ISO 9001:2026 and 9001:2015
ISO 9001 Standard Implementation
Previous edition: ISO 9001:2015
New edition: ISO 9001:2026 (the 2015 edition remains valid until the end of the transition period — expected until September 2029)
ISO 9001 is the world's most widespread management-system standard. It organises an organisation's processes so they consistently deliver quality, satisfy customers and continuously improve. Regardless of sector, this is the standard we recommend as the first step — the foundation that every other management system naturally builds on.
What is ISO 9001?
ISO 9001 defines the requirements for a quality management system (QMS) applicable to any organisation, regardless of size or sector — from manufacturing and construction to IT companies, healthcare and the public sector. Over a million organisations worldwide hold this certificate, making it a universal language of trust between business partners.
The standard rests on seven quality-management principles: customer focus, leadership, engagement of people, process approach, improvement, evidence-based decision making, and relationship management. In practice this means clearly defined processes, responsibilities and measurable objectives — instead of working on autopilot and depending on individuals.
🎯 Our recommendation: the foundational standard for every organisation
If you're just starting out with standards or aren't sure where to begin, ISO 9001 is almost always the right first choice — applicable to any organisation, regardless of size or sector. The organised processes this standard brings make implementing every subsequent standard (ISO 14001, 45001, 27001…) easier, so investing in ISO 9001 is also an investment in faster, cheaper expansion of the system later.
Implementation phases
The real phases we guide every project through — from preparation to the certificate, which comes only at the end:
An illustrative, typical scenario we often hear from clients — it does not represent a specific, named client.
“Before ISO 9001 every process lived ‘in the head’ of one person — when they went on holiday, nobody knew the exact order of the steps. Today we have mapped processes, clearly defined responsibilities and a complaints record that shows us where we actually go wrong, rather than where we think we go wrong.”
— a common scenario among our clients
Standard requirements (clauses 4–10)
The steps follow clauses 4–10 of the standard — the same structure an auditor checks during certification. Not sure whether you already meet these requirements? Check with the short self-assessment at the bottom of this page.
Organisational context and process approach
We analyse the environment, interested parties and define the scope of the QMS. We map processes, their links, inputs, outputs and owners — the foundation of the whole system.
Leadership and the quality policy
Management adopts the Quality Policy, defines responsibilities and demonstrates commitment — without top-level support, the QMS remains a dead letter on paper.
Risks, opportunities and quality objectives
For every process we identify risks and opportunities, plan measures and set measurable objectives with deadlines and responsibilities.
Resources, competence and documentation
We organise knowledge management, competence, infrastructure and measuring equipment. Documentation is scaled to the size of the organisation.
Realisation: from requirement to delivery
We organise operational processes — review of customer requirements, design, procurement, production or service delivery, and control of nonconforming outputs.
Performance measurement and internal audit
We track customer satisfaction and process indicators, carry out the internal audit and the management review.
Improvement
Nonconformities and complaints are analysed down to root cause, corrective actions are implemented, and the system enters the PDCA cycle of continual improvement.
The path to certification
Certification is carried out by an accredited certification body in two stages.
The prerequisite for everything: the system is implemented and applied in practice — every requirement of the standard met, the internal audit carried out and the management review completed.
Checking whether the QMS documentation covers the standard's requirements and readiness for the main audit.
Checking application in practice through interviews, process observation and record review.
Once any nonconformities are closed, the certificate is issued, valid for 3 years.
Annual surveillance audits maintain the certificate; recertification follows in the third year.
Benefits of Adopting the Standard
A standard requirement of public procurement and foreign customers — without it, many doors stay closed.
Clear responsibilities and workflows reduce errors, duplicated work and dependence on individuals.
Systematic tracking of satisfaction and complaints turns feedback into concrete improvements.
The QMS shares its structure with ISO 14001, 45001 and 27001 — later extensions are faster and cheaper.
