ISO 9001:2026, published on 16 September 2026, changes little in Clause 8, where a logistics company’s day-to-day controls sit, and much in how the company must think about disruption. It names the ability to deliver during and after a disruption as a matter for risk analysis (6.1.2 NOTE 1), requires customers to be given contingency information including disruptions to provision (8.2.1 e)), and carries the climate-change determination into 4.1. For a forwarder, trucker or warehouse operator in a country averaging twenty tropical cyclones a year, those provisions describe the business. Customer property (8.5.3), preservation (8.5.4) and traceability (8.5.2) are unchanged and remain where most logistics nonconformities are found.
Gap assessment, documentation update, training, internal audit and support through your transition audit, delivered end to end by our expert, experienced, professional and friendly local Filipino lead auditors.
Where the 2026 changes land in a logistics operation
For a logistics company with a working ISO 9001:2015 system, the 2026 changes concentrate in planning, leadership and performance evaluation; the operational clauses that govern cargo handling are substantively identical to 2015. The table lists each change with what it means in freight forwarding, trucking, warehousing and third-party logistics; the complete register is on the clause-by-clause page.
| ISO 9001:2026 reference | What changed | What it means in logistics |
|---|---|---|
| 4.1 | Climate-change determination now in the base text | The company records whether climate change is relevant to its QMS; for operations exposed to typhoons, flooding and port closures it usually is |
| 4.2 c) | New: decide which interested-party requirements the QMS addresses | A written decision covering shippers and consignees, carriers and co-loaders, the Bureau of Customs and port authorities, insurers, LGUs that impose truck bans, drivers and warehouse staff, and neighbours of the facility |
| 5.1.1 i) and NOTE 2; 7.3 e) | New: top management promotes quality culture and ethical behaviour; everyone aware of it | Leadership states what it expects on documentation honesty, facilitation payments, cargo integrity and road safety, and drivers, checkers and forwarding staff can describe it |
| 5.1.1 k) | Strengthened: promote opportunity-based thinking | New lanes, cross-docking, cold-chain capacity, technology and partnerships treated as evaluated opportunities |
| 5.2.1 e); 5.2.2 d) | Strengthened: policy takes context into account and supports strategic direction; policy is implemented | The quality policy names the company’s markets, its service commitments and its position on disruption, and decisions can be traced to it |
| 6.1.2 with NOTE 1; 6.1.3 | Strengthened and new: risks and opportunities determined, analysed and evaluated separately; disruption named | Typhoons, port congestion, truck bans, fuel supply, vehicle breakdown, IT failure and subcontractor failure analysed as risks; growth and technology analysed as opportunities |
| 6.3 c), e), f), g) | Strengthened and new: changes planned with information, communication, monitoring and review | A new warehouse management system, a new hub, a new carrier or a route change planned with who is told, how effectiveness is checked and when results are reviewed |
| 7.1.6 | Strengthened: knowledge retained, applied and shared | Customs procedures, customer-specific handling requirements, route knowledge and lessons from past incidents captured so they survive driver and staff turnover |
| 8.2.1 e) and NOTE | Strengthened: contingency information including disruptions; websites, social media and FAQs recognised as channels | Customers told what happens when a shipment is delayed or diverted, through the channels the company actually uses, including tracking portals and messaging |
| 9.1.3 e), f); 9.3.2 c), g), h) | Strengthened and new: effectiveness of actions on risks and on opportunities evaluated and reviewed separately; changes in interested-party needs reviewed | Management review looks at whether contingency arrangements worked in the last typhoon season, whether expansion delivered, and what customers, customs and port authorities now expect |
| 10.1 | Merged with the former 10.3 | Improvement explicitly covers processes and future needs and expectations; no 10.3 in any procedure or checklist |
Two 2026 NOTEs also describe logistics closely. The NOTE to 7.1.3 acknowledges remote and hybrid work, which covers dispatchers, customer service and documentation staff working away from the depot. The NOTE to 10.2.1 says customer complaints can be a source of nonconformities, which in logistics means every claim for loss, damage or delay is a candidate for corrective action, not only a settlement.
