ISO 9001:2026 Understanding and Implementation

ISO 9001:2026 Understanding and Implementation

Course code	Price	Duration	Level
FS32-0402	R4800	About 14 hours, self paced	Intermediate to Advanced

About this course

The retailer’s supplier questionnaire lands in your inbox on a Tuesday. This year there is a new line on it: ISO 9001 certification, or a plan to certify by the end of 2027. Sixty one percent of your volume sits behind that question, and the board meeting is on Thursday. You have two days a week for the project, a budget for ten consultant days, and a quality policy in reception that was signed by an MD who has left.

That is the position most quality managers are in when they buy a standard for the first time. The standard tells you what must be true. It does not tell you what to build, in what order, with what record, or what the stage 2 auditor will sample when she gets there. This course does. It walks clause 4 to clause 10 at implementation depth, and it hands you seven working tools and a case site with enough real data to build a whole system on before you touch your own.

Fourteen hours, six modules, a three sitting workshop of sixty minutes a sitting, and a marked assignment. At the end you will have an exported implementation workbook that carries a context register, a process map, two separate registers for risks and for opportunities, five quality objectives, an internal audit programme and a management review pack. Not a set of templates. Your own work, marked against a published rubric.

What this course is, and what it is not

It is a build course. Every clause lesson follows the same shape: what the clause requires, what it looks like when it is done well on a real site, the record or evidence that proves it, how to build it step by step, and the finding auditors raise most. It covers the full sixth edition including everything that changed from 2015, the transition for a certified site, the twelve month implementation project, and how certification works from choosing a body to living with the certificate.

It is not a lead auditor course and it does not award a lead auditor qualification. It is not a template pack, and it will actively argue you out of buying one: the standard has no quality manual requirement, no six mandatory procedures and no management representative. It does not certify your organisation. Only an accredited certification body can do that.

Who it is for

• QA and quality managers who have to build, upgrade or run the system.
• Management representatives and QMS coordinators, whatever your site calls the role.
• Internal auditors who audit against ISO 9001 and need the 2026 numbering and the new requirements.
• Consultants who advise South African sites and need the change list clause by clause.
• Operations, production, engineering, procurement, planning and NPD managers who own processes inside the scope.
• Sites already certified to ISO 9001:2015 planning the transition before 30 September 2029.
• Sites certified to a food safety scheme whose customers have now asked for ISO 9001 as well.

Who it is not for

• Someone who only needs to know what the system is and what their part in it is. Do the Introduction instead, at R1495.
• Someone looking for a one hour transition briefing. Module 1 Lesson 3 is that briefing, but it sits inside fourteen hours of build work.
• Anyone wanting a certificate without doing the assignment. The assignment is marked, and the pass mark is 70.

What you will be able to do afterwards

• Find any requirement in ISO 9001:2026 in under a minute and say whether what you are reading is a requirement, a note or informative guidance.
• Apply the terminology A.2 clarifies under a) to f), appropriate, applicable and as applicable, consider and take into account, continual, ensure, the two documented information phrases and strategic direction, and say what each one costs you in work.
• List the changes from the 2015 edition clause by clause and state what each one means for a system that is already certified.
• Build a twelve month implementation plan with phases, roles, a steering meeting agenda and a documentation list that contains no quality manual.
• Complete a Gap Assessment line, choose one of the four statuses, and write a justification for not applicable that survives a stage 1 audit.
• Write the external and internal issues for a site in a form an auditor accepts, including the decision on whether climate change is a relevant issue and where that decision is recorded.
• Build a Context and Interested Parties Register with a scope statement tab, and decide for each requirement whether it will be addressed through the quality management system.
• Draft a scope statement that states the types of products and services covered and carries a justification for anything determined as not applicable.
• Map the processes of a site and write a process card that answers 4.4.1 a) to i), with an owner, criteria and performance indicators for each process.
• Prepare top management for the leadership interview by matching each of the twelve items in 5.1.1 to the evidence an auditor will ask for.
• Rewrite a quality policy so that it meets 5.2.1 a) to e) and 5.2.2 a) to d), and assign the six responsibilities and authorities in 5.3 to named roles.
• Build a risk register and a separate opportunity register that carry the six things clauses 6.1.2 and 6.1.3 ask for, and defend the size of each entry on proportionality. The standard requires risks and opportunities to be determined, analysed, evaluated and actioned separately, and names no register: two registers is the method this course teaches.
• Write quality objectives that meet all eight requirements of 6.2.1 and carry a 6.2.2 plan line with what, resources, who, when and how the result is evaluated.
• Plan a change to the quality management system against the seven considerations in 6.3 and record it on one page.
• Determine and evidence resources under 7.1, including the fitness for purpose record for monitoring and measuring equipment and the decision to take when an instrument is found unfit.
• List every place in ISO 9001:2026 where documented information shall be available, and say for each whether the phrase is availability of information or retention of evidence.
• Write a contract review checklist that covers 8.2.3.1 a) to e), and apply it to an order that arrives by WhatsApp.
• Plan a design and development project against 8.3.2 a) to j), and set stage gates that separate review, verification and validation.
• Categorise external providers by risk and put the 8.4.3 a) to f) content on a purchase order.
• Write an internal audit programme under 9.2.2 that is justified by importance, previous results and changes, and that keeps auditors objective.
• Assemble a management review pack that carries 9.3.2 a) to h) with the seven trend items under d), and take one corrective action to a root cause that is not operator error.