🎯 Our recommendation: the foundation standard for every organisation
If you are just starting out with standards, or you are not sure where to begin, ISO 9001 is almost always the right first choice — it applies to any organisation, whatever its size or activity. The orderly processes it brings make every further standard (ISO 14001, 45001, 27001…) easier to introduce, so investing in ISO 9001 is at the same time an investment in extending the system faster and more cheaply later on.
Related standards
Thanks to the shared High-Level Structure (HLS), ISO 9001 integrates naturally with ISO 14001 and ISO 45001 into the classic IMS trio tenders ask for. It shares the same risk-management principles with ISO 27001, and sector standards such as ISO 13485 and IATF 16949 are built directly on the ISO 9001 foundation.
ISO 9001 training — from a basic understanding of the standard to internal auditor training. Delivered at your premises, online or as a combination of both.
FAQ about ISO 9001
What is new in ISO 9001:2026, and is a certificate against the 2015 edition still valid?
Yes, it is. ISO 9001:2026 was published on 16 September 2026, and certificates against the 2015 edition remain valid during the transition period, which is expected to last about three years — it is set officially by the Global Accreditation Cooperation (formerly IAF). The new edition brings quality culture and ethical behaviour into the requirements, separates risks and opportunities, builds climate change into the context of the organisation and adopts the latest harmonised structure. For a well-organised system, the transition is an extension, not a new project.
How long does ISO 9001 implementation take?
For small and medium organisations, usually 2 to 6 months, depending on the number of processes, locations and your team's availability. For large systems — over 500 employees, multiple locations or an integrated system of several standards — a project realistically runs beyond a year; we handle those clients too.
Is ISO 9001 only for manufacturing companies?
No — it applies to any organisation: service companies, IT, healthcare, education, the public sector.
How much documentation is really needed?
The 2015 revision significantly reduced mandatory documentation. The goal is documents that help the work, not binders for the auditor.
How long is the certificate valid?
Three years, with mandatory annual surveillance audits and a recertification audit once the cycle ends.
How much does ISO 9001 implementation cost?
There is no fixed price that applies to everyone — the cost depends on the organisation's field of activity, its size and number of employees, the chosen standard and the current state of the system. Send us a short description of your organisation and we will prepare a free, tailored estimate.
Standards that fit together like a honeycomb
Each standard keeps its own shape, but together they form a single solid, integrated management system (IMS) — with no gaps or overlaps. Click a hexagon to open that standard.
More about the integrated management system
An integrated management system (IMS) combines two or more ISO standards — for example ISO 9001 with ISO 9001 or ISO 14001 — into one shared framework of documentation, objectives and internal reviews, instead of each standard living in its own parallel procedure.
A single structure (the High-Level Structure — HLS) shared by every modern ISO standard. Thanks to it, the quality policy, risk management, internal audits and management review can be common to several standards at once.
Each standard on its own addresses one part of the business — quality, environment, safety, information. When an organisation introduces several of them, separate systems quickly duplicate the same documentation and the same auditors.
Less duplicated procedure work, simpler management, stronger process oversight, more efficient use of resources and easier preparation for a combined certification audit.
ISO 9001 can be implemented on its own or as part of an integrated system — the decision depends on how many standards you're targeting and whether you're introducing them at once or gradually.
Check your organization's readiness
Answer a few questions and receive an indicative assessment of your organization's current level of readiness for ISO 9001.
This self-assessment provides an indicative readiness result only. It does not constitute certification, an official audit, or formal confirmation of compliance.
ISO 9001:2026 has been published — what's new
New edition published on 16 September 2026
The International Organization for Standardization (ISO) published ISO 9001:2026 on 16 September 2026. The new edition replaces ISO 9001:2015, the standard used by more than a million organisations worldwide. Certificates against the 2015 edition remain valid during the transition period, whose length is set officially by the Global Accreditation Cooperation (formerly IAF) — it is expected to be about three years, until autumn 2029.
In Montenegro, the 2015 edition is currently adopted under the designation MEST EN ISO 9001:2016; adoption of the new edition will follow.
What changes
- Quality culture and ethical behaviour are part of the requirements for the first time — top management actively promotes them, and they show through training, open communication and personal example, not just a signed policy.
