ISO 9001:2026 document control checklist: 11 references to fix before your audit
Written from the auditor's side of the table. Clause numbers are pointers; the wording is ours, not the standard's. Last checked against the published ISO 9001:2026 text: October 12, 2026.
Clause 10 was renumbered, 6.1 was split, 9.3.3 was retitled, and Annex B is gone. Every procedure that cites the old numbers is now pointing at the wrong place. This is the search list to run before an auditor runs it for you.
Why this is the cheapest finding to prevent
Most transition findings are not about the new requirements. They are about a procedure that says it satisfies a clause that moved, was renumbered, or no longer exists. The procedure itself may be fine. The reference is wrong, and an auditor will find it in the first hour by picking a document, asking which clause it addresses, and opening the standard.
ISO 9001:2026 renumbered clause 10, split 6.1 into three sub-clauses, retitled 9.3.3, removed Annex B, and adjusted the documented-information wording throughout. Every one of those touches references your QMS has carried for eleven years. The fix is a search, not a rewrite.
The test an auditor runs: pick a procedure, ask which clause it satisfies, open the standard to that clause. If the clause is not there, or is not about that, it is a finding, even if the procedure works.
The 11 search strings
Run each of these through your document system, quality manual, audit checklists, forms, and training material. Search file contents, not just titles. Most systems let you search inside PDFs and Word files; if yours does not, export to a folder and use desktop search.
| # | Search for | Why | What to do |
|---|---|---|---|
| 1 | 10.3 | The clause no longer exists in the 2026 edition. Why it is gone. | Repoint to 10.1. |
| 2 | 10.1 | The scope of 10.1 changed; it now carries continual improvement. | Confirm the reference still fits what the procedure covers. |
| 3 | outputs near management review or 9.3.3 | The heading is now "results." | Retitle the section in your minutes template and procedure. |
| 4 | Annex B | Removed from the 2026 edition. | Delete the reference. |
| 5 | 6.1 with no sub-clause | 6.1 now has three sub-clauses: general, risks, opportunities. | Add 6.1.1, 6.1.2, or 6.1.3 as appropriate. |
| 6 | risks and opportunities as one phrase | Treated separately in 6.1.2 / 6.1.3 and in the 9.3.2 inputs. | Split any form or agenda item that treats them as one line. |
| 7 | 2015 in a title, header, footer, or revision block | Edition reference. | Update to 2026, including the certificate frame in reception. |
| 8 | ISO 9001:2015 | Edition reference in body text, scope statements, supplier requirements. | Update. Check purchase-order terms sent to suppliers. |
| 9 | documented information | Wording adjusted in 7.5 of the 2026 edition. | Compare your document control procedure's phrasing to the new clause. |
| 10 | interested parties | Now an explicit management review input in 9.3.2. | Add to the agenda template if absent. |
| 11 | management representative | Not a role in 2015 either, but it survives in older manuals. | Remove or retitle. |
Documents that always need a pass
Search everything, but these are the ones where references break most often.
- Quality manual, if you keep one, and the clause cross-reference matrix
- Document control procedure (7.5)
- Risk and opportunity register and its procedure (6.1.2, 6.1.3)
- Change control form or procedure (6.3, now seven considerations)
- Contract or order review procedure (8.2.3.1, the review before committing to supply)
- Supplier requirements template and purchase-order terms (8.4.3)
- Design planning and design output checklists (8.3.2, 8.3.5)
- Management review agenda and minutes template (9.3.2, 9.3.3)
- Internal audit program procedure and checklist (9.2.2)
- Corrective action procedure (10.2)
- Awareness training and onboarding material (7.3)
Keep the list; it is your first piece of evidence
Before the transition audit, one person should be able to say: "Every clause reference in the QMS has been checked against the 2026 edition, and here is the list of what changed." Keep the search results, the documents touched, the revision numbers, and the date. It is the first thing to hand the auditor, and it turns a likely finding into a demonstration that the system is controlled.
Two more things auditors will do after the reference check: ask to see a management review held against the revised 9.3.2 inputs, and ask to see an internal audit against the 2026 edition. Both need to exist before the transition audit, which is why the six-month plan puts the document control sweep in month two.
Score your own system in four minutes
The free readout asks thirteen questions about your system against the 2026 changes and gives you your readiness, your timeline to the deadline, and your first three actions. Nothing you enter leaves your browser unless you ask for the optional AI reading.
Run the free readoutThen do the work
The ISO 9001:2026 Gap Analysis and Transition Kit: every sub-clause scored and weighted by what changed, a change log with a "what to check" column, a gap map, a ranked action plan with control levels, and a transition plan built to your audit date. Verified against the published text. $57.
Get the Transition KitEverything in the kit, tab by tabRead every change, clause by clauseQuestions
Do I have to rewrite my quality manual for ISO 9001:2026?
No. Most of the work is correcting clause references that moved or were removed, adding the new considerations to a few forms, and updating the management review inputs. A manual is not required by the standard; if you keep one, sweep it for references.
Which clause numbers changed in ISO 9001:2026?
Clause 10 was renumbered and 10.3 removed; 6.1 was split into 6.1.1, 6.1.2, and 6.1.3; 9.3.3 was retitled from outputs to results; Annex B was removed. Other clause numbers held, but several gained new items.
Will an auditor really fail us for a wrong clause reference?
A wrong reference by itself is usually a minor nonconformity or an observation, but it is one of the easiest findings to raise and one of the easiest to prevent. Several of them together suggest the QMS has not been maintained, which is a bigger conversation.
How long does the document control sweep take?
For a single-site system with 30 to 60 controlled documents, a day to search and two or three days to revise and re-approve. The search itself is the fast part; the re-approval cycle is what takes time.