The short answer
Three changes, one replacement, and a lot of structure that stays the same.
The public foreword states three main changes. The public contents carries almost the same clause map as the 2012 edition. The one substantive replacement is at 8.8. The FDIS wording is not held, so this page separates the recorded change from the requirement that applies today.
Terminology
Updated to ISO/IEC 17000. The terms and some of the wording that uses them are expected to change. The revised text is not held.
8.8 replaced
Preventive actions are replaced by actions to address risks and opportunities. The new requirement text is not held. The 2012 preventive action requirement still applies today.
References
Bibliographic references updated and corrected. This is editorial, not a new obligation on the body.
Life cycle as recorded by ISO
10.99 New project approved
Recorded on the ISO page
40.99 Full report circulated: DIS approved for registration as FDIS
Recorded on the ISO page
50.00 Final text received or FDIS registered for formal approval
Recorded on the ISO page
50.20 Proof sent to secretariat or FDIS ballot initiated: 8 weeks
Recorded on the ISO page and the public sample; current stage
50.60 Close of voting. Proof returned by secretariat
Not recorded; the public sample states that voting terminates on 2026-10-27
60.00 International Standard under publication
Not recorded
60.60 International Standard published
Not recorded; 2027-02-15 is a planning estimate
The structure in the public contents
The FDIS contents lists clauses 4 to 8 with the same broad numbering as the 2012 edition. It adds titled subclauses at 6.1 (general, management of competence, contract with personnel), 6.2 (internal and external resources), 8.1 (general, Option A, Option B) and 8.5 (general, review inputs, review outputs). Annex A and Annex B remain informative. Annex ZA is new and relates the European Standard to Regulation (EC) No 765/2008.
| FDIS | 2012 title | What the public record shows |
|---|---|---|
8.8 | Preventive actions (Option A) | Replaced by actions to address risks and opportunities |
Annex B | Application of this International Standard for processes and services | Application of this document for processes and services |
Annex ZA | Not present | New informative annex for the European Standard and Regulation (EC) No 765/2008 |
What is not held
The FDIS requirement text, the revised definitions, the new 8.8 wording and the Annex ZA content are not held. This site does not reproduce them, paraphrase them, or present them as a requirement. When the published text is available, the record is rebuilt and the watch reports the diff.
What a body can do now
- Keep the 2012 preventive action process live and compliant.
- Build a risk and opportunity register beside it, with a method, owners, actions and an effectiveness review.
- Put the replacement on the internal audit programme and the management review agenda.
- Ask the accreditation body in writing which edition will apply at the next assessment.
- Do not claim a certificate against the new edition before it is published and the accreditation covers it.
Not legal advice; does not certify. The planning date 15 February 2027 is an estimate, not an ISO date.