ISO 9001:2026 Certification Support in the Philippines: Accreditation, the Audit Sequence and the Transition

Updated 18 September 2026 against the ISO 9001:2026 standard (sixth edition, published 16 September 2026). Reviewed by Kaushal Sutaria, Lead Auditor, Sterling International Consulting.

ISO 9001:2026 certification in the Philippines is issued by an accredited certification body after a stage 1 and stage 2 audit, kept alive by annual surveillance audits and renewed by a recertification audit every three years; for organisations certified to ISO 9001:2015, a transition audit moves the certificate to the 2026 edition. Sterling prepares organisations for that sequence and supports them through it, and does not issue certificates. Under Global ACI’s transition requirements, accredited ISO 9001:2026 certificates appear as certification bodies complete their own accreditation transition during 2027, new certifications are to the 2026 edition only from 31 March 2028, and ISO 9001:2015 certificates lose validity after 30 September 2029.

Key facts about certification to the 2026 edition

• ISO 9001:2026 was published on 16 September 2026 as the sixth edition; it cancels and replaces ISO 9001:2015 and incorporates Amendment 1:2024 (climate change).
• Global ACI (Global Accreditation Cooperation Incorporated, which took over the roles of IAF and ILAC on 1 January 2026) issued Global ACI-TECH-3-TR 2029-09-30 (M), dated 4 September 2026 and announced on 16 September 2026, setting the transition timetable below.
• No accredited ISO 9001:2026 certificate can be issued by a certification body until its accreditation body has extended its accreditation to the 2026 edition; an offer to “re-issue” a certificate without a transition audit is a warning sign.
• The Philippine Accreditation Bureau (PAB), under the Department of Trade and Industry, accredits certification bodies for ISO 9001 and is a signatory to the regional and international mutual recognition arrangements for quality, environmental and food safety management system certification. Foreign accreditation bodies such as UKAS, ANAB, JAS-ANZ and IAS also accredit bodies operating in the Philippines.
• Sterling does not certify. Certification bodies must be impartial under ISO/IEC 17021-1 and may not consult for the organisations they certify.

How accredited certification works in the Philippines

Accredited certification is a chain of four links, and a certificate is only as good as the weakest one. ISO writes the standard. Global ACI operates the international arrangement under which accreditation bodies recognise one another. Accreditation bodies assess and accredit certification bodies. Certification bodies audit organisations and issue certificates. Sterling sits outside the chain as the organisation’s consultant and internal auditor.

In the Philippines the national accreditation body is PAB, under DTI, which accredits certification bodies against ISO/IEC 17021-1 for ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001 and other schemes, and which holds signatory status in the APAC and international arrangements for QMS, EMS, FSMS and product certification. Many certification bodies operating here are instead accredited by a foreign body, most commonly UKAS, ANAB, JAS-ANZ or IAS, and because those bodies are signatories to the same arrangement, a certificate issued under any of them carries equal standing with Philippine procuring entities and export customers. What a buyer or a bids and awards committee checks is that the accreditation body on the certificate is a signatory and that the certificate can be confirmed with the issuer or in the CertSearch database linked from Global ACI’s website. A certificate issued by a body with no accreditation, or with “accreditation” from an organisation outside the arrangement, is not accredited certification, whatever the seal says. Our guide to verifying an ISO certificate sets out the checks.

What Sterling does, and what it does not do

Sterling prepares organisations for certification and supports them through audits; it does not audit for the purpose of issuing a certificate, and it does not issue one. The separation is not a marketing position; it is what ISO/IEC 17021-1 requires of certification bodies, and it is what gives an accredited certificate its value. The table sets out the division of labour.

Activity	Sterling	Certification body
Gap analysis and gap report against the ISO 9001:2026 standard	Yes	No
System design, documentation, registers, training	Yes	No (a body that does this cannot certify you)
Internal audits under 9.2, as your first-party auditor	Yes	No
Selection of a certification body on accreditation and scope	We advise; you choose	—
Stage 1, stage 2, surveillance, recertification and transition audits	We prepare you and attend at your request	Yes, as the third-party auditor
Issuing, suspending, withdrawing certificates	Never	Yes
Closing nonconformities after an audit	We help you find causes and evidence	Reviews and accepts your corrective action
Certificate verification for tenders and customers	We show you how	Confirms its own certificates

We do not accept referral fees from certification bodies, and we will not work with a provider that offers to consult and certify the same client. That arrangement is not accredited certification, and the certificate it produces fails when a customer or a procuring entity verifies it.

