CEO of ISTO, Mr. Howie Ng, has given a presentation on how ISO 9001 changed across its 6 editions, from the first in 1987 to the sixth, expected on 16 September 2026. He is a nominated expert to ISO/TC 176/SC 2, the subcommittee responsible for ISO 9001, and was a member of SC 2/WG24, the working group behind the 2015 revision. The slides are reproduced below in full. This article is the first in a series of deep dives ISTO is publishing on the ISO management system standards.
It covers the 6 editions and their requirements for documented information. For the 2026 changes clause by clause and for the transition timeline, see what is changing in ISO 9001:2026.
6 editions in 39 years
ISO 9001 editions
1987
First edition
Product-focused quality assurance, written for manufacturing
1994
Second edition
Same structure, around 20 documented procedures, the documentation peak
2000
Third edition
Quality assurance becomes quality management; process approach arrives
2008
Fourth edition
Editorial clarification only, no new concepts or requirements
2015
Fifth edition
Harmonised structure, risk-based thinking, no mandatory procedures
16 Sept 2026
Sixth edition
Drafting adds a requirement on top management to promote quality culture and ethical behaviour; expected, not yet published
ISO/TC 176 was formed at the turn of the 1980s to harmonise the national quality-system standards then in circulation: Canada's CSA Z299, the American ANSI/ASQC Z-1.15, and the British BS 5750, which came out of defence procurement. An organisation exporting to 3 markets could be audited against 3 different standards. ISO 9001:1987, published alongside ISO 9002 and ISO 9003, gave those markets a single reference.
The 6 editions differ in scope. The 1994 edition retained the 1987 structure. The 2008 edition made editorial changes only. The substantive revisions are 2000 and 2015; both the 2024 climate amendment and the 2026 revision operate within the structure established in 2015.
Edition by edition
| Year | Edition | Structure | Documented information |
|---|---|---|---|
| 1987 | 1st | Requirements in a single clause 4, as 20 elements at 4.1 to 4.20; product-focused quality assurance, aimed at manufacturing | 2 documented procedures required |
| 1994 | 2nd | Structure unchanged; preventive action introduced | Around 20 documented procedures required, giving heavily documented systems |
| 2000 | 3rd | 8 clauses, subclauses 4.1 to 8.5.3; process approach, customer focus, PDCA; 'product' extended to cover service | Simplified to 6 documented procedures |
| 2008 | 4th | Unchanged. No new requirements; clarifications that changed how some clauses were applied | Unchanged |
| 2015 | 5th | 10 clauses on the high-level structure of Annex SL, renamed the harmonised structure in 2021; context of the organisation added; risk-based thinking replaces the separate preventive action clause | No quality manual and no documented procedure requirements |
| 2026 | 6th | 10 clauses; quality culture and ethical behaviour; risks and opportunities separated | Drafting indicates simplified documented-information wording, 'available' in place of 'maintain' and 'retain'. Confirm against the published text |
The procedure counts are approximate, and other readings of the 1987 and 1994 editions arrive at different totals. On that table, 3 points are commonly misstated. The 2000 edition introduced 8 quality management principles; that count applies to the 2000 and 2008 editions, and ISO 9000:2015 sets out 7. Preventive action was not withdrawn in 2015: it ceased to be a separate ISO 9001 clause and was addressed through risk-based thinking in clause 6.1, but it remains defined in ISO 9000:2015 and remains an explicit requirement in some sector standards. The 2015 edition's 10-clause layout derives from Annex SL, designated the high-level structure at that time and reissued in 2021 as the harmonised structure.
Documenting what is not required
Holding documented information for a requirement that does not exist is not, in itself, a nonconformity. It does not stay neutral either. Once a procedure is part of the quality management system it forms part of what the organisation is audited against, through clause 4.4.1, through clause 8.1 e), and through clause 7.5.1 b). Not following a procedure the organisation adopted voluntarily is a nonconformity in the same way as not following a mandated one.
Documentation carried forward from an earlier edition out of habit is therefore worth reviewing on its merits. Removing it is a change to the quality management system, to be planned under clause 6.3.
Across 6 editions ISO 9001 has moved the extent of documentation from the standard to the organisation. The 2026 edition is drafted to continue that direction, which the published text will confirm or change.
Why the distinction matters
Quality assurance and quality management set the organisation a different test. Two consequences of that shift account for most of what separates the 1987 edition from the 2026 drafting.
A heavily documented management system is no longer required
Quality manuals and documented procedures are optional. The standard is non-prescriptive. The organisation has flexibility to tailor its quality management system to meet requirements based on its specific context, including the complexity of its documented information.
Optional is not the same as absent. Documented information ISO 9001 requires explicitly is required whatever the organisation decides, among it the results of monitoring and measurement under clause 9.1.1, internal audit results under clause 9.2.2, the results of management review under clause 9.3.3, and the nature of nonconformities and the results of corrective action under clause 10.2.2. Documented information the organisation itself determines to be necessary for the effectiveness of its quality management system is required documented information under clause 7.5.1 b). Where no documented-information shall applies, conformity is demonstrated by whatever objective evidence the clause generates, which under ISO 19011 includes interview and observation as well as records.
Meeting customer requirements and enhancing customer satisfaction
From the 1987 quality assurance model focused on contractual compliance to the 2026 emphasis on demonstrating the ability to consistently deliver products and services that meet customer and applicable requirements, and to enhance customer satisfaction.
Organisations are required to mitigate their risks and capitalise on the opportunities (for example technology) that are relevant to the intended results of the quality management system. Clause 6.1 carries that requirement, and the 2026 drafting separates risks from opportunities. The published text will confirm the wording.