- Risks and opportunities are separated — actions to address risks and actions to address opportunities are planned separately, in clauses 6.1.2 and 6.1.3.
- Climate change is part of the context of the organisation — the 2024 amendment is now built into clause 4.1.
- The latest harmonised structure of ISO management system standards — easier integration with ISO 14001, ISO 45001 and other standards.
- A new part that explains the intent of the requirements, so that they are applied consistently. The standard remains technology-neutral: artificial intelligence has not been introduced as a separate requirement.
If your system under the 2015 edition is well maintained, the transition is not a new project but an extension of what you already have.
Certification bodies first go through accreditation for the new edition, so certificates against the 2026 edition come only after that. If certification is still ahead of you, there is no reason to wait: the system is built now, and you agree with the certification body which edition the audit will follow.
Certified against the old edition? We will guide you to the new one
The transition is not a new project from scratch — your system stays, and only what the standard now requires is added. With us, it works like this:
- Gap analysis — we go through your existing documentation and tell you what already covers the new requirements and what is missing. For most organisations, one to two days.
- Documentation update — only what the new edition requires is changed, without rewriting the whole system.
- Short team training on what is new, so people know what the auditor will ask.
- The transition is usually carried out at a regular surveillance or recertification audit, with additional audit time determined by the certification body.
- The deadline is expected around September 2029. When the transition period ends, a certificate against the old edition is no longer valid.
The EU, the US and other markets
ISO 9001 is the same standard wherever you certify it — what differs is the designation, the accreditation behind the certificate and what your customers ask for.
In the European Union the standard is adopted with an EN prefix, and what your buyer in the Netherlands, Germany or France looks at is not the prefix but the accreditation behind the certificate: a body accredited by a signatory of the international recognition arrangement (Global Accreditation Cooperation, formerly IAF) is recognised in other markets too. What EU partners and EU regulation expect is on the page about the EU market.
For companies with customers in the United States — supplier audits, security questionnaires and how ISO sits alongside SOC 2 — see the page about the US market.
Wherever your customer is, we run the project remotely in English — over Teams, WhatsApp or Viber, with documentation and records in English — and on site when that is easier.
Montenegro and the region: MEST EN ISO 9001:2016
When people ask about a MEST EN ISO 9001:2016 certificate (or a ISO 9001:2015 certificate), they mean the confirmation issued by an independent accredited certification body to an organisation whose system complies with every requirement of this standard. Montenegro's national edition of the standard carries identical content to the international edition — the same requirements, the same clauses, just under a national designation — which is why both designations turn up in tenders for the same standard.
Why do the designations differ if it's the same standard?
Every member country of the European and international standardisation system adopts the same standard into its own national catalogue and adds a national prefix — in Montenegro, that's MEST. The content, structure, clauses and every requirement an auditor checks during certification remain completely identical regardless of which designation appears on the document. That's why a certificate issued under one designation fully covers the other — it isn't two standards, but one and the same, simply under two names.
Our core activity is standards implementation and rollout: we prepare your organisation so the certification audit goes without surprises, and we explain terms like "ISO 9001:2015 certification" and "MEST EN ISO 9001 certificate" because that's exactly how clients search for them. What certification, accreditation, IAF and surveillance audits involve — read the Certification / ISO Certificate page, and about tender designations on the ISO Standards in Tenders page.
Montenegro is where we work from: our consultants are based in Podgorica, Budva and Bijelo Polje, documentation and training come in Montenegrin or in English, and the certificate itself is issued by an independent accredited certification body — not by us. We work on site in Serbia, Bosnia and Herzegovina, Croatia, North Macedonia, Albania and Kosovo as well — more about what we do in Montenegro.
Some of our references
More than 400 organisations in Montenegro and the region have gone through implementation with us — from banks and public bodies to manufacturing, IT, laboratories and hospitality.
These are only some of our clients. More about us →
Request a free consultation
We will assess the scope of work and propose a realistic plan and budget for your organisation. Call us or send an inquiry — we reply within 24 hours.