ISO 9001:2026 Clause 6 restructures 6.1 into three subclauses: 6.1.1, a general requirement to analyze both risks and opportunities; 6.1.2, actions to address risks specifically; and 6.1.3, actions to address opportunities specifically. It's a risk-versus-opportunity split, not a procedural identify-plan-evaluate split, and it comes with a stronger push toward what commentary is calling opportunity-based thinking — treating opportunities as worth tracking in their own right, not as a footnote to the risk register. Clause 6.2 (quality objectives) and 6.3 (planning of changes) keep their current shape.
What's Confirmed About ISO 9001:2026 Clause 6
As of September 2026, this reflects the Final Draft International Standard (FDIS), which ISO announced approved in early August 2026 after a ballot that ran from late May to 9 July, with no percentage published. An earlier ballot — the Draft International Standard, closed 19 November 2025 — cleared with 97% support in December 2025 and advanced the draft to FDIS stage; it was not the FDIS approval itself. Publication is confirmed for 16 September 2026.
| Sub-clause | What it covers under ISO 9001:2015 | Status heading into 2026 |
|---|---|---|
| 6.1.1 — General | Determine risks and opportunities together from Clause 4 context | New subclause: the shared requirement to analyze both |
| 6.1.2 — Actions to address risks | (Part of the 2015 combined subclause) | New subclause: actions specific to risks |
| 6.1.3 — Actions to address opportunities | (Part of the 2015 combined subclause) | New subclause: actions specific to opportunities, with added emphasis on opportunity-based thinking |
| 6.2 — Quality objectives and planning to achieve them | Establish measurable objectives at relevant functions, levels, processes | Retained |
| 6.3 — Planning of changes | Changes to the QMS carried out in a planned manner | Retained |
The climate-change context requirement, confirmed through the February 2024 amendment, touches Clause 4.1 and 4.2. Because 6.1 plans actions against the risks and opportunities identified in Clause 4, a climate-related context factor can feed into your risk planning — the amendment itself sits in Clause 4, not Clause 6.
What the Split Actually Asks Of Your Risk Register
Most factories already run one combined risk-and-opportunity register, with risks and opportunities logged as rows in the same sheet. That structure isn't wrong under 6.1.1's general requirement — it's the starting point. What 6.1.2 and 6.1.3 ask is that the actions taken against a risk and the actions taken against an opportunity are visibly distinct entries, not blended into one line that reads "monitor and mitigate" regardless of which it is.
For a register that already tags each row as risk or opportunity, this is close to a non-event: confirm the action column shows a distinct action type per row. For a register that doesn't separate them at all, this is the genuine content work in Clause 6 — not a rebuild, but a real column addition and a pass through existing entries to reclassify them correctly.
A Gap-Analysis Checklist for Clause 6, Right Now
- Pull every controlled document that references Clause 6 explicitly. Typically your risk register, quality objectives tracker, management review inputs on objective performance, and change-management procedure for planned QMS changes.
- Map ownership. Confirm who reviews, who approves, and which departments receive each document on your distribution matrix.
- Check whether your risk register already tags entries as risk or opportunity, with distinct actions for each. If it does, you have little structural work ahead. If it doesn't, this is your highest-effort single item in this clause.
- Review your quality objectives for measurability. Vague or unmeasured objectives are a 6.2 gap under the current 2015 wording already, independent of anything the 2026 revision adds — closing that gap now isn't wasted effort.
- Set two calendar triggers — the 16 September 2026 publication date, and your certification body's confirmation of auditor readiness against the new edition.
Why the Mechanical Follow-Through Matters More Than the Wording
Once your QMR or planning owner decides how the risk register, objectives tracker, or change-planning procedure needs to change, updating a controlled document is never just an edit. It's a revision event: a new revision number, an effective date, an amendment-record entry, a change-register entry, redistribution to every affected department, and a recalculated retention schedule for the version it replaces. Each is a discrete, loggable action, independent of the final clause wording.
That clerical chain should never require re-deciding whether the plan itself is adequate. Content adequacy — does this register actually reflect the real risks, do these objectives actually mean something — stays a human judgement made by whoever reviews and approves the document. We go deeper on the volume of that clerical load in the re-documentation wave nobody has budgeted for.
How Clause 6 Fits the Rest of the Revision
Clause 6 is one piece of a revision that touches several clauses at different depths. For the full picture across all ten clauses, see what actually changes for Thai factories. For a direct side-by-side against the 2015 wording, the clause-by-clause difference map covers every clause, including the 6.1 restructure in detail.
What Is Still Open
The 6.1.1–6.1.3 split and the opportunity-based-thinking emphasis are consistently reported across independent commentary, so treat the structure above as reliable for planning. The exact final wording ISO publishes on 16 September 2026 can still carry minor editorial correction. The transition deadline for organizations certified to 2015 also isn't confirmed by the IAF — industry commentary anticipates three years, landing around September 2029, but that's a working assumption, not a published rule. Current estimates put first certification-body audits to the sixth edition around Q3 2027, with first 2026-edition certificates expected around August 2027.
FAQ
Has ISO published the final wording for Clause 6?
Not yet. The FDIS was approved in early August 2026 and the harmonized structure is reported retained, but ISO releases the officially published text on 16 September 2026.
Will Clause 6 be renumbered or restructured into different sub-clauses?
Yes, at the 6.1 level specifically. 6.1 splits into 6.1.1 (general, covering both risks and opportunities), 6.1.2 (actions on risks), and 6.1.3 (actions on opportunities). 6.2 and 6.3 keep their current position.
Should we rebuild our risk register now based on this?
You can start now. The split is well corroborated across independent sources, so aligning your register's structure — distinct risk and opportunity actions — is reasonable to do ahead of publication.
Does the climate-change requirement affect Clause 6?
Indirectly. It lives in Clause 4.1 and 4.2. Because 6.1 plans actions against risks and opportunities drawn from your Clause 4 context, a climate-related factor can flow into your risk planning, but the amendment itself isn't a Clause 6 edit.
When will we know the transition deadline for the 2026 planning requirements?
Not yet. No IAF transition communiqué has been issued as of this writing. Check with your certification body once IAF publishes formal transition guidance.
None of this preparatory work has to happen by memory. If you want a working trace of which of your controlled documents reference Clause 6, book a free consultation with 1% EVO — we walk your document list with you on the call before the final text lands.