ISO 9001:2026 Implementation in the Philippines: Build to the 2026 Standard from Day One

Updated 18 September 2026 against the ISO 9001:2026 standard (sixth edition, published 16 September 2026). Reviewed by Kaushal Sutaria, Lead Auditor, Sterling International Consulting.

An organisation implementing ISO 9001 for the first time in the Philippines should build to ISO 9001:2026 from the first day, not to the 2015 edition with a transition later. The 2026 standard is final and published; every ISO 9001:2015 requirement is retained inside it; the additions are a short list; and under Global ACI’s transition requirements new and initial accredited certifications can only be issued to the 2026 edition from 31 March 2028. This page sets out a phased plan mapped to Clauses 4 to 10, what “built to 2026” means in each clause, how the certification body’s accreditation timing affects your certificate, and how Sterling runs the build.

Key facts for a first implementation

• ISO 9001:2026 was published on 16 September 2026 as the sixth edition; it cancels and replaces ISO 9001:2015 and incorporates Amendment 1:2024 (climate change).
• Global ACI (successor to IAF and ILAC since 1 January 2026) issued Global ACI-TECH-3-TR 2029-09-30 (M): certification bodies to complete their accreditation transition by 30 September 2027; new and initial accredited certifications only to the 2026 edition from 31 March 2028; ISO 9001:2015 certificates no longer valid after 30 September 2029.
• The standard requires no quality manual, no documented procedures and no management representative, and its documentation requirements scale with the organisation.
• The additions since 2015 are 4.2 c), 5.1.1 i), 6.1.3, 6.3 e) to g), 7.3 e) and 9.3.2 c), plus strengthened wording in 5.1.1 k), 5.2.1 e), 5.2.2 d), 5.3 e), 6.1.2, 6.3 c), 7.1.6, 8.2.1 e), 9.1.3 e) and f), 9.3.2 g) and h) and 10.1.
• Sterling builds the system and prepares you for an accredited certification body; it does not issue certificates.

Why not build to ISO 9001:2015 now?

Because ISO 9001:2015 is withdrawn as a standard, its certificates have a fixed end date, and a system built to it would need a transition audit inside its first certification cycle. Building to 2026 costs a few more days of design and no more documents, and it avoids paying twice.

The arithmetic is simple. A first-time implementation started now is typically ready for stage 2 in three to nine months depending on size and scope, which lands in 2027. By then certification bodies will be moving to the 2026 edition; each must complete its accreditation transition by 30 September 2027, and from 31 March 2028 no new or initial accredited certificate can be issued to the 2015 edition at all. A 2015 certificate issued in 2027 would therefore be valid for at most until 30 September 2029, with a transition audit due at the first or second surveillance visit and the update work done on a system only months old. The only reason to consider a 2015 certificate is timing: if your system is ready before your chosen certification body is accredited for the 2026 edition, the body can certify to 2015 a system already built to 2026 and transition it at the first surveillance audit with no rework, because the 2026 additions do not conflict with any 2015 requirement. In every case the system you build is the same, so build it to the ISO 9001:2026 standard.

The phased plan, mapped to clauses

The plan below is the sequence Sterling uses for a first implementation of any size. Each phase produces outputs the next phase needs, and the clauses are listed so that the organisation, its consultant and its certification body are talking about the same things. Durations are typical for a single-site organisation of 20 to 200 people; larger or multi-site organisations run phases in parallel across units.

