Most ISO 9001:2026 guides miss the clause on knowledge
We read 76 popular ISO 9001:2026 guides. 56 never mention clause 7.1.6 on organisational knowledge, and 32 list requirements the standard does not contain.
Of the 76 guides to ISO 9001:2026 that ranked in Google's top 20 in the United Kingdom and France on 19 October 2026, 56 (74%) never mention clause 7.1.6 or organisational knowledge. In all, 32 (42%) state at least one requirement that the published standard does not contain, 18 of them on artificial intelligence (AI) or cybersecurity.
Organisational knowledge is not one of the six main changes that the standard lists in its foreword, which explains part of the silence. The clause's wording still changed: knowledge must now be retained, applied and shared, and it serves the intended results of the whole quality management system. Only 6 of the 76 guides name those three verbs, and none mentions the new note that names digital systems among the places where knowledge is held.
74%
never mention the knowledge clause (56 of 76 guides)
42%
state a requirement the standard does not contain (32 of 76)
0 of 76
mention the new note on digital systems
How we read the guides
- What we read. The top 20 Google results for five queries per language, in the United Kingdom and in France, on 19 October 2026. After removing duplicates and pages that are not guides, 76 guides remain, 38 per language.
- The reference. We compared every guide with the published standard, ISO 9001:2026, not with other summaries.
- The rules. The coding rules were written down before coding started. They changed once, on 19 October, and every page was coded again.
The numbers, by language and by publisher type
| Group | Guides | Never mention the knowledge clause | State a requirement the standard does not contain |
|---|---|---|---|
| All guides | 76 | 56 (74%) | 32 (42%) |
| English, Google UK | 38 | 26 (68%) | 14 (37%) |
| French, Google France | 38 | 30 (79%) | 18 (47%) |
| Written after publication (16 September 2026) | 40 | 26 (65%) | 8 (20%) |
| Written before publication | 36 | 30 (83%) | 24 (67%) |
The French guides do worse on both counts, and 8 French guides announce an AI requirement, against 3 in English. Guides written after publication are more accurate, but 65% of them still say nothing about knowledge.
| Publisher | Guides | Never mention the knowledge clause | State a requirement the standard does not contain |
|---|---|---|---|
| Standards and accreditation bodies | 7 | 5 | 2 |
| Certification bodies | 24 | 20 | 3 |
| Consultancies | 20 | 13 | 11 |
| Software vendors | 13 | 7 | 9 |
| Training providers | 8 | 7 | 4 |
| Other publishers | 4 | 4 | 3 |
No standards body and no certification body names the three verbs. The six guides that do come from consultancies (three), software vendors (two) and a training provider (one). In proportion, software vendors mention the clause more often than any other type of publisher (6 of 13), and 9 of those 13 guides state a requirement that does not exist.
What the guides that cover the clause say
Of the 76 guides, 20 mention organisational knowledge. Seven only name it, in a list or a heading, and 13 say something about what changed (a guide can do more than one of these):
- Six name the three verbs: knowledge is retained, applied and shared, where the 2015 edition said maintained and made available.
- Three say the purpose is wider: the clause now covers the knowledge needed for the intended results of the whole management system, not only for conforming products and services.
- Six give a practice a team can use: a register of critical knowledge and the people who hold it, handovers and mentoring before someone leaves, lessons-learned logs, or a list of single points of failure.
- One forecast, written before publication, kept a 2015 verb: it expected knowledge to be captured, maintained and transferred.
One guide presents knowledge as one of the six main changes listed in the standard's foreword, but it is not one of them. None of the 76 mentions the new note on the forms that knowledge takes. Only three have a table that compares the 2015 and 2026 editions, and one of the three is a PDF.
Outside our sample, the French standards body AFNOR states the change of verbs in its summary of the new edition, which ranks on a related French query.
What the other guides get wrong
Silence, starting with the sources most people trust
ISO's English explainer names organisational knowledge once, in a sentence on the "smaller refinements" of the new edition. Its French explainer renders the same passage as "la maîtrise organisationnelle" (organisational control), so the French version no longer says knowledge. ISO's page for the standard and its campaign page do not mention it.
The guide to the key changes from the British Standards Institution (BSI) ranked first on "iso 9001 2026 changes" in the United Kingdom on 19 October. It reviews the standard clause by clause with no item on knowledge, and it describes Annex A as the first annex of guidance ISO 9001 has had. The 2015 edition already had an informative Annex A, which the 2026 edition replaces. BSI's French page says the same.
