ISO 9001 Gap Analysis Template for ISO 9001:2026 (With Examples)
A gap analysis tells you how far your current quality management system is from what ISO 9001 requires, and what to do about it. With ISO 9001:2026 published in September 2026, there are now two common reasons to run one: a first implementation, or a transition from the previous edition. This guide gives you an ISO 9001 gap analysis template you can copy into a spreadsheet, worked example rows, and the clauses to focus on for each case.
What a gap analysis is, and is not
A gap analysis compares what you do today against each requirement of the standard and records where you fall short. It is a planning tool, usually done once at the start of a project. An internal audit (clause 9.2) is a recurring, formal process with defined objectives, criteria, scope and impartial auditors. Many organizations use their first 2026 internal audit cycle to confirm the gaps are closed.
The ISO 9001 gap analysis template
Set up one row per requirement with these columns:
| Column | What to enter |
|---|---|
| Clause | The ISO 9001:2026 clause or lettered item, for example 6.1.2 or 4.2 c) |
| Requirement summary | Your own plain-language summary (the standard is copyrighted, so do not paste its text) |
| Change type | New in 2026, changed, or unchanged |
| Current practice and evidence | What you do today and where the proof is |
| Status | Meets, partly meets, does not meet, not applicable (with justification) |
| Gap and action | The specific gap and what will close it |
| Owner and due date | One person and a date |
| Verified | How and when closure was checked |
Example rows
| Clause | Change | Status | Gap and action |
|---|---|---|---|
| 4.1 | Changed | Partly meets | SWOT exists but no climate change determination. Add a dated decision with reasoning; review at management review. |
| 4.2 c) | New | Does not meet | Interested parties register has no decision on which requirements the QMS addresses. Add column and rationale. |
| 5.1.1 i), 7.3 e) | New | Does not meet | No evidence of leadership promoting quality culture and ethical behaviour, or of staff awareness. Plan leadership actions and an acknowledged awareness campaign. |
| 6.1.2, 6.1.3 | Changed | Partly meets | Single combined register; risks not evaluated against criteria; no effectiveness checks. Split risks and opportunities; add evaluation and effectiveness review. |
| 6.3 | Changed | Partly meets | Change requests do not cover communication, effectiveness monitoring or review of results. Extend the form. |
| 9.3.2 | Changed | Partly meets | Review agenda lacks interested party changes and separate risk and opportunity effectiveness. Update the agenda template. |
| 8.3 | Unchanged | Not applicable | Build-to-print only; justification recorded in scope. |
How to run the gap analysis
Step 1: Build the team
The quality manager usually leads, but process owners know how work really happens. Involve them early; they will own most of the actions.
Step 2: Gather evidence clause by clause
For each row, review documents and records, interview people and observe work. A document control system makes it quick to find the current procedure and the records behind it.
Step 3: Be specific about each gap
Write "No evaluation of risks against acceptance criteria and no effectiveness review of completed risk actions (6.1.2)" rather than "risk management weak". Specific gaps lead to specific actions.
Step 4: Prioritise
Rank gaps by audit risk and effort. Missing required elements and new 2026 requirements usually come first, followed by partial gaps and then improvements.
Step 5: Turn gaps into a tracked plan
Give every gap an owner, a due date and a verification step. Tracking actions in CAPA management software or a project board keeps them from stalling. Treat larger changes to the QMS as planned changes under clause 6.3.
Step 6: Verify with an internal audit
Once actions are complete, audit the changed areas against ISO 9001:2026 to confirm they work in practice, then present the results at management review.
Where to focus
If you are transitioning from the previous edition
Most of your system carries over. Concentrate on the delta: the climate change determination (4.1), which interested party requirements the QMS addresses (4.2 c), quality culture and ethical behaviour (5.1.1 i and 7.3 e), separate handling of risks and opportunities (6.1.2 and 6.1.3, carried into 9.1.3 and 9.3.2), the expanded planning of changes (6.3), knowledge that is retained, applied and shared (7.1.6), and continual improvement now consolidated in 10.1. Our ISO 9001:2026 clause by clause guide lists each change.
If you are implementing for the first time
Assess the whole standard. First implementations most often fall short on context and interested parties (clause 4), risks and opportunities (6.1), control of documented information (7.5), the internal audit programme (9.2) and corrective actions that reach the real root cause (10.2).
Beyond the spreadsheet
A spreadsheet works for the first pass. As actions multiply, links between gaps, documents, risks and audit findings get lost. ISO management software such as SmartISO supports ISO 9001:2015 and ISO 9001:2026 side by side, so you can record which edition you are certified to and which you are moving to, run a 2026 readiness review, and track every resulting action to closure.
Frequently asked questions
How long does an ISO 9001 gap analysis take?
For a small or mid-sized organization, a few days to two weeks. A transition gap analysis focused on the 2026 changes is usually faster than a full first-time assessment.
Can we do it ourselves?
Yes. A capable internal team with a structured template can do it well. An external reviewer can add an independent view, especially on new requirements such as quality culture.
Is my ISO 9001:2015 certificate still valid?
Yes, during the transition period set by IAF and the certification bodies. Confirm the exact deadline with your certification body and schedule the gap analysis well ahead of it.
What happens after the gap analysis?
Implement the actions, train the people affected, run an internal audit and a management review against ISO 9001:2026, then book the transition or certification audit with your certification body.