How to Do an ISO 9001:2026 Gap Analysis, Step by Step
ISO Cloud Consulting editorial team
An ISO 9001:2026 gap analysis compares your current quality management system with the new edition, requirement by requirement, and records what conforms, what evidence you have and what must change. If you are already certified to ISO 9001:2015, start with the lines that are new, changed or clarified; for a small company this can often be done in a day or two.
What do you need before you start?
- A licensed copy of ISO 9001:2026, including Annex A.
- Your current documented information: scope, policy, objectives, procedures, registers and recent audit and management review records.
- A gap analysis tool. A spreadsheet with one line per requirement works best, because you can filter, assign owners and track progress. Our Gap Analysis Workbook has 178 lines, and 66 of them are flagged as New (15), Changed (19) or Clarified (32) in ISO 9001:2026.
- Two hours with each process owner.
Step 1: Set the scope and scoring
Use the same scope as your certificate. Score each line on a simple four-point scale:
| Status | Meaning |
|---|---|
| Conforms | Requirement met and evidence available. |
| Partial | Practice exists but is incomplete, inconsistent or lacks evidence. |
| Gap | Requirement not addressed. |
| Not applicable | Justified exclusion, allowed only where the requirement cannot apply. |
Step 2: Start with what changed
Filter to the changed lines first. For a 2015-certified system these are where your gaps will be:
- 4.1 and 4.2: climate change relevance, and which interested-party requirements the QMS addresses.
- 5.1.1, 7.1.4 and 7.3: quality culture and ethical behavior in leadership, work environment and awareness.
- 6.1.2 and 6.1.3: separate determination, evaluation, action and effectiveness review for risks and for opportunities.
- 6.3: communication, monitoring and review of results for planned changes.
- 8.2.1: customer communication about contingency and disruption.
- Clause references: documented information wording, and clause 10, where continual improvement is now 10.1 and there is no 10.3.
See the full list of changes for detail.
Step 3: Record evidence, not opinions
For every line marked Conforms, name the document or record that proves it. If you cannot name one, the line is Partial. This single rule is what makes a gap analysis credible and useful to you.
Step 4: Sample the unchanged clauses
You do not need to re-audit the whole system, but a transition is a good moment to sample clauses that often drift: document control, calibration, supplier evaluation, corrective action and competence records. Spend the last hour here.
Step 5: Turn gaps into actions
Give each Partial or Gap line an action, an owner, a due date and a priority. Group the actions into a transition plan and have top management approve it. That approval is also your first piece of evidence for the expanded clause 6.3.
Common mistakes
- Scoring from memory. Open the records. Gaps hide in the difference between what the procedure says and what people do.
- Treating culture and ethics as a policy edit. Adding a sentence to the quality policy is not evidence that leaders demonstrate anything.
- Leaving opportunities as a column in the risk register. They need their own evaluation and follow-up.
- Ignoring Annex A. It contains no requirements, but it explains the intent of the requirements and the terms used.
- Doing it alone. A gap analysis done only by the quality manager produces a quality manager's action list that nobody else owns.
What comes after the gap analysis?
Implement the actions, train people, run an internal audit against the 2026 edition with an updated audit checklist, hold management review and book the transition audit. The transition guide lists the full sequence.
