Sterling Revise™: migrate to the new version — without starting from zero

Sterling Revise™ is Sterling’s standard-transition service for organisations in the Philippines: when a new edition such as ISO 9001:2026 arrives, we migrate your certified management system to the new version — every new and changed requirement addressed, everything that already complies preserved — without rebuilding from zero.

Revise™ — the transition phase of Sterling OS™ — takes your certified management system to the new version of its standard: every new and changed requirement addressed completely, everything that already complies preserved, minimum disruption, at a fraction of the original project’s cost. You built the system once; a revision shouldn’t make you pay for it twice. A revision is an update, not a demolition — and just as firmly: under-address the changes and you fail the transition audit. Revise threads exactly that needle.

And the timing has never mattered more: three of the most widely held ISO standards are changing at once. ISO 14001:2026 is already published — its transition clock runs to April 2029. ISO/IEC 27701:2025 has redrawn privacy certification entirely. ISO 9001:2026 arrives within months. Every certificate holder in the Philippines faces the same decision — and plenty of providers will happily quote you a rebuild you don’t need.

14001:2026 — published · to April 2029  |  27701:2025 — now standalone · to October 2028  |  9001:2026 — expected September

You’re here if: a standard you hold has been revised · your certificate expires within 12 months · you’re adding sites, subsidiaries or standards to an existing scope · or you simply need to know what’s actually changing — jump to the Tracker ↓

Why do ISO standards change — and why do transitions go wrong?

ISO reviews every management system standard on a roughly five-year cycle, and revises when the world has moved: new risks (climate requirements entered every major standard in 2024), new technology and ways of working, alignment with ISO’s Harmonized Structure, and lessons from a decade of audits. Revisions are scheduled evolution, not emergencies — the emergencies are entirely self-inflicted, and they follow four patterns we see every cycle:

How transitions fail	Why it happens	How Revise™ prevents it
The rebuild trap — paying again for a system you already own	Providers quote the transition as a re-implementation; owners can’t see how small the gap really is	The week-two gap report catalogues what already complies (usually most of it) — you see the true size of the work before committing a peso
The deadline pile-up — rushed, premium-priced transitions	Certification-body calendars jam in a window’s final year; latecomers pay in fees, disruption and risk	Booking strategy runs backwards from your surveillance or recertification slot, secured early in the window — never inside the bottleneck
The under-shoot — failing the transition audit	The revision is treated as paperwork; new and changed requirements go genuinely unaddressed	Internal audit against the new text plus training focused on the changes — completeness proven before the certification body arrives
The multi-standard collision — three transitions, three budgets, three disruptions	ISO 9001, 14001 and 45001 windows now overlap between 2026 and 2030; integrated-system holders face them stacked	One integrated transition calendar across your whole system — combined gap assessments, aligned audit dates, one project instead of three

Who typically chooses Revise™

Every ISO 9001:2015 certificate holder in the Philippines — the entire population must cross the 2026 transition inside its window; every ISO 14001:2015 holder, whose window is already open; organisations approaching recertification who want the cycle run as a project rather than an annual surprise; groups adding a plant, office or subsidiary and weighing a standalone certificate against a scope extension; and multinational or GCC structures deciding whether a Philippine entity joins the global certificate. Systems built by other consultants transition here routinely — whoever built it, we migrate it.

The Philippine ISO Standards Updates Tracker

Every status below is verified against ISO’s own publications and accreditation-body announcements, dated, and reviewed monthly. Standards change on committee timetables, not news cycles — and the internet is full of confident claims about editions that don’t exist. This tracker exists so Philippine organisations have one maintained, verifiable place to check what has actually changed, what is genuinely coming, and what remains exactly as it was.

Last reviewed: 18 September 2026 · Reviewed by Kaushal Sutaria, Founder — Lead Auditor · Next scheduled review: December 2026 · ISO 9001, ISO 14001 and ISO/IEC 27017 rows re-verified against the ISO Online Browsing Platform and accreditation-body bulletins on 18 September 2026

