Impact ratings are this site's judgement of where audit attention will fall, not a figure published by ISO or the IAF.
Clause 4.1 / 4.2Already required
Context and interested parties: climate change
You must determine whether climate change is a relevant issue for the QMS, and interested parties may have climate-related requirements.
This is the change most often misread as new. It arrived in February 2024 through Amendment 1 to ISO 9001:2015, took effect immediately and carried no transition period. ISO 9001:2026 carries it forward unchanged. If your context review still has nothing on climate, you are not preparing for 2026 — you have been non-conformant since 2024.
Clause 5.1.1High
Leadership: quality culture and ethical behaviour
Top management must promote a quality culture and ethical behaviour, and be able to show how.
The genuinely new demand of this edition, and the hardest to evidence. A policy statement will not satisfy it. Expect the audit to move from your documents to your people: what happens when someone stops the line, whether a quality concern has ever overruled a shipping date, and whether staff describe the same culture the policy claims.
Clause 5.2Medium
Quality policy
The policy must connect to the strategic direction and the context you identified.
Aimed at the interchangeable policy that could belong to any company. If your policy would read identically with a competitor’s name on it, it does not meet this.
Clause 6.1High
Risks and opportunities, separated
Risk and opportunity are handled as distinct activities rather than one combined exercise.
The common failure is an opportunity column that is only a risk written backwards — "risk: machine fails / opportunity: machine does not fail". A real opportunity is something you chose to pursue: a process redesigned, a bottleneck automated, a market entered. It needs its own owner, resource and review.
Clause 6.3Medium
Planning of changes
Changes are planned, resourced, communicated — and reviewed afterwards for whether they worked.
Most organisations plan changes well and then never look back at them. The reviewable gap is the absence of any record that a completed change was checked for its effect on quality.
Clause 7.1.4Partly already required
Environment for the operation of processes
Psychological and social conditions — stress, workload, non-discrimination — count as part of the working environment.
Worth knowing that the 2015 edition already said this, in a note to 7.1.4 listing "social" and "psychological" factors including stress reduction and burnout prevention. What changes is weight and visibility: auditors now look for it rather than passing over a note.
Clause 7.1.6 / 7.3Medium
Organisational knowledge and awareness
Knowledge must survive people leaving, and staff must understand quality culture and ethical behaviour.
The awareness requirement now reaches the new culture and ethics wording, which means operators need to be able to say something real about it. Knowledge retention increasingly has to cover digital and automated systems, not only experienced staff.
Clause 8.4Medium
Externally provided processes, products and services
Supplier control expectations tighten, with attention to continuity of supply.
Approved-supplier lists that were last meaningfully reviewed years ago are the usual weak point. Evidence of what you do when a supplier fails matters more than the list itself.
Clause 9.3High
Management review
Review inputs reach the new areas: culture, ethics, climate relevance, opportunities.
Minutes are the cheapest evidence in the whole standard and the most often thin. If culture, ethics and climate were genuinely discussed, the minutes should show a discussion, not a line saying they were noted.
Clause Annex AReference
Expanded guidance
Annex A is substantially expanded and is where interpretation questions should be settled.
Informative, not auditable in itself, but it is the text your auditor is most likely to have been trained against. Read it before arguing an interpretation.