The audit sequence, from stage 1 to recertification

Every accredited certification follows the same sequence, whichever body you choose. The transition audit for organisations already certified to ISO 9001:2015 is an addition to it, not a replacement, and the table shows where it fits under Global ACI’s transition requirements.

Audit	When	What the certification body does	What you need in place
Stage 1	Once the system is documented and running	Reviews scope, documentation, context, objectives, internal audit and management review; confirms readiness for stage 2; raises areas of concern	Scope statement, policy, process map, registers, at least one internal audit and one management review planned or completed
Stage 2	Typically two to eight weeks after stage 1	Audits the system in operation: interviews at all levels, sampled records, process observation; raises nonconformities; recommends certification when closed	Records of operation; corrective actions from stage 1 closed; staff able to describe their part of the system, including 7.3 e)
Certificate issued	After stage 2 nonconformities are closed	Issues a certificate valid for three years, subject to surveillance	—
Surveillance	Annually, or as the body schedules within the cycle	Samples part of the system; verifies previous findings closed; checks the certificate’s continuing validity	Continued operation; internal audit and management review each year; complaints and changes recorded
Recertification	Before the certificate expires at year three	Full system audit; renews the certificate for a further three years	The whole system in evidence; a full internal audit cycle completed
Transition audit (2015 to 2026)	With a surveillance or recertification audit, or as a special audit, once the body is accredited for the 2026 edition	Reviews the changed requirements of ISO 9001:2026 and changes in the organisation’s context; may be conducted remotely by ICT where appropriate; updates the certificate to the 2026 edition	Gap analysis completed; documents, registers, policy and review agenda updated; one internal audit and one management review to the 2026 edition
Special audit	When the body needs to investigate a complaint, a change of scope or a suspended certificate	Focused audit on the matter in question	Evidence on the matter

Two points on the transition audit deserve emphasis. First, the certification body must consider whether additional audit time is needed and justify its calculation under ISO/IEC 17021-1 and the accreditation rules on audit time; combined with a recertification audit it may need none, combined with a surveillance audit it usually needs some. Second, an internal audit run on a 2015 checklist will not satisfy the body that the 2026 requirements have been tested; the internal audit checklist page explains why the checklist has to be rebuilt.

The Global ACI transition timetable

Global ACI-TECH-3-TR 2029-09-30 (M) sets a three-year transition period measured from the last day of the publication month of ISO 9001:2026, and a set of milestones for accreditation bodies and certification bodies. The milestones determine when an accredited ISO 9001:2026 certificate can exist in the Philippines, and they are the dates to plan against.

Milestone	Date	What it means for you
Accreditation bodies ready to assess to ISO 9001:2026	by 31 March 2027	PAB and the foreign accreditation bodies can begin extending certification bodies’ accreditation
Certification bodies submit transition declarations	by 30 June 2027	Your body will know its expected date; ask for it in writing
Accreditation bodies complete transition decisions	by 30 September 2027	Every body still offering ISO 9001 is accredited for the 2026 edition by this date, many earlier
New and initial certifications only to ISO 9001:2026	from 31 March 2028	First-time certification after this date is to the 2026 edition only
Accreditations for ISO 9001:2015 no longer valid	after 30 September 2029	Every ISO 9001:2015 certificate must have been transitioned by this date

A certificate to ISO 9001:2026 dated before the issuing body was accredited for the 2026 edition is not an accredited certificate, and a procuring entity or customer that checks will find that out.

Can I be certified to ISO 9001:2026 now?

Not on an accredited basis until your chosen certification body’s accreditation has been extended to the 2026 edition, which the timetable above places during 2027. What you can do now is build or transition your system to the ISO 9001:2026 standard, complete the internal audit and management review to the 2026 edition, and book the audit against the body’s confirmed date.

For an organisation certifying for the first time there are two honest routes. Wait for the body’s 2026 accreditation and take stage 1 and stage 2 to the 2026 edition; or, if the system is ready earlier, be certified to ISO 9001:2015 with a system already built to the 2026 standard and transition at the first surveillance audit, which is possible until 31 March 2028 and involves no rework because the 2026 additions conflict with nothing in 2015. For an organisation already certified, the route is a transition audit at the next surveillance or recertification visit after the body is accredited, or a special audit if timing requires. The implementation page covers the first route in detail and the transition deadline page keeps the second current.

Choosing a certification body, and spotting a mill

Choose on accreditation, scope, auditor competence in your sector and the body’s 2026 accreditation date, and choose early, in the scoping phase rather than the week before you need a certificate. The questions below are the ones to put in writing before signing, and the answers separate an accredited body from a certificate mill.