Phase	Weeks	Clauses	What is done	Outputs
0. Scoping and gap assessment	1 to 2	4 to 10	Current practice assessed against every requirement; scope and exclusions proposed; project plan and costed programme agreed	Gap report; dated plan; decision on Effivity or existing tools for documents and records
1. Context and leadership	2 to 4	4.1, 4.2, 4.3, 4.4, 5.1, 5.2, 5.3	Context issues including the climate determination; interested parties and which requirements the QMS addresses (4.2 c)); scope statement; process map; top management briefed on 5.1.1 a) to l); policy written to 5.2.1 a) to e); roles assigned including 5.3 e)	Context and interested-party record; scope; process map; policy; roles matrix
2. Planning	4 to 7	6.1.1, 6.1.2, 6.1.3, 6.2, 6.3	Risks determined, analysed and evaluated with disruption considered; opportunities determined, analysed and evaluated in their own register; measurable objectives with plans; change-planning method covering 6.3 a) to g)	Risk register; opportunity register; objectives and plans; change-plan template
3. Support	6 to 10	7.1 to 7.5	Resources, infrastructure including remote work where relevant, environment; calibration and measurement resources; organisational knowledge captured; competence needs and records; awareness content including 7.3 e); communication plan; documented information controls	Competence matrix; calibration register; knowledge register; awareness material; document control method
4. Operation	8 to 16	8.1 to 8.7	Operational planning; customer communication including contingency and disruption information (8.2.1 e)); requirements review; design if applicable; supplier control; production and service controls, traceability and preservation; release; nonconforming outputs	Process documents to the extent needed; forms and records in use; supplier register
5. Performance evaluation	14 to 20	9.1, 9.2, 9.3	Monitoring and measurement running; customer satisfaction method; analysis including 9.1.3 e) and f); internal auditors trained and one full internal audit completed; management review with all 9.3.2 inputs including c), g) and h)	Performance data; internal audit report; management review minutes and decisions
6. Improvement and certification	18 to 24	10.1, 10.2	Nonconformities and corrective actions closed; improvement decisions recorded; certification body selected on accreditation; stage 1; findings resolved; stage 2	Corrective action records; stage 1 and stage 2 reports; certificate from the certification body

The elapsed time in phases 4 and 5 is not padding. A stage 2 audit samples records of the system in operation, and an organisation that has run its processes for only a fortnight has nothing to sample.

What “built to 2026” means in each clause

A system built to the 2026 standard is a 2015 system with a short list of additions made at design time rather than retrofitted. The list below is what a certification auditor will look for beyond the 2015 requirements, and each item is cheap to include at the start and awkward to add later.

• Clause 4: a recorded determination of whether climate change is relevant (4.1); an interested-party table with a column showing which requirements the QMS addresses (4.2 c)).
• Clause 5: top management promoting quality culture and ethical behaviour in a way staff can describe (5.1.1 i)); risk-based and opportunity-based thinking both promoted (5.1.1 k)); a policy that takes the context into account and supports the strategic direction (5.2.1 e)) and is implemented, understood and applied (5.2.2 d)); a named role for reporting improvement opportunities to top management (5.3 e)).
• Clause 6: risks analysed and evaluated, with actions proportionate to their potential impact on the intended results of the QMS (6.1.2); opportunities in their own register, analysed and evaluated, with actions appropriate to context (6.1.3); a change-planning method that covers information, communication, monitoring and review (6.3 c), e), f), g)).
• Clause 7: knowledge retained, applied and shared (7.1.6); awareness of quality culture and ethical behaviour (7.3 e)); infrastructure and environment considered for remote work where it exists (7.1.3 NOTE, 7.1.4).
• Clause 8: customer information on contingency actions including disruptions (8.2.1 e)); otherwise the 2015 controls.
• Clause 9: effectiveness of actions on risks and on opportunities evaluated separately (9.1.3 e) and f)); management review inputs including changes in interested-party expectations and the separate risk and opportunity reviews (9.3.2 c), g), h)).
• Clause 10: improvement that covers processes and future needs, not only corrections (10.1); no 10.3, because it no longer exists.

The clause-by-clause register lists every change with its label, and the plain-English requirements page translates all of Clauses 4 to 10 for owners and managers.

Documentation, right-sized

ISO 9001:2026 requires a fixed, short list of documented information and leaves the rest to the organisation’s judgement of what it needs to operate. It requires no quality manual and no documented procedures. A first implementation that produces a manual, twenty procedures and a hundred forms has been built for the auditor rather than the business, and it will decay within a year.