Disruption as a risk (6.1.2 NOTE 1)
Clause 6.1.2 now requires risks to be determined, analysed and evaluated, with actions proportionate to the potential impact on the intended results of the QMS, and NOTE 1 names the ability to deliver during and after a disruption as one of the things the analysis should cover. For a logistics company, that turns a register that once listed “typhoon” as a hazard into an analysis of what actually stops shipments moving and what the company does about it.
The disruptions are specific and recurrent. Tropical cyclones close ports, ground flights and flood roads; the Philippine Atmospheric, Geophysical and Astronomical Services Administration puts the long-run average at twenty tropical cyclones entering the Philippine Area of Responsibility each year, with eight or nine crossing the country, and the peak from July to October. Port congestion in Manila delays container release and stacks up demurrage. Truck bans in Metro Manila and other cities constrain delivery windows. Fuel price and supply shocks, vehicle breakdowns, driver shortages, subcontractor failure, customs system outages and the company’s own IT failures complete the list for most operators. Each of these is analysed for likelihood and consequence on the intended results of the QMS, which for a logistics company means shipments delivered complete, undamaged and on time, and evaluated for whether the current arrangements are enough.
The actions that follow are the contingency arrangements themselves: alternative routes and modes, backup carriers under evaluated subcontracts (8.4), fuel reserves, spare vehicles, manual fallback for the transport management system, staffing plans for a typhoon week, and the customer communication that 8.2.1 e) requires. Under 9.1.3 e), the effectiveness of those actions is evaluated after the event, and under 9.3.2 g) it is reviewed in management review as its own item; the last typhoon season is the evidence. The risks and opportunities page sets out a method for the analysis and evaluation the 2026 standard requires.
Contingency communication with customers (8.2.1 e))
Clause 8.2.1 e), as reworded in 2026, requires the company to provide customers with information related to contingency actions, when relevant, including any related to disruptions to the provision of products or services; a new NOTE recognises websites, publications, social media, FAQs and training as channels for customer communication. For logistics, this is the clause that turns a good contingency plan into something the customer can see.
The requirement has two layers. The general layer is what every customer is told in advance: what the company does when a port closes, when a truck cannot enter a city during a ban, when a cold-chain unit fails or when a shipment is diverted, and how the customer will be informed. This belongs in the service agreement, the standard terms, the customer onboarding pack and, for most companies, the FAQ page on the website and the pinned posts on the company’s social media accounts, which the 2026 NOTE now recognises as legitimate channels. The specific layer is what a particular customer is told when a particular disruption happens: the message on the tracking portal, the call from customer service, the revised ETA. The evidence for an auditor is the published information and the log of the specific communications during the last disruption.
The gap Sterling finds most often is that the operations team has excellent contingency arrangements and the customer learns about them only by phoning. Under 8.2.1 e) the information has to reach the customer through defined channels, and under 9.1.2 the company has to know whether customers were satisfied with how the disruption was handled, which is a different question from whether the cargo eventually arrived.
Customer property (8.5.3)
Clause 8.5.3, unchanged in 2026, requires the company to identify, verify, protect and safeguard property belonging to customers or external providers while it is under the company’s control, to report to the customer when property is lost, damaged or found unsuitable, and to keep records of what happened. In logistics almost everything under the company’s control is customer property: the cargo, the containers and pallets, the shipping documents, and the customer’s data.
The requirement is met in four places. Identification and verification happen at receipt: the count, the seal check, the condition report and the photographs at the warehouse door or the pick-up point. Protection and safeguarding happen in storage and transit: access control, security, handling rules, load securing and the preservation controls of 8.5.4. Reporting happens when something goes wrong: the damage report, the short-landed notice, the claim acknowledgement, sent to the customer and not only filed. Records are the receiving reports, tally sheets, condition photographs, seal logs and claims files that show all of this happened.
Customer data is customer property too; the NOTE to 8.5.3 names personal data, and a logistics company holds consignee names, addresses and contact details, commercial invoices, packing lists and shipping instructions that belong to the shipper. The Data Privacy Act of 2012 (Republic Act No. 10173) governs the personal data separately; ISO 9001 requires the company to identify it, protect it and report loss. External providers’ property is covered by the same clause: a subcontracted carrier’s trailer or a co-loader’s container in the company’s yard is protected under 8.5.3, not left to the subcontract.