What is inside

Six modules, 33 lessons, 469 minutes of lesson time, plus three workshop sittings of sixty minutes each, five knowledge checks, five games and the final assessment. About fourteen hours in total.

Module 1: Foundations, what changed, and the implementation project (75 minutes)

Lesson	Minutes
1.1 The standard, the ISO 9000 family, and how to read it	16
1.2 Principles, process approach and PDCA, in implementation terms	13
1.3 From 2015 to 2026: every change and what it means for an existing system	18
1.4 Planning the implementation project, and the Gap Assessment	16
1.5 Applicability and scope decisions before you start (4.3)	12
Knowledge check and game	included

Module 2: Context and leadership, clauses 4 and 5 (74 minutes)

Lesson	Minutes
2.1 Understanding the organisation and its context (4.1)	14
2.2 Interested parties and their requirements (4.2)	12
2.3 Scope (4.3) and the quality management system and its processes (4.4)	18
2.4 Leadership and commitment (5.1), quality culture and ethical behaviour	14
2.5 Quality policy (5.2) and roles, responsibilities and authorities (5.3)	16
Knowledge check and game	included

Module 3: Planning and support, clauses 6 and 7 (89 minutes)

Lesson	Minutes
3.1 Determining risks and opportunities (6.1.1) and actions to address risks (6.1.2)	16
3.2 Actions to address opportunities (6.1.3)	11
3.3 Quality objectives and planning to achieve them (6.2)	14
3.4 Planning of changes (6.3) and control of change across the standard	13
3.5 Resources (7.1): people, infrastructure, environment, measuring equipment and knowledge	17
3.6 Competence (7.2), awareness (7.3), communication (7.4) and documented information (7.5)	18
Knowledge check and game	included

Module 4: Operation, clause 8 (95 minutes)

Lesson	Minutes
4.1 Operational planning and control (8.1)	12
4.2 Requirements for products and services (8.2)	14
4.3 Design and development of products and services (8.3)	16
4.4 Externally provided processes, products and services (8.4)	14
4.5 Production and service provision (8.5)	16
4.6 Release of products and services (8.6) and control of nonconforming outputs (8.7)	12
4.7 Writing the operational documented information: what to write and what not to write	11
Knowledge check and game	included

Module 5: Performance evaluation, improvement and certification, clauses 9 and 10 (66 minutes)

Lesson	Minutes
5.1 Monitoring, measurement, analysis and evaluation (9.1)	14
5.2 Internal audit (9.2), the programme, the report and the nonconformity	14
5.3 Management review (9.3) and the review pack	14
5.4 Continual improvement (10.1), nonconformity and corrective action (10.2)	14
5.5 Certification: choosing a body, stage 1 and 2, and living with the certificate	10
Knowledge check and game	included

Module 6: Workshop, assignment and final assessment (70 minutes plus three workshop sittings of 60 minutes each)

Lesson	Minutes
6.1 Workshop briefing: three sittings, seven tools, one workbook	12
6.2 Sitting 1: context, interested parties, scope and processes	16 plus 60 of work
6.3 Sitting 2: risks, opportunities and quality objectives	16 plus 60 of work
6.4 Sitting 3: audit programme, management review pack and one corrective action	16 plus 60 of work
6.5 The assignment brief and the marking rubric	10

The tools you walk away with

Seven interactive tools, used inside the course and yours to use on your own site afterwards. Everything you build exports into one workbook.

