Guides for the standards you have to hold
Written by people who audit these systems, and updated when a standard moves rather than when a content calendar says so.
This is where ITF publishes what it knows about the standards, licences and audits Saudi operators actually face. Every load-bearing claim is checked against a primary source, and what cannot be checked is left out.
- Lead item
- ISO 9001:2026, published 16 September 2026
- Transition horizon
- September 2029, expected
- Editorial rule
- A source and a date, or it does not go in
Last updated 20 September 2026
Where the standards actually stand
Checked against the standards bodies rather than against other people's blog posts. Most supplier sites in this market are still telling you ISO 9001 is a 2015 document.
| Standard | Where it stands | Edition |
|---|---|---|
| ISO 9001 | Published 16 September 2026, with a three-year transition expected to run to September 2029. ISO describes the revision as primarily editorial with shifts in emphasis, so treat a proposal for a full re-implementation with suspicion. The transition mechanics, meaning the last dates for initial audits to the 2015 edition and for transition audits, come from the IAF and your own accreditation body and are not all published. | 2026 |
| ISO 14001 | Published 15 April 2026. Environmental systems certified to the previous edition move across the same way, and if you hold both 9001 and 14001 there is a sensible case for doing them as one piece of work rather than two. | 2026 |
| ISO 45001 | Still the 2018 edition, with its 2024 climate amendment. Worth stating because some contractor classification checklists in circulation still name OHSAS 18001, which was withdrawn in 2021. A checklist that says OHSAS is a checklist nobody has re-read. | 2018 |
| ISO 22000 | Still the 2018 edition, with its 2024 climate amendment, and still the base document under most food safety schemes. | 2018 |
| FSSC 22000 | Version 7 published in May 2026, referencing the new ISO 22002 prerequisite series. Audits against Version 6 continue until 30 April 2027, and Version 7 upgrade audits run from 1 May 2027 to 30 April 2028. | V7 |
- Clause 6.1 split into 6.1.2 risks and 6.1.3 opportunities
- Quality culture and ethical behaviour made explicit in 5.1.1 and 7.3
- A new 5.2.1(e) tying the quality policy to context and strategic direction
- Annex A rewritten as applied guidance rather than a clause-by-clause appendix
- Climate change carried in from the 2024 Harmonized Structure amendment
The guides
One question per guide, each dated with when it was last checked.
The ISO 9001:2026 transition
What changed in the sixth edition, what your existing certificate is worth, and how to work out when your transition audit lands.
Read more9 minute readISO 9001 certification in Saudi Arabia
The seven stages from gap analysis to certificate, who sets the pace, and why accreditation decides whether the certificate is worth anything.
Read more9 minute readSFDA food facility requirements
The approvals a food manufacturer or warehouse needs before SFDA will issue an operating licence, in the order they have to happen.
Read more10 minute readWriting a HACCP plan: the 12 steps
The Codex application sequence, from assembling the team to the record set, written for someone who has been handed a downloaded template and told to make it fit.
Read more8 minute readFSSC 22000 or ISO 22000
One is a management system standard and the other is a certification scheme built on top of it, and only one of them clears a GFSI clause in a supply contract.
Read moreISO 9001 vs ISO 13485
Both concern quality management, but medical device work adds requirements that an ISO 9001 certificate cannot answer on its own.
Read more9 minute readThe records auditors ask for first
What ISO 9001, 14001, 45001 and 22000 actually mandate, which dozen items get requested before the site walk, and why most document control findings are about documents you already have.
Read more10 minute readBuilding an internal audit programme
A programme is not a list of audit dates, and the difference is what separates an internal audit that finds things from one that produces a signed form.
Read more10 minute readStandards and rules: what changed, and when
The changes to the standards and Saudi rules that ITF's buyers work to, newest first, with the dates a certified site plans around and what each one does to a certificate or contract you already hold.
Read more20 minute readGlossary of audit, standards and facility terms
The acronyms and terms that turn up across ITF's seven divisions, from AMC to unannounced audit, each answered in forty words or fewer.
Read more11 minute readWhat is in a Saudi FM contract
The eight parts a facility management agreement has to carry, and the three clauses that decide whether the contract works or gets argued about every month.
Read more8 minute readAramco vendor prequalification
What Aramco publishes about becoming a supplier, what it does not publish, and how to tell the difference before you spend money on the wrong thing.
Read more9 minute readColour coding for HACCP zones
Why most colour schemes quietly answer two different questions at once, how to pick one axis and hold it, and what an auditor is actually testing when they look at the board.
Read moreHow a guide gets written here
- 01
One question per page
A guide answers one thing: what it costs to get ready, how long it takes, what changed in the new edition, what an auditor will open first. A page answering six questions ranks for none of them and helps nobody who found it.
- 02
The source, or nothing
Every load-bearing claim is checked against the standard, the regulator or the scheme owner. Where the only available sources are consultancy pages quoting each other, the claim is left out rather than laundered into a fact.
- 03
Dated, and corrected in public
Regulations move and schemes get revised. A guide carries the date it was last checked, and when something is wrong it gets changed with the date updated, not quietly deleted.
- 04
Written by whoever does the work
Not by a content team working from the same search results you have already read. The trade-off is fewer guides, more slowly, and that is the trade we want.
Claims in circulation that do not check out
Each card below is repeated confidently across this market and does not match its primary source. The personal data law has its own guide, set out against SDAIA's regulations.
A day-level transition deadline
The ISO 9001 transition is expected to close in September 2029. The detailed mechanics are set by the IAF and by your accreditation body, and they are not all published. Anyone quoting you an exact date today is guessing, and a plan built on a guessed date fails late.
Delay-penalty caps on government contracts
A new Government Tenders and Procurement Law was published on 4 September 2026 and takes effect on 2 January 2027, with implementing regulations still pending. The penalty caps quoted all over this market come from the outgoing law, so we cite no figures.
Questions about the standards
When does our ISO 9001:2015 certificate stop being valid?
When it expires or when the transition ends, whichever comes first. The transition is expected to run to September 2029. The exact last dates for initial audits to the 2015 edition and for transition audits come from the IAF resolution and from your own accreditation body, and they are not all published yet. Ask your certification body for its published transition instruction in writing and plan backwards from that document, not from a blog post.
Is ISO 9001:2026 a rewrite?
No. ISO describes it as primarily editorial with shifts in emphasis, and the real changes are listed above. If somebody is proposing a full re-implementation of your system, ask which of those five items requires it.
Should we transition now or wait?
It depends on when your next audit falls and on how much of your documentation actually references clause numbers. If your surveillance audit is close, doing the gap read now and the changes at the next revision cycle is usually cheaper than a separate project. If your system is heavily clause-referenced, start earlier, because the edit is wider than it looks.
Do you write these to rank in search?
Partly, and we would rather admit it than pretend. The condition is that the page has to be true and useful first. A page written only to rank reads exactly like one, and the buyers we want can tell.
Can we reuse a guide inside our own documentation?
Quote it with attribution and a link, and that is fine. Adapting one into your own procedure is consulting work, and you should ask for it as consulting work rather than as a copy and paste.
Who does this work
A guide is only worth reading if the people writing it do the job. These are the divisions the guides come from.
Ask about the standard that is actually on your desk
If you are holding a transition deadline, a licence renewal or a finding you cannot close, describing it in two lines gets you a straighter answer than any guide will.