing risk and pursuing opportunity are handled distinctly. Mostly a documentation change — here is how to make the split cleanly.6Management of change grows teeth: the strengthened clause 6.3Clause 6.3 already existed in 2015 — but the 2026 draft adds communicating, monitoring and reviewing changes. "We made the change" is no longer the finish line. Here is the practical close-out.7Annex A: ISO 9001's expanded guidance section — and why auditors will lean on itThe 2026 edition replaces the short Annex A of 2015 with a far more extensive informative Annex A: guidance, not requirements. It cannot be cited in a nonconformity, but it will quietly shape how your audits feel. Here is why it matters.8Terms now in clause 3 — and the one that's missingISO 9001:2026 pulls a selection of core terms into clause 3 instead of only pointing to ISO 9000. Useful — but "opportunity", now half of clause 6.1, is still left undefined. What that means in practice.

Series: Core Tools

Process flow, PFMEA and the control plan — the chain that turns process risk into controls on the floor.

The PFMEA Toolkit — with the free process flow and control plan templates →

Control plans explained: what goes in one, how it links to the PFMEA, and a free templateA plain-language guide to the manufacturing control plan — what every column is really asking, the three phases and safe launch, how it traces back to the PFMEA and special characteristics, what IATF 16949 clause 8.5.1.1 expects, and why the reaction plan is the part auditors test. With a free control plan template and health check.26 August 2026Process FMEA explained: the AIAG-VDA 7-step method, Action Priority vs RPN, and the process flow that feeds itA plain-language walk through the AIAG-VDA Process FMEA — the seven steps, why Action Priority replaced RPN and what the letters oblige you to do, how the process flow diagram feeds Structure Analysis, and how special characteristics carry through to the control plan. With a free process flow template.2 September 2026PPAP explained: the 18 elements, submission levels 1–5, run-at-rate, and what the submission is actually provingA plain-language guide to the Production Part Approval Process — the 18 elements grouped by what each one proves, why the submission level changes what you send but not what you must have, the part submission warrant, run-at-rate and initial process studies with worked numbers, and the changes that trigger re-submission. With a free control plan template.22 October 2026MSA and Gage R&R explained: type 1 studies, ANOVA vs average and range, %GRR vs %tolerance, ndc and attribute agreementA plain-language guide to measurement systems analysis — bias, linearity, stability, repeatability and reproducibility; the type 1 study; a crossed Gage R&R worked by ANOVA and by average and range; the 10% / 30% bands and ndc ≥ 5, and which denominator to use; attribute agreement for go/no-go gauges; and what gauge error does to your Cpk. With a free Gage R&R study template.22 October 2026

Series: Information Security

ISO/IEC 27001:2022 explained for people who already run ISO 9001: what is the same, what is new, and how to get certifiedISO/IEC 27001 shares its clause structure with ISO 9001, so a quality manager already knows four fifths of it. This is the other fifth: the formal risk method, the Statement of Applicability, the 93 Annex A controls and the evidence rhythm — plus where implementations fail, how the standard meets POPIA section 19 and 22, and a 44-week path to certification. With a free gap analysis checklist covering every clause and control.2 October 2026The Statement of Applicability, explained — what ISO/IEC 27001 clause 6.1.3 requires, the four ways an SoA fails Stage 1, and how to build one from the risk registerThe Statement of Applicability fails more Stage 1 audits than any other ISO 27001 document, because most organisations produce the wrong one: 93 rows marked applicable with 'best practice' as the reason. Here is what clause 6.1.3 actually asks for, the five-step process the SoA records, the four failure modes auditors spot in minutes, and a method that derives the SoA from the risk register — with a free gap checklist whose Annex A tab is a first draft.3 October 2026ISO/IEC 27001:2022 Annex A explained: the 93 controls in plain English, theme by theme, with the 114-to-93 map and the attribute tagsAnnex A is not a checklist — it is the reference set you compare your risk-based control selection against. This walk through all four themes explains what each group of controls is for, which matter most for a 50-to-500-person organisation, where the eleven new-in-2022 controls landed, how the 2013 edition's 114 controls became these 93, and what the ISO 27002 attribute tags are good for. With a free A3 quick reference of all 93 controls.3 October 2026POPIA section 19 and ISO 27001: how the standard evidences the law — and why a certificate is not complianceSection 19 of POPIA reads like a description of an information security management system — identify the risks, keep safeguards in place, verify them, update them. This article maps the Act's security, operator, notification and Information Officer duties to the ISO/IEC 27001:2022 clauses and Annex A controls that evidence them, is exact about what no certificate covers, and comes with a free POPIA ↔ ISO 27001 crosswalk.3 October 2026What ISO 27001 actually requires for security awareness and training — clauses 7.2 and 7.3, control A.6.3, and what the auditor tests on the floor'Awareness training' is three different requirements in ISO/IEC 27001 — competence for the roles that matter, awareness for everyone, and a living programme as a control. This article says what each asks, who is in scope, what an auditor tests (and why the forty-slide deck fails on the floor), how to build a programme that produces evidence because it works, and the one statistic worth quoting.3 October 2026

Series: Food Safety

HACCP from the flow diagram up, and the FSSC 22000 Version 7 upgrade — the Codex steps, CCPs and OPRPs in plain English.

The HACCP Plan Toolkit →

Series: Internal Auditing

Planning, running and reporting internal audits — and writing findings that survive the closing meeting.

The free Internal Auditor course →

Series: Problem Solving

8D, root cause analysis and the discipline of fixing problems permanently.

The 8D Problem-Solving Toolkit →

Series: SPC

Control charts and capability: telling signal from noise, and proving a process can hold its tolerance.

The SPC Control Chart Toolkit →

Series: Continuous Improvement

Lean and constraint thinking for plants that are always busy and still late.

The free CI Academy →

Series: ISO in South Africa

Straight answers for the SA market — what certification really costs, and how to tell a legitimate certificate from an expensive PDF.

The free certification cost calculator →

Series: ISO 14001:2026

The environmental management standard's new edition — what changes, and how to transition by 30 April 2029.

The ISO 14001:2026 Transition Toolkit →

Series: Workplace Safety

Companion articles to the free Qlause Safety Series — ten professional training videos with downloadable packs.

The free Safety Series →

Series: Document Control

Numbering, revisions and approvals — the foundation layer of any QMS.

The ISO 9001 Documentation Toolkit →

More insights

Facing the 2026 transition or an upcoming audit? Start with the free ISO 9001:2026 hub — every change, tracked through to publication.

ISO 9001:2026 hub

Certification & implementation

Working on a certification or system implementation project?

Implementing ISO 9001, moving to the 2026 edition, getting ready for a certification audit, or stuck on a clause that doesn't seem to fit your operation? Tell us where you are and where you're stuck. We'll look at it and suggest a practical next step, or connect you with people we trust who can help.

Email hello@qlause.app

No sales pitch, no obligation — we read every message.