Tool	Clauses	What it does
ISO 9001:2026 Gap Assessment	4 to 10	161 requirement lines, each worded as a question a process owner can answer. Four statuses, evidence note, owner, target date, score and export
Context and Interested Parties Register	4.1, 4.2, 4.3	External and internal issues, the climate change decision with a reason, parties, their requirements, whether each is addressed through the QMS, owner and review date, plus a scope statement tab for 4.3
Process Map and Process Cards	4.4	Processes, inputs, outputs, sequence and interaction, criteria and performance indicators, resources, a single named owner, risks and opportunities, evaluation method
Risk and Opportunity Registers	6.1.2, 6.1.3, 6.2	Two separate registers, which is the method this course teaches, because 6.1.2 and 6.1.3 close on different tests: description, analysis, evaluation, action, integration into the process and how effectiveness is evaluated, with a proportionality check and a quality objectives tab
Internal Audit Programme Builder	9.2.2	Every process, importance, previous results, changes, frequency, method, auditor with an objectivity check, schedule, reporting and the corrective action route
Management Review Pack Builder	9.3.2, 9.3.3, 10.2	All eight inputs a) to h) with the seven trend items under d), results, decisions with owners and dates, and a corrective action tab that works one action to root cause
Implementation Workbook self check and export	All	Runs the published rubric over your saved work, shows your mark against the pass mark of 70, assembles the other six tools into a single workbook of 15 sheets and submits it to ASC for marking

The case sites

26 case packs run through the course, each with tasks, the data you need and a model answer to compare your work against. They are built on Mzansi Fresh Meals. The workshop offers three sites, and your own site if you have permission to use its data. All three are marked identically.

• Mzansi Fresh Meals (Pty) Ltd, Kempton Park, Gauteng. Chilled ready meals, 38 products, about 1.2 million meals a month, 400 people on two shifts, R310 million turnover. Certified to a GFSI benchmarked food safety scheme, not certified to ISO 9001. Complaints up from 12 to 18 a month, on time in full 91.4 percent against a target of 98, 41 corrective actions open, a management review held 14 months ago. A national retailer wants ISO 9001 and there is a Namibian export enquiry. Stage 2 targeted for September 2027.
• Limpopo Citrus Packhouse, Letsitele. Family owned, 4 packlines, 1.9 million cartons a season, up to 380 seasonal packers. Export claims last season R3.1 million. The owner approves everything, process owners are undefined, and the export protocol lives in one person’s head. Good for arguing whether clause 8.3 applies.
• Cape Table Restaurant Group, Cape Town. Eleven restaurants and a central kitchen, 640 staff. Fourteen percent of central kitchen deliveries to sites have a shortage or substitution, and the board and the operations director disagree about the scope. Good for a service organisation and for scope decisions under 4.3.

The case is a training scenario built from real audit patterns. No real company is named.

How it is assessed

• Five knowledge checks, one per teaching module: 15 questions drawn from a bank of 24, covering every lesson in that module.
• Five games, one per teaching module: a scenario stem and a single decision, drawn from a bank of 14. The titles are 2015 or new in 2026?, Whose job is it?, Risk, opportunity, objective or change?, Review, verification or validation? and Grade the finding.
• A final assessment: 35 questions drawn from a bank of 75 across Modules 1 to 5, at least a third scenario based, video proctored.
• A marked assignment: the implementation workbook of 15 sheets, assembled and exported by the self check and export page as one .xlsx, plus a note of 150 to 250 words to the managing director on the three things that must change first, carrying a rand figure, a date and a named role. Marked out of 100 against the rubric below. You have 21 days.
• Pass mark 70 percent. Three attempts on every assessment, including the assignment.

How the assignment is marked

The rubric is published inside the course so that you can mark your own work before you upload it. Layer one runs on the file itself and reaches you within minutes: counts, blank cells, owners, dates, numeric baselines and targets, the objectivity check, the seven trend items, the word count of the note and whether it carries a rand figure, a date and a named role. The qualitative layer reads the criteria that need judgement and reaches you within 24 hours, criterion by criterion, quoting your own words and numbers.

Criterion	Weight
Context, climate change decision and scope	12
Interested parties and their requirements	10
Processes, owners and indicators	12
Risk register	14
Opportunity register	8
Quality objectives	12
Internal audit programme	12
Management review pack	12
Corrective action to root cause	4
The note to the managing director	4

The QR verified certificate carrying the document code FS32-0402 is released when you have passed every knowledge check at 70 percent, completed every game, passed the final assessment at 70 percent, passed the assignment at 70 percent and submitted a short course review. Anyone can then scan the code and confirm the certificate.