Preservation (8.5.4)
Clause 8.5.4, unchanged in 2026, requires the company to preserve outputs during production and service provision to the extent necessary to ensure conformity to requirements, and its NOTE lists identification, handling, contamination control, packaging, storage, transmission or transportation and protection as forms of preservation. For a warehouse operator or a carrier, preservation is the service.
The controls that meet 8.5.4 are the ones a competent operator already runs: temperature and humidity control and monitoring for cold-chain and moisture-sensitive cargo, with the monitoring devices calibrated or verified under 7.1.5; segregation of incompatible goods, dangerous goods and food from non-food; pest control and cleanliness; stacking and racking limits; load securing and weight distribution on vehicles; packaging and re-packaging standards; first-expired-first-out and first-in-first-out rules; and protection from rain, heat and flooding during typhoon season, which brings 8.5.4 back to the disruption analysis under 6.1.2. The records are the temperature logs, the inspection checklists, the pest control reports and the stock condition reports. Where the company runs its records on a platform such as Effivity, the temperature and inspection logs are the registers an auditor will sample first.
Identification and traceability (8.5.2)
Clause 8.5.2, unchanged in 2026, requires the company to use suitable means to identify outputs where necessary to ensure conformity, to identify the status of outputs with respect to monitoring and measurement requirements throughout production and service provision, and to control the unique identification of outputs where traceability is a requirement, keeping the records needed to enable traceability. In logistics, traceability is both a customer requirement and the basis of every claim investigation.
The means are the shipment, house and master bill numbers, the container and seal numbers, the pallet and carton labels, the lot and batch numbers for regulated goods, the location codes in the warehouse management system and the scan events in the transport management system. Status identification is the difference between received, inspected, on hold, released and dispatched, and between conforming and damaged stock, shown in the system and on the floor. Traceability is the ability to answer, from records, where a specific carton was at any point and who handled it, which is what a customer asks after a loss and what a regulator asks after a food or pharmaceutical incident. The 2026 edition adds no requirement here, but the strengthened 7.1.6 on organisational knowledge (retained, applied and shared) bears on the same systems: the handling requirements of a specific customer and the lessons of the last claim have to be available to the people doing the work, not held by one supervisor.
Typhoon season and the climate-change determination (4.1)
Clause 4.1 requires the company to determine the external and internal issues relevant to its purpose and strategic direction that affect its ability to achieve the intended results of its QMS, and, as one specific instance carried into the base text from Amendment 1:2024, to determine whether climate change is a relevant issue. The NOTE to 4.2 adds that relevant interested parties can have climate-related requirements. For a Philippine logistics company, the determination is rarely “not relevant”.
The requirement is a decision, not a carbon account. ISO 9001:2026 does not ask for emissions data, a carbon footprint or a net-zero target; those belong to ISO 14001 and to the company’s own commitments, and organisations certified to both standards should read the integrated transition page. What 4.1 asks is whether climate change affects the company’s ability to deliver conforming services, and the honest answer for an operator whose peak season coincides with the July-to-October peak of the typhoon season, whose warehouses sit on flood plains and whose routes cross bridges that close in heavy rain, is that it does. The determination is recorded in a paragraph, the consequences appear in the risk register under 6.1.2, the contingency arrangements appear in the customer communication under 8.2.1 e), and the whole chain is reviewed after each season under 9.3.2 g). The 4.2 NOTE matters too: multinational shippers increasingly ask their logistics providers for climate-related information and commitments, and under 4.2 c) the company decides whether those requirements are addressed through the QMS. The climate change page explains the determination in full.
Opportunities (6.1.3) and externally provided processes (8.4)
Two further clauses shape a logistics transition. The new 6.1.3 requires opportunities to be determined, analysed and evaluated in their own sub-clause, with actions appropriate to the company’s context; and 8.4, unchanged in 2026, remains the clause under which subcontracted trucking, co-loading, customs brokerage, warehousing partners and IT providers are controlled.
Under 6.1.3, the opportunities a logistics company typically evaluates are new lanes and markets, cold-chain and pharmaceutical capacity, cross-docking and consolidation, digital tracking and customer portals, electric or alternative-fuel fleets, partnerships with carriers and platforms, and accreditation schemes that open customer segments. Each is analysed for its desired effect and evaluated for whether the action is appropriate to the company’s context; the results are evaluated under 9.1.3 f) and reviewed under 9.3.2 h). Leadership’s promotion of opportunity-based thinking under 5.1.1 k) is tested by asking managers where the last three opportunities came from and what happened to them.