Among certification bodies, 20 of 24 guides never mention knowledge. SGS's news page on the publication lists organisational knowledge among the areas updated, but the detailed guidance it links to says clause 7 has few substantive changes and names only the new awareness item. The transition pages of NQA and Intertek have no item on knowledge.
Requirements the standard does not contain
ISO 9001:2026 never uses the words "artificial intelligence" and adds no information security requirement. Technology appears as context, an example or an opportunity, in notes and in Annex A. In the 76 guides:
- 11 state a requirement on AI. All 11 were written before the standard was published, and three of them were updated after it without removing the claim.
- 12 state a cybersecurity or data security requirement, two of them written after publication.
- 24 state another requirement that does not exist: a mandatory business continuity plan, a required climate risk analysis, a software validation duty under clause 7.1.5, digital skills under competence (7.2), a new process owner role, or an Annex A presented as the first one.
Most of these come from forecasts: 24 of the 36 guides written before publication state a requirement that does not exist, against 8 of the 40 written after. A forecast was a fair guess when it was written. It is still on page one of Google, and it reads like a description of the published text.
Transition dates
Nine guides get the transition wrong. Six name the International Accreditation Forum (IAF) as the body setting the rules, although IAF stopped operating on 1 January 2026, before these guides were written or last updated. Three give a wrong date, such as "Q2 2029" or 29 September 2029. The rule comes from Global Accreditation Cooperation (Global ACI): certificates to the 2015 edition stop being valid on 30 September 2029, and from 31 March 2028 new certifications are made to the 2026 edition only.
What AI answer engines repeat
On 19 October 2026 we also asked ChatGPT (with web search) and Google's AI Overview 20 questions on ISO 9001:2026, its knowledge clause and the transition, 10 in English and 10 in French. Of the 40 answers, 21 describe what clause 7.1.6 requires, and 12 of those still carry 2015 text: 7 present the 2015 clause as current, and 5 mix 2026 wording with the 2015 purpose or notes. Only 9 are current. No answer gives the full 2026 clause: 13 of the 40 give the three verbs, 8 of the 21 give the wider purpose, 2 describe the four forms of the new note, and none mentions A.7.1.6 or says the clause now points to ISO 30401. In four answers, ChatGPT cites a 2016 paper on organisational knowledge from the Auditing Practices Group of ISO and IAF, written for the 2015 edition. Of its 11 answers on the clause, 8 carry 2015 text, against 4 of 10 for the AI Overview. Three AI Overview answers state an AI, digital or cybersecurity requirement that the standard does not contain.
Why the omission matters to an operations or quality team
Clause 7.1.6 asks an organisation to determine the knowledge needed to run its processes and to achieve the intended results of its quality management system. In 2015 the purpose was the conformity of products and services. That knowledge must be retained, applied and shared, as far as needed. A new note lists four forms of knowledge: held by people through experience; gained through education and learning from others; built into methods, processes and products; or captured in documented information, digital systems and other media. A new informative section of Annex A, A.7.1.6, describes knowledge as dynamic, updated through use and experience, and points to ISO 30401, the standard for knowledge management systems.
A team that prepares its transition from a guide that skips the clause keeps its 2015 answer: the procedures exist, and people can find them. The 2026 verbs ask for more. Applied means people use the current knowledge at the moment of the task. Shared means it moves from the person or the site that holds it to the other people and sites. Neither shows in a list of documents, so each needs its own evidence.
The number of teams concerned is large. France alone counted 21,880 valid ISO 9001 certificates at the end of 2022, according to AFNOR's reading of the ISO Survey, and every certified organisation must move to the 2026 edition by 30 September 2029.
What to do: five steps
- Check a guide before you rely on it. Four tests: it was written after 16 September 2026; it gives Global ACI and 30 September 2029 for the transition; it states no AI or cybersecurity requirement; and it covers clause 7.1.6 with the three verbs. In our sample, 35 of 76 guides pass the first three tests and 6 pass all four.
- Read the clause, not a summary of it. Our reference page on ISO 9001:2026 and organisational knowledge shows every change of the new edition in one table, then clause 7.1.6 in 2015 and 2026 side by side.
