What certification bodies have to plan for

The dates that bind you

Global ACI, the body formed when IAF and ILAC merged on 1 January 2026, issued the transition requirements for ISO 9001:2026 as document TECH-3-TR 2029-09-30. They apply from 16 September 2026, and your accreditation body applies them through its own arrangements.

What the rules settle, and what they leave to you

Settled

• Where the transition audit sits. It can be carried out at a scheduled surveillance audit, at recertification, or as a separate special audit. It can be done remotely under IAF MD 4, provided you can show the audit objectives were met.
• What it has to cover. At minimum, the changed requirements of ISO 9001:2026, changes to the client's context, and any other changes the client's management system needs.

Left to you

• Additional audit time. The rules require you to consider whether extra time is needed and to justify the figure under ISO/IEC 17021-1 and IAF MD 5. They also note that extra time may not be needed at a full system audit. The number is yours, and so is the justification your accreditation body will review.
• What counts as competence on the 2026 revision. You must make sure everyone affected is trained and competent. Your own competence procedure sets what evidence is enough.
• When you can start. Your accreditation body can take until 30 September 2027 to decide on your declaration. Confirm with them from when the 2026 certificates you issue fall under your accreditation.

Plan with these three as inputs you can change, not as fixed assumptions. They are the figures most likely to move once your accreditation body has reviewed your declaration.

The window is ten quarters, not twelve

A three-year transition ending on 30 September 2029 looks like twelve quarters of audit capacity. In practice you have about ten, for two reasons.

That leaves about ten quarters of delivery. A body holding 350 certificates needs roughly 35 transition audits a quarter if it starts in Q1 2027, and around 59 a quarter if it starts a year later, because the same certificates are squeezed into six quarters instead of ten.

Starting early also buys a second chance. Clients get a scheduled visit roughly once a year, so a body that starts in Q1 2027 has about two visits per client that can carry the transition. A body that starts in 2028 has one, and every client who misses it needs a separate special audit.

Competence comes first, and it is not only auditors

This is the step most often run in parallel when it belongs in sequence. No auditor can conduct a transition audit until their competence against the 2026 revision is documented under your own competence procedure. Training that finishes in Q2 2027 does not support a Q1 2027 start.

The rules also reach past auditors. Global ACI lists the relevant personnel as including sales staff, auditors, technical reviewers, certification decision makers, and contract and application reviewers. A reviewer on your decision committee who has not been trained on the 2026 revision is a gap in the same way an untrained auditor is.

Your declaration has to carry evidence of this competence, and the record has to satisfy an accreditation assessor: the training evidence, the criteria you applied, and who decided each person met them. Build that record person by person as training completes, rather than assembling it the month before your declaration is due.

Working back from a Q1 2027 start, competence sign-off should be complete by the end of 2026.

Decide the audit time once

Whatever extra time you set per transition audit, multiply it by your certificate base. Half a day across 350 certificates is 175 auditor days, most of a full-time auditor for a year. Unless someone decides otherwise, that time is absorbed quietly across the programme.

Whether you absorb it or invoice it is a commercial decision. Take it once, centrally, before scheme managers start deciding it client by client. Changes to audit duration are part of the evidence behind your declaration, so the reasoning has to be written down in any case.

If you also certify ISO 14001

ISO 14001:2026 was published on 15 April 2026, and its transition ends on 30 April 2029, five months before ISO 9001's. The two programmes overlap almost completely and draw on the same auditors and reviewers. Plan them as one load, not two.

Your ISO 14001 readiness declaration is due by 31 January 2027, five months before the ISO 9001 one. What ISO 14001:2026 requires of certification bodies

What the next ninety days decide

1. 1

   Pull the real certificate distribution. An even spread flatters you. Certificate dates cluster, and the peak quarter breaks a programme, not the average.

2. 2

   Start training now, for everyone in scope. Auditors, technical reviewers and decision makers. The rules set deadlines; they do not create capacity.

3. 3

   Decide your position on audit time centrally. Once, for the whole book, with the justification written down for your declaration.

4. 4

   Find the certificates that cannot move. Clients whose only visit in the window falls late, multi-site clients, clients in the middle of a restructure. These fail late, when there is no room left to re-sequence.