The documents the standard asks for by name are the scope (4.3), the policy (5.2.2 a)), the quality objectives (6.2.1 g)) and the documented information the organisation determines necessary for the effectiveness of the QMS (7.5.1 b)); the records it asks for are those that evidence calibration, competence, requirements review, design, supplier evaluation, traceability, release, nonconforming outputs, monitoring results, internal audits, management review and corrective action. The documented information page lists each one with its clause. Beyond that list, a small organisation typically needs a process map, a handful of work instructions where the work is complex or safety-critical, and the forms that generate records. Whether those live in Effivity, a shared drive or a filing cabinet is the organisation’s choice; the controls in 7.5.3 apply equally. Our documentation service page covers how we size a set.

The certification body and your certificate edition

Choose the certification body in phase 0, not phase 6, and choose on accreditation. Only a certificate issued by a certification body accredited by a signatory accreditation body, such as the Philippine Accreditation Bureau under DTI or a foreign body such as UKAS, ANAB, JAS-ANZ or IAS, is accepted by government procuring entities and serious customers, and only such a body can transition you when the time comes.

Ask three questions in writing at selection: when will your accreditation cover ISO 9001:2026; will you conduct my stage 1 and stage 2 to the 2026 edition; and if my system is ready before your accreditation is extended, will you certify to 2015 and transition at the first surveillance audit without a separate special audit? Under Global ACI’s requirements every certification body must complete its accreditation transition by 30 September 2027, and many will be ready earlier. The audit sequence is stage 1 (readiness and documentation), stage 2 (the system in operation, with interviews and sampled records), then annual surveillance and a recertification audit at the end of the three-year cycle. The certification support page describes each stage and how the transition audit fits.

An SME-sized approach

Most Philippine organisations pursuing a first certificate are small or medium-sized, and the standard is written to be applied proportionately: the extent of documentation, the depth of risk analysis and the length of the management review all scale with the organisation. A ten-person firm meets 6.1.2 with a one-page register and a management review in an afternoon.

What does not scale down is the evidence for the behavioural requirements. A small firm still needs its owner to say, in person, what is expected in doing the job right and behaving ethically (5.1.1 i)), a route for raising a concern that does not depend on the person’s own supervisor, and staff who can repeat the expectation back (7.3 e)). It still needs one internal audit by someone who did not do the work being audited (9.2.2), which in a very small firm may mean an external auditor. And it still needs objectives that are measured rather than aspirational (6.2.1 b)). A system sized to the organisation is one the organisation can run without a quality department after the consultant leaves, which is the test we design to.

The mistakes a phased build prevents

Three failure patterns account for most first-time certifications that go badly, and each is a sequencing error rather than a knowledge gap: building for the auditor, training at the wrong time or for the wrong people, and engaging the certification body last. Naming them at the start is the cheapest form of prevention, and the phased plan above is arranged to avoid each one.

The first is building for the auditor: templated procedures that describe an idealised organisation, objectives chosen to look impressive rather than to be measured, a risk register copied from another company. The 2026 edition punishes this harder than 2015 did, because 5.2.1 e) requires a policy specific to your context, 6.1.2 requires analysis an auditor can question, and 5.1.1 i) is tested by interviewing staff who know whether the procedures describe their work. The second is training too early or too narrowly: awareness delivered in month one is forgotten by stage 2, and training only the quality coordinator leaves process owners unable to answer for their processes. The third is engaging the certification body last, which produces a stage 1 finding on scope or accreditation timing that could have been resolved in a phone call in phase 0.

How Sterling runs an implementation

Sterling International Consulting delivers implementations on site from Makati, Cebu and Davao through Sterling OS™, our delivery method: a scoping and gap assessment, a dated plan with phases and outputs, Sterling lead auditors and implementers who have audited for certification bodies, training timed to go-live, one full internal audit and management review before stage 2, and support through stage 1 and stage 2. The system is yours; the aim is a certificate you can keep without us.