- Map the knowledge each process depends on. For each process, list who holds the knowledge, where it is written and which of the new note's four forms it takes. A knowledge audit checklist gives the columns.
- Give each verb its evidence. Retained: an owner and a review date for each area of knowledge. Applied: the version of the procedure people use at each step, since clause 8.5.1 now asks that documented information is available and used. Shared: the lessons that changed a procedure, and who was told.
- Put it on a calendar. Our 90-day plan for operations teams gives one 30-day block per verb, each ending with the evidence an auditor can sample.
Common questions
Most leave out clause 7.1.6 on organisational knowledge: 56 of the 76 guides we read never mention it. Only 6 name its new verbs (retained, applied and shared), and none mentions its new note, which names digital systems among the places knowledge is held.
No, it is not one of the six main changes that the standard lists in its foreword. The clause's wording still changed: knowledge now serves the intended results of the whole quality management system and must be retained, applied and shared, where 2015 said maintained and made available.
Not all: 18 of the 76 guides we read state an AI or cybersecurity requirement that the standard does not contain. The standard never uses the words "artificial intelligence" and adds no information security requirement. In our sample, 11 guides state an AI requirement and 12 a cybersecurity one (five state both); all 11 AI claims come from guides written before the standard was published.
Check four things: it was written after 16 September 2026, it gives Global ACI and 30 September 2029 for the transition, it states no AI or cybersecurity requirement, and it covers clause 7.1.6 with its three verbs. Only 6 of the 76 guides we read pass all four.
We took the top 20 Google results for five queries per language, in the United Kingdom and in France, on 19 October 2026. We removed duplicates and kept the pages whose main subject is the 2026 revision and that state at least one change. Videos, course or event pages that name no change, gated downloads and unreadable pages were excluded.
Where to go next
- Read the reference: ISO 9001:2026 and organisational knowledge, every change in one table and clause 7.1.6 in detail.
- Plan the work: the 90-day plan for operations teams.
- Compare: how operations teams keep one current version of every procedure, on our global operations page.
- Use a template: the knowledge audit checklist, the process flowchart and the quality control checklist.
- Do it in Elium: Elium is a European knowledge management platform where you give each article an owner and a verification date, and send changes through approval before they are published.
Sources
- ISO, ISO 9001:2026, Quality management systems: Requirements, sixth edition, September 2026, clause 7.1.6, Annex A and the foreword, read in the licensed redline edition EVS-EN ISO 9001:2026 on 10 October 2026.
- ISO, ISO launches update to world's most widely used quality management standard, 16 September 2026. Checked 20 October 2026.
- ISO, ISO 9001:2026: What businesses need to know and its French version, ISO 9001:2026 : éclairage à l'intention des entreprises. Checked 20 October 2026.
- BSI, ISO 9001:2026: Key changes and guidance and its French version. Checked 20 October 2026.
- SGS, ISO 9001:2026 published: what you need to know, 16 September 2026, and ISO 9001:2026: key updates and transition guidance. Checked 20 October 2026.
- NQA, ISO 9001:2015 to 2026 transition guide, and Intertek, ISO 9001:2026: key updates and transition guidance. Checked 20 October 2026.
- ISO 9001 Auditing Practices Group, Guidance on organisational knowledge, 2016. Checked 20 October 2026.
- Global Accreditation Cooperation, Global ACI publishes transition requirements for ISO 9001:2026, 16 September 2026, and the requirements document, Global ACI-TECH-3-TR 2029-09-30 (M). Checked 20 October 2026.
- AFNOR, ISO 9001 et ISO 14001 : le point sur la dernière version, updated 22 September 2026, and ISO Survey: why France's falling behind in quality is worrying, updated 15 September 2026. Checked 20 October 2026.
Data and sources
This page is built from our own audit of 76 guides to ISO 9001:2026, chosen as set out at the top of the page and coded between 19 and 20 October 2026. The coding rules changed once, on 19 October, and every page was coded again. Each positive code was checked against the passage that supports it; there was no second full reading of every page. Every count on the page is computed from the coded table, which records for each guide its publisher type, its date, whether it mentions clause 7.1.6, the verbs it uses, the requirements it states that the standard does not contain and its transition dates. The AI answers were collected on 19 October 2026 and coded against the standard in the same way. The standard is paraphrased throughout: no clause text is reproduced. Software vendors and consultancies are counted but not named. The coded table is available on request. Last reviewed on 20 October 2026.