Standard	Current edition	Revision status (as at review date)	What certified organisations should do
ISO 9001 (QMS)	2026 — published 16 September 2026	Published 16 September 2026 — transition live. ISO 9001:2026 (edition 6, 36 pages) cancels and replaces ISO 9001:2015. Global ACI-TECH-3-TR 2029-09-30 (M), published the same day, fixes the transition at three years: all ISO 9001:2015 certificates must transition by 30 September 2029; accreditation bodies ready 31 March 2027, certification-body declarations 30 June 2027, accreditation decisions 30 September 2027; from 31 March 2028 new certifications are issued only to the 2026 edition. Changes: quality culture and ethical behaviour (5.1.1 i), 7.3 e)), risks and opportunities separated (6.1.2, 6.1.3), change planning strengthened (6.3 e) to g)), policy tied to context and strategy (5.2.1 e)), Clause 3 terms, Annex A rewritten, Annex B removed; no new mandatory documents.	Certified to 2015: book the transition audit for 2027, when certification bodies are accredited, rather than 2028–2029 when calendars fill. Implementing now: build to ISO 9001:2026 from day one; every 2015 requirement is retained. Read the 9001:2026 guide →
ISO 14001 (EMS)	2026 — published 15 April 2026	Transition live. Three-year window: all ISO 14001:2015 certificates must transition by 30 April 2029, and certification bodies stop issuing new 2015-edition certifications from 31 October 2027 — the earlier date is the one that bites, because after it the 2015 edition is closed to newcomers. Changes moderate; the 2024 climate amendment is absorbed, biodiversity and resource availability join the context analysis, and a change-planning clause arrives.	Plan your transition at an upcoming surveillance or recertification audit — early slots beat the bottleneck. Read the 14001:2026 transition guide →
ISO 45001 (OH&S)	2018	Revision underway; publication expected 2027. Signalled themes: psychosocial risk and mental health, remote and hybrid work, emergency preparedness. Draft content is subject to change until publication.	Nothing to transition yet. Certify to 2018 confidently; strengthen psychosocial risk management now. Follow the 45001 revision watch →
ISO/IEC 27001 (ISMS)	2022	Current. The transition from the 2013 edition closed on 31 October 2025 — untransitioned certificates are no longer valid.	Holding a 2013 certificate? It has lapsed; recovery is a new certification cycle — start it before a client’s vendor check finds the gap. Read the recovery guide →
ISO/IEC 27017 (Cloud security controls)	2015 — second edition under publication	Revised. The second edition has cleared its ballot and is in final production: the ISO catalogue records it as edition 2 at stage 60.00 — International Standard under publication, and the catalogue has assigned it the designation ISO/IEC 27017:2026. The originally advertised July 2026 publication date has now passed without publication: re-verified on 1 August 2026, edition 2 remains at stage 60.00, and ISO/IEC 27017:2015 remains at stage 90.92 — published, to be revised — not stage 95.99 withdrawn. In plain terms, ISO/IEC 27017:2015 is still the current published edition today. The new edition is rebased on ISO/IEC 27002:2022 (93 controls in four themes) instead of ISO/IEC 27002:2013 (114 controls in 14 clauses), so the cloud guidance is renumbered against the Annex A your ISMS already uses.	27017 is a code of practice, assessed as an extension to an ISO/IEC 27001 scope rather than certified on its own — and no certification body can assess against the second edition until its scope is extended. Anyone offering you an “ISO/IEC 27017:2026 certificate” today is ahead of the accreditation system. Read the second-edition briefing →
ISO/IEC 27018 (Cloud PII protection)	2025 — published August 2025	Current, and recently revised. The third edition, ISO/IEC 27018:2025, is published (stage 60.60) and withdraws ISO/IEC 27018:2019. Like the 27017 second edition it is aligned to ISO/IEC 27002:2022. Any page still presenting “27018:2019” as the current edition is more than a year out of date.	Public-cloud providers acting as PII processors: rebaseline your controls against the 2025 edition before your next surveillance audit — Philippine BPOs handling EU or client PII are asked for this in vendor due diligence. Read the 27018 briefing →
ISO/IEC 27701 (PIMS)	2025 — published 14 October 2025	Transition live, and structural: 27701 is now a standalone standard — no ISO 27001 prerequisite. 2019 certificates must transition by October 2028; certification bodies assess against the new edition under the ISO/IEC 27706:2025 scheme.	2019-certified: plan the transition audit. Not certified: privacy certification is now available on its own for the first time. Read the 27701:2025 guide →
ISO 22301 (BCMS)	2019	Current; no revision published. Status re-checked at every review.	Business as usual.
ISO 22000 (FSMS)	2018	Current; no revision published. Status re-checked at every review.	Business as usual.
ISO 13485 (Medical devices QMS)	2016	Confirmed — the 2025 systematic review kept the 2016 edition with no revision planned. A full revision is unlikely before the early 2030s.	Invest in your MDQMS with confidence; no transition is coming.
ISO/IEC 17025 (Laboratories)	2017	Current — confirmed at its 2023 review. No new edition exists, despite claims of a “2025 edition” circulating from low-authority websites.	Ignore the rumour — here’s the fact-check, including how to verify any such claim yourself.
ISO 37001 (Anti-bribery)	2025 — published	Transition live; a standard three-year window applies to existing certificates.	Plan the transition review at your next audit. Read the 37001:2025 guide →
ISO/IEC 42001 (AI management)	2023	Current — first edition; no revision published.	The standard is young; adoption, not transition, is the 2026 conversation. Start here →
ISO 50001 (Energy)	2018	Current; no revision published. Status re-checked at every review.	Business as usual.

Non-ISO frameworks (SOC 2, PCI DSS, HIPAA, GDPR and Philippine DPA developments) are tracked within Sterling Trust 360™ rather than on this page.