• Which accreditation body accredits you for ISO 9001, and is it a signatory to the arrangement operated by Global ACI? Ask for the accreditation certificate and scope.
• When do you expect your accreditation to cover ISO 9001:2026, and how will you conduct transition audits: with surveillance, with recertification, or as a special audit?
• How is audit time calculated for our headcount, sites and complexity, and what would a transition audit add?
• Do your auditors have experience in our sector, and can we see the audit plan before the visit?
• Do you offer consultancy, templates or documentation to the organisations you certify? The correct answer is no; ISO/IEC 17021-1 forbids it.

The warning signs of a mill are the mirror image: a certificate promised within days, no stage 1 or stage 2, a price that could not cover an auditor’s day, an accreditation claim that cannot be traced to a signatory body, a certificate to ISO 9001:2026 offered before any body could be accredited for it, or an offer to re-issue your existing certificate to the 2026 edition without an audit. Such certificates are sold every week in the Philippines and fail every time a bids and awards committee or an export customer verifies them.

Certificates, tenders and verification

Philippine procuring entities, export customers and offshore clients use ISO 9001 as an eligibility filter, and what they verify is that the certificate is current, in scope, accredited and confirmable. During the transition the edition on the certificate is not a ground for rejection: ISO 9001:2015 certificates remain valid until 30 September 2029, and a 2015 certificate is the only accredited ISO 9001 certificate that can exist until a certification body is accredited for the 2026 edition.

The risk to a tender is therefore a lapse rather than an edition. A certificate is suspended when a surveillance audit is missed or nonconformities remain open, and it expires if recertification is not completed before the end of the cycle; a suspended or expired certificate fails verification on the day the bid is opened. DPWH’s requirement for contractors and the requirements written into individual agencies’ bidding documents are covered on our government tenders page, and the transition-specific points for bidders on the government suppliers page.

Audit week: what to expect and how Sterling supports it

An audit is an examination of the system in operation, and preparation is mostly making sure the people who run the processes can explain them. Sterling’s support before, during and after the audit is designed around that rather than around paperwork, because the 2026 edition is tested by interview more than any previous edition.

Before the audit we run the internal audit to the 2026 criteria, facilitate the management review, close the findings, brief every process owner on the questions their process will attract, and confirm the audit plan and logistics with the certification body. During the audit we attend at your request, sit in the opening and closing meetings, clarify what an auditor is asking for when a team member is unsure, and record findings as they are raised so that nothing is disputed later. After the audit we help you find the cause of each nonconformity under 10.2.1, gather the evidence of correction and corrective action, and submit it within the body’s timeframe; a major nonconformity must normally be closed before a certificate is issued or renewed, and a minor one by an agreed date, usually verified at the next visit. What we do not do is answer for you, because an auditor who hears a consultant answer will ask the same question of the operator.

Keeping the certificate valid through the cycle

A certificate is a three-year commitment, not an event. Surveillance audits sample the system each year, recertification re-audits it in full, and changes in between, a new site, a new service, a merger, a change of certification body, have to be managed under 6.3 and notified to the body where scope is affected.

The habits that keep a certificate valid are the ones the standard requires anyway: an internal audit programme that runs every year and covers every process over the cycle (9.2.2), a management review with all of the 9.3.2 inputs and recorded decisions (9.3.3), corrective actions that find causes rather than restate symptoms (10.2.1), and objectives that are measured and revised (6.2). The 2026 additions fit inside those habits: the review agenda gains 9.3.2 c), g) and h); the audit checklist gains the new requirements; the change-planning method gains 6.3 e) to g). Organisations that run their records in Effivity find the surveillance evidence accumulates without a pre-audit scramble; organisations on paper can achieve the same with discipline. Either way, book the transition audit at a 2027 or early-2028 scheduled visit rather than leaving it to the final year, when audit capacity will be shortest.

How Sterling supports your certification

Sterling International Consulting has prepared organisations for accredited certification across Luzon, the Visayas and Mindanao from Makati, Cebu and Davao, with lead auditors who have conducted certification, surveillance and transition audits for certification bodies and therefore know what the auditor across the table is looking for. We do not certify, we do not take referral fees, and we steer clients away from any provider that sells certificates.

For first-time certification, we build the system to the 2026 standard, train the team, audit internally, help you choose an accredited body on the questions above, and support you through stage 1 and stage 2. For organisations certified to ISO 9001:2015, Sterling Revise™ is the fixed-scope transition: week one documentation review and gap assessment against the ISO 9001:2026 standard, week two gap report with the number before you commit, weeks three and four plan, certification-body booking and first updates, timed to your scheduled visit. Call +63 977 815 1204, email info@iso-philippines.com or book a consultation.

