Built to ISO 9001:2026. Includes the transition edition for organizations still certified to 2015.
ISO 9001:2026 published in September 2026. This template is built to it. Because most organizations hold a certificate issued against ISO 9001:2015 and move across on their certification body’s timetable, the purchase includes a second file: the same procedure with a marker at every point the 2026 edition changed what is required, and a front sheet listing the six changes that carry the most work. One purchase serves you now and after you transition.
What is actually in the ISO 9001 document
50 pages covering the governance layer of ISO 9001:2026 — context, interested parties, scope, the quality management system, leadership, quality policy, roles and authorities, objectives, planning of changes, resources, communication, monitoring and analysis, and management review. Written as a filled-in worked example.
Fifty pages is a lot. That is why MSI’s QuickStart comes with it.
The procedure contains 186 distinct decisions that are yours to make. The QuickStart is eight pages that put them in the order where each one builds on the last, grouped into five stages, with the section where each decision is explained. Name the people, set the boundaries, set direction, set the operating rhythm, set the records. Naming the owner alone answers about forty of the 186. It is included in this purchase.
Eight clauses feed one meeting. Clause 9.3.2 lists its inputs as a) to h), with d) running to seven separate trends — fourteen distinct things that arrive before the review opens, and every one of them is produced somewhere else in the standard. That is why management reviews are hard to prepare and why the record is usually shorter than the clause requires. This procedure assigns each input a producing role, a frequency, and a place the record lives before the review opens.
What the 2026 edition changed
01 · Retained became available
“Shall retain” does not appear in ISO 9001:2026. Records are available as documented information — the scope at 4.3, the objectives at 6.2, communications evidence at 7.4.1, monitoring results at 9.1.1 and review results at 9.3.3. These are different tests. Retention asks whether a record still exists and was kept long enough. Availability asks whether someone here produces it today. A record in a departed administrator’s account, on a platform nobody else opens, satisfies the first and fails the second. The records table in this procedure carries both.
02 · Leadership grew from ten obligations to twelve
Clause 5.1.1 adds promoting quality culture and ethical behavior, which has no equivalent in the 2015 edition, and separates opportunity-based thinking from risk-based thinking. The whole list is relettered. The culture obligation is the one most likely to be answered with a poster, so this procedure gives it a section of its own: named behaviors, a way of observing each, and a review item where the answer is written down.
03 · Understood moved rather than vanished
Clause 5.3 no longer requires responsibilities to be understood — only assigned and communicated. Clause 5.2.2 now requires the quality policy to be implemented, understood and applied. Read as a relaxation, it is a trap. This procedure keeps the understanding check at 5.3 anyway and says why.
Three things leadership procedures routinely omit
01 · Audit results as a distinct review input
Clause 9.3.2 d) 3) lists audit results as a required management review input. In practice the audit program reports to the quality manager, the review is prepared by the quality manager, and everyone in the room already knows what the audits found — so it never becomes a separate line. The requirement is satisfied in conversation and absent from the record. This procedure names the producing role and the record, so the input exists whether or not the conversation happens.
02 · Organizational knowledge
Clause 7.1.6 requires you to determine the knowledge necessary to operate your processes, maintain it, make it available, and — as needs and trends change — decide how the missing knowledge is acquired. It is among the least-implemented requirements in the standard, because it reads like a philosophy and has no obvious record. Here it has one: a determination, a maintenance route, and a review trigger tied to change.
03 · Planning of changes as a gate
Clause 6.3 grew from four considerations to seven in the 2026 edition, adding communication of the change, how its effectiveness is monitored, and how its results are reviewed. Most procedures satisfy 6.3 with a single line saying changes are planned. That is an assertion, not a mechanism. This procedure builds it as a gate, with all seven considerations recorded before the change proceeds.
