Risks and Opportunities Are Now Separate in ISO 9001:2026

One of the clearest structural changes in ISO 9001:2026 is that risks and opportunities are handled separately. ISO's own page for the standard says the 2026 edition "separates risk and opportunities to ensure organizations proactively take actions to pursue beneficial results" (ISO, ISO 9001). This article explains what has been reported, what it means in plain words, and how you might adapt a risk register you already keep.

A note on sources. This is our own summary of reported changes, not ISO text. We have not checked clause wording against the standard itself, so check your own licensed copy.

What has been reported

Global ACI's transition requirements (Global ACI-TECH-3-TR 2029-09-30 (M), version 1.0, issued September 4, 2026) say clause 6.1 has been reorganized and now includes three parts: 6.1.1 "Determining risks and opportunities", 6.1.2 "Actions to address risk" and 6.1.3 "Actions to address opportunities" (Global ACI, section 3.1).

ANSI's release on publication describes "a clearer separation of risks and opportunities, encouraging organizations to seek out areas for improvement as actively as they guard against setbacks" (ANSI, September 16, 2026). UKAS lists risks and opportunities among the most significant changes (UKAS technical bulletin).

Global ACI describes this as a reorganization of clause 6.1. Check your own copy of the standard for exactly what moved where.

Two different questions

In plain words, the split means asking two different questions:

• Risks: what could go wrong, and what proportionate action will you take?

• Opportunities: what could go better (new markets, technology, process improvements), which are worth pursuing, and how will you know if the action worked?

This is our own plain-words framing, not ISO text. It can help to involve different people for each question: the person who knows where a process fails is not always the person who knows where the business wants to grow.

A simple way to adapt a combined register

If your risk register has one "risks and opportunities" column, a simple fix is to give opportunities their own section, with their own actions and follow-up. A simple layout:

Risks section

• What could go wrong

• How serious it is, using a rating method that fits your size

• The action you have chosen, its owner and due date

• How you will check the action worked

Opportunities section

• What could go better

• Whether it is worth pursuing, and why (or why not)

• The action you have chosen, its owner and due date

• How you will evaluate whether the action worked

Ideagen reports that Annex A clarifies that the separation does not imply a formal or documented approach. Whether a single combined register is enough, as long as risks and opportunities are both visible, is our reading, so check your own copy of the standard (including Annex A) and ask your certification body if you are unsure.

Where else the split shows up

Ideagen's summary says the same separation is applied in subclause 9.1.3 (analysis and evaluation) and subclause 9.3.2 (management review inputs). Our checklist treats it the same way (check your copy of the standard):

• Evaluating effectiveness (clause 9.1.3). Do you evaluate the effectiveness of actions on risks and, separately, on opportunities? (checklist question 95)

• Management review (clause 9.3.2). Do the minutes record the effectiveness of actions on risks and, separately, on opportunities? (checklist question 104). See our article on management review inputs in ISO 9001:2026.

One published summary, from Ideagen (a software and compliance company, September 24, 2026), says subclause 5.1.1 now references opportunity-based thinking alongside the process approach and risk-based thinking (checklist question 16). Global ACI's list of changes to 5.1.1 does not mention this, so treat it as unconfirmed and check your copy.

What you can show

Whether your system covers this is judged by your certification body, not by us. What you can do is keep evidence that you thought about both sides:

• A register or log with a separate opportunities section

• Dated reviews of the register

• Action records with owners and follow-up

• Management review minutes that mention both

A short check

1. Open your current register. Is there anywhere an opportunity is recorded?

2. If yes, does it have an owner, an action and a way to check results?

3. If no, which two or three opportunities does your team already talk about that could go in?

4. Does your management review template have a line for each?

Check where you stand

Our free Gap Analysis Checklist for ISO 9001:2026 has separate questions for each part (questions 29 to 32, and 95). It has 111 plain-English questions covering clauses 4 to 10, with 25 new or changed 2026 requirements flagged, in Excel and Word. The download page has a short sign-up form; occasional emails about Clearline Systems kits are a separate, optional tick box.

The checklist paraphrases requirements in our own words. It is not ISO text, you will still need your own copy of the standard, and using it does not promise a pass or certification. Only a certification body can certify your organization.

For the full list of reported changes, see ISO 9001:2026: what changed and what to update.

Clearline Systems is an independent publisher of documentation templates. Clearline Systems is not affiliated with or endorsed by ISO (the International Organization for Standardization), ANSI, Ideagen, Global ACI, UKAS, any national standards body, accreditation body or certification body. We don't reproduce ISO text; you'll need your own copy of the standard.

Sources

1. ISO, ISO 9001 page: https://www.iso.org/standard/9001

2. Global ACI-TECH-3-TR 2029-09-30 (M), Transition Requirements for ISO 9001:2026, version 1.0, issued September 4, 2026: https://sys.global-aci.org/uploads/documents/TECH-3-TR_2029-09-30_(M)_ISO_9001_2026_Transition_v1_03.pdf

3. ANSI, "First Full Revision of ISO 9001 in a Decade Now Available from ANSI," September 16, 2026: https://www.prnewswire.com/news-releases/first-full-revision-of-iso-9001-in-a-decade-now-available-from-ansi-302880800.html

4. UKAS, Technical Bulletin, QMS ISO 9001:2026 transition, September 16, 2026: https://www.ukas.com/resources/technical-bulletins/qms-iso-9001-2026-transition/

5. Ideagen, "ISO 9001:2026 is here: What actually changed, and what it means for your QMS," September 24, 2026 (a software company's summary, not an authority): https://www.ideagen.com/thought-leadership/blog/iso-9001-2026-is-here

All sources checked October 1, 2026.