The accreditation world changed too

On 1 January 2026, ILAC and IAF — the two global accreditation cooperations — merged into the Global Accreditation Cooperation (Global ACI). Existing accreditations remain valid, and the familiar IAF and ILAC marks are being phased out by 1 January 2029. Practical effect for Philippine certificate holders: nothing lapses, verification registers continue, and transition rules for new standard editions (like ISO 14001:2026) are now issued under Global ACI’s name. The full explainer is here →

What’s included

Transition gap assessment of your existing implementation against the published new text — cataloguing what already complies (usually most of it) and precisely what changes. This document is the difference between paying for the changes and paying for a rebuild.

Targeted updates to documentation and processes — only where the new requirements demand them, in your existing formats, preserving everything that already works.

Transition training focused on the changes — not a re-teach of a standard your people already live.

Internal audit against the new requirements, producing the evidence your transition audit will examine.

Certification-body booking strategy: transition-audit slots compress badly in a window’s final year; we time yours ahead of the bottleneck, at a surveillance or recertification visit that suits your cycle.

Recertification project management where the three-year cycle and the transition coincide — one project, one audit, no duplicated effort.

Scope-extension projects, including multi-site extensions under IAF MD 1 — often the honest answer for a new site or subsidiary is joining your existing certificate, not buying a new one, and we’ll tell you when it is.

Your first 30 days

Week 1 — your current documentation and last audit reports reviewed; transition gap assessment against the new text conducted. Week 2 — the gap report: what stands, what changes, what it costs — with the resource-optimisation case in writing. Weeks 3–4 — update plan agreed, certification-body slot strategy set (and where windows are tightening, the booking made), first documentation updates begun. By day 30 you know exactly how small your transition really is — which is the knowledge everyone selling rebuilds hopes you never get.

Entry: a current certificate (or one within its transition window) and your existing system documentation — whoever built it; transitioning systems Sterling didn’t implement is routine. Exit definition: the new-version or extended-scope certificate issued with zero coverage gap and your existing implementation preserved wherever it already complied — tender eligibility never blinks, and you never pay to rebuild what you own.

What it costs: a fraction of the original certification project — the work is the update, not the system. Fixed scope as always, and the week-two gap report tells you the number before you commit to anything.

Frequently asked questions

Do we have to rebuild our management system for ISO 9001:2026? No — and be wary of anyone who quotes as if you do. A revision changes specific requirements; a well-run transition assesses your existing system against the new text, preserves everything that already complies, and updates only what changed. Resource optimisation is the method: build on what you have, address what’s new, completely.

When should we start our transition? Work backwards from your preferred transition audit: certification-body calendars compress badly in a window’s final year, so target a surveillance or recertification slot early and start the gap work one to three months ahead, depending on system health. Starting early is cheaper in every currency — fees, disruption and risk.

Will a new edition invalidate my current certificate? Not on publication day. A transition window — typically three years — begins, during which both editions remain valid and your existing certificate stays in force. It only lapses if the window closes without your transition audit, which is precisely the outcome early planning exists to prevent.

Can our new site or subsidiary be added to our existing certificate instead of getting its own? Often yes — IAF MD 1 multi-site rules allow scope extension with sampling where processes are centrally controlled, usually faster and cheaper than a standalone certificate. Whether extension or standalone fits depends on how centralised your system genuinely is; honest scoping decides, and we put the recommendation in writing either way.

Can we combine the 2026 transition with our recertification audit? Yes — and when your three-year cycle lands inside the transition window, it’s usually the efficient move: one prepared audit covers both, one project absorbs both efforts. The trade-off is a fuller audit on one date, which preparation handles; we model both routes in the gap report so the choice is arithmetic, not guesswork.

We’re implementing ISO 9001:2015 right now — should we switch to 2026 mid-project? Yes. ISO 9001:2026 is published and certification bodies are being accredited to audit against it, so building to the outgoing edition buys you a certificate with a built-in expiry project. We convert in-flight implementations by re-pointing the remaining work at the new requirements; what’s already built rarely goes to waste, because the fundamentals carry over.

How often is the tracker above reviewed? Monthly, against ISO’s own publications, Global ACI announcements and major certification-body bulletins — and the review date is updated every time, whether or not anything changed. A reference table without a visible date is asking for trust it hasn’t earned.

How can I verify a claimed “new edition” of a standard myself? Go to ISO’s official catalogue (iso.org), search the standard number, and read the “Status” line — it names the current edition and shows any document under development. If a website claims a new edition that ISO’s own listing doesn’t show, the website is wrong. That sixty-second check would have debunked the fictitious “ISO 17025:2025” now circulating.

How will I know when a change affects my organisation? Check the tracker — or have it check on you: leave your details with a note of the standards you hold, and we’ll alert you when a status that affects you changes, with what it means and when to act. No newsletter noise; only the changes that touch your certificates.

About Sterling OS™: Sterling OS™ is Sterling’s delivery operating system — five defined services, taken alone or combined, covering guided and fully outsourced implementation, post-certification support, digitisation and standard transitions, with fixed scope, named deliverables and accredited certification bodies only. Explore the system →

Last updated: July 2026 · Sterling International Consulting — Metro Manila · Cebu · Davao.