Frequently asked questions

Can I get an ISO 9001:2026 certificate today? Not on an accredited basis. Certification bodies must first have their accreditation extended to the 2026 edition; Global ACI requires accreditation bodies to be ready by 31 March 2027 and certification-body transitions to be completed by 30 September 2027. Any ISO 9001:2026 certificate dated before the issuing body was accredited for it is not accredited certification. Build to the 2026 standard now and audit when your body is ready.

Does Sterling issue ISO 9001 certificates? No. Only an accredited certification body issues a certificate, after its own audits, and ISO/IEC 17021-1 requires that body to be impartial and not to consult for the organisations it certifies. Sterling designs, documents, trains, audits internally and supports you through the certification body’s audits. A provider offering to do both is not offering accredited certification.

How does the certification audit work? Stage 1 checks readiness and documentation; stage 2 audits the system in operation through interviews and sampled records; a certificate valid for three years follows once nonconformities are closed. Surveillance audits sample the system each year and a recertification audit renews the certificate at year three. Transitions to the 2026 edition are conducted at a surveillance or recertification visit or as a special audit.

How do I choose a certification body in the Philippines? On accreditation first: the body’s accreditation body must be a signatory to the arrangement operated by Global ACI, whether PAB or a foreign body such as UKAS, ANAB, JAS-ANZ or IAS. Then on sector experience, audit time calculation, and the body’s confirmed date for ISO 9001:2026 accreditation. Refuse any body that offers consultancy, templates or a certificate without stage 1 and stage 2.

Will my ISO 9001:2015 certificate still be accepted for tenders and customers? Yes, until 30 September 2029 under Global ACI-TECH-3-TR 2029-09-30 (M), provided surveillance audits continue. Buyers and procuring entities verify currency, scope, accreditation and confirmability, not edition. From 31 March 2028 new and initial accredited certificates can only be issued to the 2026 edition, which is when a 2015 certificate starts to invite questions.

Can the transition audit be done remotely? Global ACI’s transition requirements permit the certification body to conduct the transition audit remotely by ICT where appropriate, following the applicable rules on remote auditing. It may also be combined with a surveillance or recertification audit. For organisations where culture is tested on a shop floor, a ward or a site, we recommend an on-site audit, because 5.1.1 i) and 7.3 e) are evidenced by observation.

What does Sterling do during audit week? Before the visit: internal audit to the 2026 criteria, management review, closure of findings, briefing of process owners, confirmation of the audit plan. During: attendance at your request, opening and closing meetings, clarification of questions, a record of findings as raised. After: cause analysis under 10.2.1, evidence of corrective action, submission within the body’s timeframe. We never answer on your behalf.

What happens if the certification body raises a major nonconformity? The body will not issue or renew the certificate until it is closed, which normally means correction, a cause analysis under 10.2.1, corrective action and evidence that it is effective, submitted within the body’s stated period and sometimes verified by a follow-up visit. A minor nonconformity is closed by an agreed date and verified at the next audit. Neither is unusual; an unclosed one is.

Read next

The ISO 9001:2026 playbook; ISO 9001:2026 implementation in the Philippines; the transition deadline and timeline; ISO 9001:2026 internal audit services; how to verify an ISO certificate in the Philippines; and ISO 9001 certification in the Philippines from Sterling.

Sources

ISO 9001:2026, Quality management systems — Requirements, sixth edition (published 16 September 2026): 4.3, 5.1.1 i), 6.2, 6.3 e) to g), 7.3 e), 9.2.2, 9.3.2 c), g), h), 9.3.3, 10.2.1. Global ACI-TECH-3-TR 2029-09-30 (M), Transition Requirements for ISO 9001:2026 (issue date 4 September 2026; announced 16 September 2026): transition period, milestones, conduct of the transition audit with surveillance, recertification or a special audit, remote conduct by ICT, and consideration of additional audit time under ISO/IEC 17021-1 and IAF MD 5. ISO/IEC 17021-1, Conformity assessment — Requirements for bodies providing audit and certification of management systems — Part 1: Requirements. IAF MD 5, Determination of audit time of quality, environmental, and occupational health and safety management systems. DTI Philippine Accreditation Bureau: Management System Accreditation Division scope (ISO/IEC 17021-1 schemes including ISO 9001) and signatory status in the APAC and international mutual recognition arrangements for QMS, EMS, FSMS and product certification (DTI-PAB news, January 2022). Global ACI website: CertSearch certificate verification.