Where this course sits

The Introduction comes first, but it is not a prerequisite and it is not Module 1 of this course. Someone who has done both meets the same standard twice at two depths: the Introduction explains what a clause asks for, this course shows how to build it, what record proves it and what an auditor will test.

• Before: Introduction to ISO 9001:2026, R1495, about 4 hours, for supervisors, QA staff and anyone who will be interviewed by an auditor. Enrol your team on that one and yourself on this one.
• Neighbours: the ASC food safety courses. If quality sits alongside a GFSI benchmarked scheme on your site, see Implementation of FSSC 22000 Version 7 (food manufacturing), and the ASC hygienic design course for the engineering side.
• Hub: all the ISO 9001:2026 material, including the free reading, sits at ISO 9001:2026 training.

Questions people ask before they enrol

When do we have to move off ISO 9001:2015?

ISO 9001:2026 was published on 16 September 2026. The IAF transition period is three years from publication, so ISO 9001:2015 certificates are expected to remain valid until 30 September 2029. Confirm the exact cut-off dates with your own certification body. Module 1 Lesson 3 gives you the three questions to ask them.

We are certified to a food safety scheme already. Do we need ISO 9001?

Not because any standard says so. Because customers do. A food safety certificate says the product is safe. It says nothing about the wrong sleeve, the low fill, the late delivery or the complaint that took 21 days to close. The case site in this course passes unannounced food safety audits with a good grade and still lost a listing worth R1.4 million a year on a training records finding. The two systems share records and audit programmes, and the course shows you which ones.

Does this work for a non food organisation?

Yes. ISO 9001 is sector neutral. The manufacturing examples are the deepest because that is where the ASC practitioners work, but the workshop offers a restaurant group as a service organisation and a packhouse as a seasonal one, and clause 8.3 applicability is argued across all three. The clauses, the evidence and the auditor’s questions do not change with the sector.

Do I need a factory to do the workshop and the assignment?

No. Every tool loads the case study data, so nobody is blocked by missing information. If you do have a site and permission to use its data, use it. The rubric marks the shape and the evidence of the work, not which site it describes.

Is ISO 9001:2015 knowledge assumed?

No. The course teaches the 2026 text from the beginning. Module 1 Lesson 3 is written for people who do know 2015 and gives the clause by clause difference table, and you can skip it if you have never seen the old edition.

What does the certificate say?

ISO 9001:2026 Understanding and Implementation, document code FS32-0402, your name, the date, the assignment result and the final assessment result, with a QR code that verifies it. It is a certificate from ASC Food Safety Consultants attesting to your training. It is not a certification of your organisation and it is not a lead auditor qualification.

Will it prepare me for a certification audit?

It will prepare you to prepare for one. You will finish with a gap assessment, a scope statement, a process map, two registers, five objectives, an audit programme and a review pack, and Lesson 5.5 covers choosing a body, stage 1, stage 2, findings, surveillance and recertification. What the course cannot do is create records. A stage 2 needs a full internal audit cycle and a management review behind it, and both need live data from your own site.

How long do I have, and what does it need?

Lifetime access, self paced, on any phone or laptop, although the workshop tools are easier on a laptop. Prices are in rand and there is a currency converter on this page. There are no discount codes on this course.

Can we enrol a team?

Yes. For teams of five or more, contact ASC for a group arrangement. A common pattern is one or two people on this course and the rest of the site on the Introduction.

About the trainer

ASC Food Safety Consultants write and review every course in this catalogue. The practitioners who wrote this one implement and audit management systems on South African sites: food manufacturing, packhouses, catering and retail supply. Every clause reference, every quotation and every change claimed against the 2015 edition was checked against the published text of the standard, and the course was reviewed by a panel of ASC practitioners before it was published. No individual is named, because the course is ASC’s work and ASC stands behind it.

ISO 9001:2026 is a standard published by ISO. This course is an independent training product and is not approved or endorsed by ISO or by any certification body.

Enrol

ISO 9001:2026 Understanding and Implementation, FS32-0402, R4800. About fourteen hours. Intermediate to Advanced. Six modules, 33 lessons, seven tools, 26 case packs, a three sitting workshop, a marked assignment and a video proctored final assessment. Self paced, lifetime access, three attempts on every assessment, and a QR verified certificate once every assessment and the review are complete.

Enrol now, or read the free material first at ISO 9001:2026 training.