Under 8.4, subcontractors are the point where a logistics company’s promises to its customers are most exposed. The type and extent of control depends on the potential impact on the company’s ability to meet requirements (8.4.2), which for a subcontracted carrier handling a customer’s cargo is high; the evaluation, selection, monitoring and re-evaluation of subcontractors (8.4.1) and the information given to them (8.4.3) are unchanged requirements that the 2026 disruption emphasis makes more consequential, because a contingency plan that depends on a backup carrier is only as good as that carrier’s own arrangements.
Transition steps for a logistics company certified to ISO 9001:2015
A logistics company holding an ISO 9001:2015 certificate keeps it, because 2015 certificates remain valid until they are transitioned or until the transition period ends on 30 September 2029, and plans a transition audit with its certification body at a scheduled surveillance audit, at recertification or as a special transition audit once the body’s accreditation has been extended to the 2026 edition. That extension happens body by body during 2027 under the milestones in Global ACI’s transition requirements.
Global ACI (Global Accreditation Cooperation Incorporated) took over the roles of IAF and ILAC on 1 January 2026 and published the transition requirements for ISO 9001:2026 (Global ACI-TECH-3-TR 2029-09-30 (M)) on 16 September 2026. The milestones are: accreditation bodies ready to assess certification bodies by 31 March 2027; certification bodies’ transition declarations by 30 June 2027; accreditation-body decisions completed by 30 September 2027; from 31 March 2028 initial certifications only to ISO 9001:2026; all transitions completed by 30 September 2029, after which ISO 9001:2015 certificates and accreditations are no longer valid. The transition audit may be conducted remotely by ICT, covers the changed requirements, changes to the company’s context and any other changes needed, and may carry additional audit time where the body justifies it. The steps are the standard ones, timed so that the updated system has run through at least one typhoon season before the audit:
- Gap assessment against the ISO 9001:2026 standard, with each gap referenced to a clause; Sterling Revise™ delivers it in one week and reports the number of gaps and the effort in the second, before the company commits to more.
- Leadership decisions: the 4.2 c) decision on interested parties, the policy under 5.2.1 e), and what the company expects of drivers, checkers and staff under 5.1.1 i).
- Wording updates: policy, risk and opportunity registers split under 6.1.2 and 6.1.3, planning-of-change form extended for 6.3 e) to g), contingency information under 8.2.1 e) published through the company’s channels, induction content for 7.3 e), management review agenda for 9.3.2 c), g) and h), and every reference to “10.3” removed.
- Operation through a season: the updated contingency arrangements used, the customer communications logged, at least one change planned under the extended 6.3.
- Internal audit against the 2026 edition and a management review with the 2026 inputs, including the evaluation of how the contingency actions performed.
- The certification body’s transition audit.
Any offer of an “ISO 9001:2026 certificate” without an audit should be declined; no accredited certificate to the 2026 edition can be issued by a certification body until its accreditation has been extended to it, which cannot happen before its accreditation body’s transition assessment during 2027, and every one requires a transition audit. The transition checklist sets out the sequence in full, and companies certifying for the first time should build to the 2026 edition now through the certification service page.
Don’t take our word for it — read our clients’.
80+ verbatim client feedback letters → — searchable by standard and industry, quoted word-for-word from signed originals you can verify. And see the organizations we serve — Unilab, McDonald’s, SAP, GE, ZTE, JLL and more.
Plan your ISO 9001:2026 transition with Sterling
Free consultation for certified companies and first-timers · ISO 9001:2026 transition and implementation planning against the ISO 9001:2026 standard · itemized quotation within 48 hours. Call +63 977 815 1204, email info@iso-philippines.com, or book your slot →.
Frequently asked questions
What does ISO 9001:2026 change for a freight forwarder? Little in Clause 8, where cargo controls sit, and much in planning: risks must be analysed and evaluated with disruption named (6.1.2 NOTE 1), opportunities analysed separately (6.1.3), customers given contingency information including disruptions (8.2.1 e)), changes planned with communication and review (6.3 e) to g)), and leadership must promote quality culture and ethical behaviour (5.1.1 i)).
