ISO/IEC 17025:2017 sets out the requirements for the competence, impartiality, and consistent operation of testing and calibration laboratories. ISO lists it as the current edition, and it is the benchmark customers, regulators, and accreditation bodies use to judge whether a laboratory’s results can be trusted.
For a laboratory pursuing accreditation for the first time, the standard can feel different from anything else it has done. A well-organized quality manual and a tidy document system are necessary, but they are not enough. This article walks through the areas where first-time applicants most often run into trouble and how to prepare for each one.
Why ISO/IEC 17025 Is Different From Other ISO Standards
Most ISO management system standards ask whether an organization has a system that works as intended. ISO/IEC 17025 asks that and a second question: can the laboratory prove it is technically competent to produce valid results for the specific work it wants to be accredited for?
That second question is why laboratories sometimes underestimate the effort. Accreditation is based on technical competence, not only on management system conformance. Assessors look at the methods you use, the equipment and standards you rely on, the people who perform the work, and the records that connect a final report back to raw data. A laboratory with excellent paperwork but weak technical evidence will struggle.
Where First-Time Applicants Struggle
The clause references below are to ISO/IEC 17025:2017. Confirm each against your own copy of the standard.
Scope that is too broad or poorly defined
Many laboratories start by trying to include every test or calibration they perform. A scope that is broader than your demonstrated competence creates more evidence to gather and more risk of findings. Define the scope in terms of specific methods, ranges, measurement capabilities, and sites, then build the evidence for each item. You can expand the scope later.
Measurement uncertainty (clause 7.6)
Evaluating measurement uncertainty is one of the most technically demanding requirements for new applicants. Calibration laboratories need a documented evaluation for each calibration in the scope. Testing laboratories also need to identify the contributions to uncertainty and evaluate it, even where the method makes the evaluation simpler. Common problems include uncertainty budgets that omit significant contributors, copied budgets that do not match the laboratory’s real equipment and environment, and staff who cannot explain how a budget was built.
Metrological traceability (clause 6.5)
The standard expects measurement results to be traceable to appropriate references through a documented chain of calibrations. Applicants often discover that reference standards were calibrated by a provider that cannot show competence for the specific range needed, or that calibration intervals and intermediate checks were never defined. Review your calibration providers and the calibration scope of each critical instrument before assessment, not during it.
Method selection, verification, and validation (clause 7.2)
Laboratories need evidence that methods are fit for purpose. Standard methods still have to be verified in your laboratory to show you can perform them correctly. Non-standard methods, modified standard methods, and in-house methods need full validation. Weak or missing validation records are a frequent source of findings, especially for methods that evolved informally over many years.
Ensuring the validity of results (clause 7.7)
The laboratory must monitor the validity of its results on an ongoing basis. This includes internal quality control and, where available, participation in proficiency testing or interlaboratory comparisons. First-time applicants often have no documented plan, no participation history, or no evidence that unsatisfactory results were investigated. Build a plan that covers the scope and start collecting data well before the assessment.
Personnel competence and authorization (clause 6.2)
Each person performing activities that affect results needs defined competence requirements, training, supervision as needed, authorization, and monitoring. Training records alone do not demonstrate competence. Assessors look for evidence that individuals can perform each method correctly and that authorizations match what people actually do.
Impartiality (clause 4.1)
Impartiality requires more than a policy statement. The laboratory has to identify risks to impartiality on an ongoing basis, including those that arise from relationships, ownership, and commercial pressure, and show how those risks are eliminated or minimized. Many first-time applicants have a statement but no documented risk assessment.
Technical records, decision rules, and reporting (clauses 7.1.3, 7.5, and 7.8)
An assessor should be able to follow a report back to the raw data, the method, the equipment, the environmental conditions, and the person who did the work. Gaps in technical records are a common cause of findings. When customers request a statement of conformity to a specification, the laboratory also needs a documented decision rule that accounts for uncertainty and has been agreed with the customer. Reports must contain the information the standard requires.
Internal audits and management review (clauses 8.8 and 8.9)
Some applicants run internal audits that only check document control and miss technical activities. Internal audits should cover the laboratory’s technical work, including witnessing tests and calibrations, and management review needs real inputs and recorded outputs. If these have not happened before the assessment, assessors will notice.
How to Prepare
- Perform a gap assessment against the full standard, including the technical requirements, not just the management system clauses.
- Define a focused scope and build evidence for each method, range, and capability.
- Complete and document uncertainty evaluations and traceability for each critical measurement.
- Verify or validate every method in the scope and keep the records.
- Establish a plan for monitoring the validity of results, including proficiency testing where appropriate.
- Document competence and authorization for every person performing accredited work.
- Assess impartiality risks and record how they are managed.
- Run an internal audit that includes technical witnessing, then hold a management review.
- Consider a mock assessment to test readiness before the accreditation body arrives.
Confirm the requirements and process of your chosen accreditation body early, since each one has its own application steps and expectations for your scope.
How Cavendish Scott Can Help
Cavendish Scott has more than 40 years of experience helping laboratories and other organizations in the U.S., Canada, and beyond implement and maintain ISO management systems. We are certified by Exemplar Global and accredited by the IRCA (CQI), and we keep the process streamlined and practical. Here is how we can help:
- Our ISO/IEC 17025 consulting services, delivered by experienced ISO/IEC 17025 accreditation consultants, include gap assessments, support building uncertainty and validation records, and preparation for your laboratory’s assessment.
- Our ISO/IEC 17025 auditing services provide independent internal audits and mock assessments that test both your management system and your technical competence.
- Our ISO training programs help your people build the audit skills needed to keep your system effective after accreditation.
Contact Cavendish Scott to talk through your laboratory’s path to ISO/IEC 17025 accreditation.