ISO 9001 is one of the most widely used management system standards in the world, and it is being rewritten. The updated version, referred to as ISO 9001:2026, has moved through its final drafting stage and is expected to be published around September 2026. Organisations that hold certification will then have a transition period of about three years to move across.

For anyone working in or training towards healthcare quality auditing, that timeline matters. A revision of this size does not just change a document. It creates several years of gap analysis, internal audit work, retraining and re-certification across every certified organisation in the country, and that work has to be done by auditors.

Here is where the revision is up to, what appears to be changing, and what a transition looks like from an auditor’s desk.

ISO 9001 has not had a substantial revision since 2015, so this is the first significant update in about a decade.

The Draft International Standard, the version released for public comment, was published in August 2025. The Final Draft International Standard, the last stage before publication and one that normally allows only editorial changes, went to ballot within ISO and the European Committee for Standardization around April 2026. Certification bodies including BSI have since confirmed that draft was released, and publication is expected in September 2026.

Be precise about both dates, because neither has happened yet. September 2026 is an expectation based on the current schedule, not a confirmed release date, and the three year transition runs from whenever publication actually occurs. Treat any firm end date you see quoted as an estimate until ISO publishes.

Guidance published by certification bodies so far points to an evolution rather than a rebuild. The process approach, the risk-based thinking and the overall clause structure that auditors already know are staying, and the changes sit inside that frame. The themes that come up consistently across guidance from BSI, DQS and TUV are:

• Quality culture and ethical behaviour. Leadership responsibilities are expanded so that top management is expected to promote a quality culture and ethical behaviour, and awareness requirements extend to cover them too.
• Risk and opportunity pulled apart. Clause 6.1 is subdivided so that actions to address risks and actions to pursue opportunities are considered separately, rather than being treated as one combined requirement.
• Climate change in organisational context. Climate change and sustainability enter the standard through the analysis of organisational context and interested parties. Guidance from DQS is explicit that this does not turn ISO 9001 into an environmental or ESG standard.
• Strategic direction. A clearer link between quality policy, quality objectives and the organisation’s longer term strategy.
• Change management reinforced. Requirements covering changes to the quality management system are strengthened, so the system keeps delivering its intended results while it changes.
• A much larger Annex A. BSI describes roughly 15 pages of guidance clarifying structure, terminology and clauses, which is a substantial jump on what auditors have had previously.

Until ISO publishes the final text, read all of this as well informed expectation from bodies close to the drafting process, not as settled requirements. That distinction matters if you are advising anyone.

ISO standards are international, but they arrive here through a local pathway. ISO 9001 is adopted in Australia and New Zealand as AS/NZS ISO 9001, and that is a straight adoption rather than a modified local version, so the requirements match what the rest of the world works to.

The certification layer is local as well. JAS-ANZ, the Joint Accreditation System of Australia and New Zealand, accredits the certification bodies that certify organisations here. JAS-ANZ accreditation is not legally compulsory, but it is what most government and major commercial contracts specify, which makes it the practical benchmark.

In Australian healthcare, ISO 9001 rarely stands alone. Hospitals work to the NSQHS Standards, registered aged care providers to the strengthened Aged Care Quality Standards, and NDIS providers to the NDIS Practice Standards. Plenty of organisations run ISO 9001 alongside one of those, because the sector framework covers clinical safety and quality while ISO 9001 covers the management system underneath it. Our guide to ISO 9001 and the NSQHS Standards walks through which framework applies where.

This is the part that turns a standards announcement into a workforce story. A three year transition window is not three quiet years. It is a queue of work with a deadline on the end of it, and it hits two groups at once.

Inside certified organisations, someone has to run a gap analysis against the new text, update the quality manual and procedures, revise the internal audit programme and audit criteria, retrain internal auditors, brief the governing body on the leadership and quality culture requirements, and then audit against the new version before the certification body arrives. In healthcare organisations already carrying NSQHS or aged care obligations, that work sits on top of an existing accreditation calendar rather than replacing it.

At the certification bodies, every auditor on the scheme has to be retrained and requalified before they can audit to the revised standard, and transition audits then have to be scheduled across an entire client base inside the same window. That is why transitions tend to create a crunch rather than a smooth ramp.

Transitions do not reduce demand for auditors, they concentrate it. An organisation running a quiet, stable management system suddenly needs someone who can read a revised standard properly, work out what actually changed, and evidence it. That skill is the core of the job. Our guides to becoming a lead auditor in Australia and to quality auditor career pathways cover the internal, external and consulting routes.

If you already audit, the useful move now is familiarisation rather than rewriting anything. Read the published guidance from the certification bodies, note where clause 6.1 splits and where the culture and context requirements land, and wait for the final text before you touch a procedure.

If you are moving into the field, the more useful realisation is that this revision is normal. Standards are living documents on review cycles. The NSQHS Standards are heading for a third edition, the aged care standards were strengthened in 2025, and ISO 9001 is on its own cycle now. An auditor who can only recite the current version of one standard has a short career. An auditor who understands audit method, how to plan an audit, gather and weigh evidence, write a defensible finding and track corrective action, carries that skillset across every framework and every revision.

That is what the BSB50920 Diploma of Quality Auditing from TalentMed is built around, with ISO 9001, the NSQHS Standards and clinical governance woven through the learning. It is delivered 100 percent online and self-paced over 12 months, with intakes year round, so you can study while you work. Current fees, payment options and the full unit list are on the course page.

Ready to build a career around a skillset that outlasts any single version of any single standard? Explore the BSB50920 Diploma of Quality Auditing or read the full quality auditing career guide.

TalentMed Pty Ltd, RTO 22151. Nationally recognised training delivered online across Australia.