Every build since 18 September 2026 is written to the ISO 9001:2026 standard. Where a client chooses Effivity for documents, registers, audits and management review records, we configure it during phases 1 to 3 so that records accumulate from the start. For organisations that already hold a 2015 certificate, the service is Sterling Revise™, the fixed-scope transition, rather than a re-implementation. Call +63 977 815 1204, email info@iso-philippines.com or book a consultation.

Frequently asked questions

Should we implement ISO 9001:2015 now and transition later, or go straight to 2026? Straight to 2026. The 2026 standard is published and final, every 2015 requirement is retained, and from 31 March 2028 new and initial accredited certificates can only be issued to the 2026 edition. A 2015 certificate issued in 2027 would need a transition audit within its first cycle. The system you build is the same either way, so build it to the current edition.

How long does an ISO 9001:2026 implementation take? Typically three to nine months from scoping to stage 2, from a small single-site organisation with a focused scope to a larger or multi-site one, depending on the number of processes and how much existing practice can be documented as it is. The system must operate long enough to generate the records a stage 2 audit samples, so the elapsed time in the operation and evaluation phases cannot be compressed away.

What does “built to 2026” add to a 2015-style implementation? A recorded climate determination (4.1), the decision on which interested-party requirements the QMS addresses (4.2 c)), leadership promotion of quality culture and ethical behaviour (5.1.1 i)), a policy tied to context and strategy (5.2.1 e)), analysed risks and separately evaluated opportunities (6.1.2, 6.1.3), change planning with communication, monitoring and review (6.3 e) to g)), knowledge retained, applied and shared (7.1.6), awareness under 7.3 e) and the new management review inputs (9.3.2 c), g), h)).

What if our certification body is not yet accredited for ISO 9001:2026 when we are ready? Ask it in writing. It may certify a system built to 2026 against the 2015 edition and transition it at the first surveillance audit, or you may wait for its 2026 accreditation, which each body must complete by 30 September 2027. Neither option changes the system you build. Choose the body in phase 0 so that this is settled early.

Is ISO 9001:2026 suitable for a small company? Yes. The standard scales: documentation, risk analysis and management review are sized to the organisation, and no manual or documented procedures are required. What a small firm cannot skip is the behavioural evidence for quality culture and ethical behaviour, an internal audit by someone independent of the work, and objectives that are measured.

Do we need software to implement ISO 9001:2026? No. The standard is technology-neutral and requires none. Effivity is useful where an organisation wants documents, registers, audits and management review in one place with an audit trail, and it makes the 2026 additions configuration rather than paperwork; a well-run shared drive can also meet 7.5.3. The choice is made in phase 0 and never affects the certificate.

Who issues the certificate? An accredited certification body, after its stage 1 and stage 2 audits. Sterling prepares you, trains your people, audits internally, coordinates with the body and supports you during the audit, and never issues certificates. A provider offering to consult and certify the same client is not operating on an accredited basis, and its certificate will not survive verification by a customer or a procuring entity.

Read next

ISO 9001:2026 requirements in plain English; the documented information list; ISO 9001:2026 certification support; what ISO 9001:2026 costs; ISO 9001:2026 training; and how to get ISO certification in the Philippines from Sterling.

Sources

ISO 9001:2026, Quality management systems — Requirements, sixth edition (published 16 September 2026): Clauses 4 to 10, in particular 4.1, 4.2 c), 4.3, 5.1.1 i) and k), 5.2.1 e), 5.2.2 a) and d), 5.3 e), 6.1.2, 6.1.3, 6.2.1 b) and g), 6.3 a) to g), 7.1.3 NOTE, 7.1.4, 7.1.6, 7.3 e), 7.5.1 b), 7.5.3, 8.2.1 e), 9.1.3 e) and f), 9.2.2, 9.3.2 c), g), h), 10.1. Global ACI-TECH-3-TR 2029-09-30 (M), Transition Requirements for ISO 9001:2026 (issue date 4 September 2026; announced 16 September 2026). DTI Philippine Accreditation Bureau: signatory status in the APAC and international mutual recognition arrangements for QMS, EMS and FSMS certification (DTI-PAB news, January 2022).