Is climate change now a requirement for logistics companies under ISO 9001? Clause 4.1 requires a determination of whether climate change is relevant to the QMS, and the 4.2 NOTE recognises that interested parties can have climate-related requirements. It does not require carbon accounting. For Philippine operators exposed to typhoons and flooding, the determination is usually that it is relevant, with the consequences shown in the risk register.
Are containers, pallets and shipping documents customer property? Yes. Clause 8.5.3 covers property belonging to customers or external providers while under the company’s control, including cargo, containers, pallets, documents and data; the NOTE names personal data. The company must identify, verify, protect and safeguard it, report loss or damage to the owner and keep records. The clause is unchanged in 2026.
Does ISO 9001:2026 require a business continuity plan? No. It requires risks that could affect the intended results of the QMS, including the ability to deliver during and after a disruption, to be determined, analysed and evaluated, with proportionate actions (6.1.2), and customers to be given contingency information (8.2.1 e)). A business continuity plan is one way to meet those requirements; ISO 22301 is the separate standard for business continuity management systems.
How does traceability apply to trucking and warehousing? Under 8.5.2, unchanged in 2026, outputs are identified where necessary, their status is identified throughout the service, and unique identification is controlled where traceability is required, with records kept. In practice: bill, container, seal, pallet and lot numbers; location codes and scan events; and the ability to reconstruct where a carton was and who handled it.
Is my logistics company’s ISO 9001:2015 certificate still valid? Yes, until it is transitioned or until the transition period ends on 30 September 2029, the date fixed by Global ACI’s transition requirements published on 16 September 2026. Your certification body will schedule a transition audit once its accreditation has been extended to the 2026 edition, which the Global ACI milestones place during 2027 (accreditation-body decisions completed by 30 September 2027).
Do subcontracted carriers have to be ISO 9001 certified? No. Clause 8.4 requires the company to control externally provided processes, products and services according to their potential impact, through evaluation, selection, monitoring and re-evaluation, and to give providers the information they need. Certification of a subcontractor can be one criterion; it is not a requirement of the standard.
Read next
The ISO 9001:2026 playbook; the clause-by-clause register; risks and opportunities for the disruption analysis; climate change in ISO 9001:2026 for the 4.1 determination; the manufacturing page for shippers whose supply chains you serve; and the food and beverage page for cold-chain customers.
Sources
ISO 9001:2026, Quality management systems — Requirements, sixth edition, published 16 September 2026 (ISO catalogue stage 60.60): clauses 4.1, 4.2 c) and NOTE, 5.1.1 i) and k) with NOTE 2, 5.2.1 e), 5.2.2 d), 6.1.2 with NOTE 1, 6.1.3, 6.3 c) to g), 7.1.3 NOTE, 7.1.5, 7.1.6, 7.3 e), 8.2.1 e) and NOTE, 8.4.1 to 8.4.3, 8.5.2, 8.5.3 and NOTE, 8.5.4 and NOTE, 9.1.2, 9.1.3 e) and f), 9.3.2 c), g) and h), 10.1, 10.2.1 NOTE. ISO 9001:2015 and ISO 9001:2015/Amd 1:2024 for the comparison. ISO 22301 for business continuity management systems (referenced, not summarised). Global ACI-TECH-3-TR 2029-09-30 (M), Transition Requirements for ISO 9001:2026, version 1.0, issued 4 September 2026 and published by Global ACI (Global Accreditation Cooperation Incorporated) on 16 September 2026 (verified on global-aci.org and in the document on 18 September 2026): transition period ending 30 September 2029; milestones of 31 March 2027, 30 June 2027, 30 September 2027 and 31 March 2028; transition-audit provisions. DOST-PAGASA, Tropical Cyclone Information (pagasa.dost.gov.ph): an average of twenty tropical cyclones entering the Philippine Area of Responsibility per year, about eight or nine crossing the Philippines, with the peak of the season from July to October. Republic Act No. 10173, the Data Privacy Act of 2012.
Certified to ISO 9001:2015? Take the free ten-minute ISO 9001:2026 gap check, then let a local Sterling lead auditor turn your result into your transition plan.