What’s included
- The complete governance procedure — 16 numbered sections covering clauses 4.1, 4.2, 4.3, 4.4, 5.1, 5.2, 5.3, 6.2, 6.3, 7.1, 7.4, 9.1.1, 9.1.3 and 9.3, editable Microsoft Word
- The transition edition — the same procedure with every 2026 change marked, and a front sheet covering the six that carry the most work
- MSI’s QuickStart — eight pages turning the 186 decisions in this procedure into an ordered worklist across five stages, with the section reference for each
- A process interaction map satisfying clause 4.4.1, as a landscape page in the document and as an editable SVG
- A fourteen-input management review table — producing role, frequency, source record and location for each, built to the 2026 lettering
- Quorum and frequency criteria, with the event triggers that override the calendar
- Context and interested-party determination with review triggers, including the new 4.2 c) decision on which requirements the system addresses
- Policy and objectives sections carrying all eight attributes of 6.2.1 and all five planning elements of 6.2.2
- Planning of changes built as a gate, with the seven considerations of 6.3 recorded
- Quality culture and ethical behavior under 5.1.1 i), written as named behaviors with a way of observing each
- One accountable owner, with a named alternate for every gating role
- Organizational knowledge determination under 7.1.6, with a maintenance route and a change trigger
- A records table with no blanks — location, owning role, availability and retention period for each
- A maturity ladder — nine elements, four levels each, described as observable behavior
- A full clause cross-reference mapping every obligation to where it is addressed
- Appendix A — Management Review Record, built to function as the release gate
- Appendix B — System-Level Change Record and Log
- Appendix C — Desk-level work instruction, with two worked examples
Every appendix, form and worked example is part of the document. Nothing is sold separately.
Who it’s for
Quality managers, operations leaders and consultants at ISO 9001 certified or certifying organizations, whether you hold a 2015 certificate and are planning the move or are documenting to 2026 from the start. Particularly useful where the management review has become a deck assembled the week before, where context and interested parties were documented once at certification and never revisited, or where an inherited procedure covers clause 5 and stops there.
Not sure yet? The
free Leadership and Commitment Maturity Check scores nine elements in about ten minutes, and your score appears without entering anything.
Questions
Fifty pages. Where do I actually start?
With the QuickStart, which is included. It lists every decision the procedure asks you to make, in the order that lets each build on the last, with the section where each is explained. Work from that sheet and read the section before you decide. Most of the 186 decisions are small and follow from a handful of larger ones — name the document owner and the role holders first and roughly forty answer themselves.
I am still certified to ISO 9001:2015. Is this the wrong edition?
No. The purchase includes both: the procedure built to ISO 9001:2026, and a transition edition marking every point the requirement changed. Your certificate remains valid against the 2015 edition until it expires or your certification body moves you across. Confirm that date with your body rather than assuming, because bodies have set different internal deadlines for transition audits and the earliest of those governs your timetable.
Is this a template or a finished procedure?
Both, deliberately. It is written as a filled-in worked example so you see what each element looks like when done properly, with bracketed placeholders wherever a value is genuinely yours to set — frequencies, roles, thresholds, systems, retention periods. You are editing a working document rather than filling in a hollow outline.
How is this different from a management review template?
A management review template runs the meeting. This procedure determines what arrives at the meeting: who produces each required input, on what frequency, and where the record lives before the review opens. If your reviews are hard to prepare, the problem is upstream of the agenda.
Does it cover the whole standard?
No. It covers the governance layer — context, leadership, policy, objectives, planning, resources, communication, monitoring and management review. It references neighboring processes such as risk management, competence, internal audit and corrective action rather than replacing them.
What format is it?
Editable Microsoft Word (.docx), with the process interaction map supplied separately as an editable SVG. Adapt it, rebrand it, and adopt it into your own document control system. The license permits the buying organization to use it across its own sites and issue it to employees, contractors and auditors, and permits consultants to adapt it for engagements they deliver.
Will this pass an audit?
A procedure does not pass an audit; an organization does. What this gives you is a procedure that addresses every requirement of the clauses it covers, with a named owner and a named record, describing a process people actually follow. Conformity is demonstrated by implementation and evidence. Unfilled placeholders are unmet requirements, so fill them.
We use different clause numbering.
Every cross-reference sits in a table at the back rather than baked into the body text, precisely so you renumber without unpicking the procedure.
Which one do I need?
Take the version matching your certification. If you run two or three standards under one system, the combined versions are built for that. If you are unsure where your current process sits, the
free Leadership and Commitment Maturity Check tells you before you spend anything.
Can you help us implement it?
Yes. Call MSI at
760-434-9141 to schedule a planning session.
