A new ISO/IEC 17025 for laboratories

Significance of the topic

The 2017 revision of ISO/IEC 17025 represents a major update for testing and calibration laboratories and for organisations that accredit them. It modernises the standard's structure, aligns it with the newer ISO/IEC 17000-series format, and embeds a stronger risk-based and evidence-driven approach to laboratory competence and results reporting. These changes affect how laboratories document conformity, manage uncertainty and traceability, handle sampling as a discrete service, and interact with customers and accreditation bodies. Implementing the revised standard is essential for maintaining accredited status, ensuring international recognition, and improving technical and managerial robustness in laboratory practice.

Objectives and overview of the revision

The revision aims to:

• Update the standard's structure to match contemporary ISO formatting and facilitate harmonised accreditation practices.
• Clarify and expand requirements for sampling, decision-making about conformity, metrological traceability and management of risks and opportunities.
• Provide laboratories with two management-system implementation options to accommodate different organisational contexts, including those already certified to ISO 9001.

Overall, the standard retains the core technical expectations for competence while introducing procedural and managerial updates to reflect current practice and technological advances.

Methodology and key changes introduced

The revised standard introduces several substantive changes in scope and emphasis:

• Structure: A reorganised clause layout consistent with the ISO/IEC 17000 family to improve clarity and alignment with accreditation processes.
• Sampling: Recognised explicitly as a standalone laboratory activity that can be accredited separately; reporting and accounting for sampling-related uncertainty are required.
• Decision rule: Laboratories must document and agree with customers how measurement uncertainty is used when declaring conformity to specifications; statistical basis must be recorded.
• Risk-based approach: Laboratories must identify, evaluate and act on risks and opportunities that could affect their ability to deliver valid results; preventive action as a separate term is removed and replaced by risk-based planning.
• Management system options: Two paths are available — Option A (compliance with ISO/IEC 17025 clauses) and Option B (use of an ISO 9001 management system supplemented by clauses 4–7 of ISO/IEC 17025).
• Impartiality and confidentiality: Greater emphasis on objectivity and on protecting information, with expanded treatment of liability issues.
• Metrological traceability: More detailed requirements and cross-reference to ILAC policy; Annex A expands guidance.
• Reporting and interpretative statements: More detailed requirements for opinions, interpretations and the tools used to check result validity; proficiency testing participation requirements are strengthened.
• Data and information management: Increased requirements addressing modern technologies and controls over laboratory data.
• Management documentation and roles: A conventional quality manual is no longer mandatory; the term laboratory management replaces top management and specific manager titles need not be used, but responsibilities must be assigned to competent personnel.
• External provision of services: Additional controls for outsourced calibration, testing, and sampling services are required.

Main results and discussion

The revision clarifies responsibilities and elevates previously informal practices into explicit requirements. Notable practical implications include:

• Accreditable sampling: Organisations that perform sampling (even when the subsequent test/calibration is performed elsewhere) can now seek accreditation specifically for sampling operations, encouraging better control across the entire measurement chain.
• Decision-rule transparency: Requiring documented decision rules reduces ambiguity in conformity statements and supports consistent interpretation of measurement uncertainty in pass/fail or compliance contexts.
• Risk orientation: By embedding risk and opportunity management throughout the standard, laboratories are prompted to adopt proactive quality strategies rather than reactive corrective measures.
• Data governance: Enhanced controls reflect the increasing reliance on electronic data handling and the need to ensure integrity, confidentiality and traceability of digital records.
• Harmonisation pressures: Accreditation bodies, supported by regional and international organisations, must align assessment and peer-review practices to ensure consistent application of the new provisions across jurisdictions.

Benefits and practical applications

Adopting ISO/IEC 17025:2017 provides several practical advantages:

• Improved international recognition of test and calibration results through clearer traceability and harmonised accreditation practices.
• Enhanced customer confidence via documented decision rules and better transparency on uncertainty and sampling.
• Greater operational resilience through systematic risk management and clearer assignment of responsibilities.
• Streamlined conformity with ISO 9001 where applicable, reducing duplication of management-system requirements.
• Better handling of digital data, third-party services and proficiency testing, leading to more reliable and reproducible results.

Recommendations for a smooth transition

To implement the new standard effectively, laboratories should:

1. Obtain and study the revised standard to understand its structure and intent.
2. Create a cross-reference (gap analysis) between existing procedures and the new clauses to identify necessary changes.
3. Review procedures from a risk-based perspective and update them where risks and opportunities are not adequately addressed.
4. Document decision rules for conformity assessment and ensure these are communicated to customers.
5. Engage with the national accreditation body early to clarify expectations and timelines.
6. Plan internal audits and management reviews focused on the revised requirements, including sampling, data management and traceability.

Future trends and possibilities for use

Several trends and opportunities arise from the revision:

• Growth in accredited sampling services as supply chains demand verified upstream measurement activities.
• Tighter integration between laboratory accreditation and digital quality infrastructures, including secure data management and electronic reporting.
• Wider adoption of risk-based quality cultures in laboratories, with automated tools to identify and track risks and opportunities.
• Greater emphasis on global harmonisation of accreditation practice, driven by ILAC, IAF and regional bodies, reducing variability between assessors and economies.
• Development of sector-specific guidance and best-practice “cookbooks” to help laboratories interpret clauses such as decision rules, uncertainty in conformity assessment and metrological traceability.

Conclusion

ISO/IEC 17025:2017 updates the laboratory accreditation landscape by modernising structure, emphasising risk-based management, recognising sampling as an accreditable activity, and strengthening requirements for traceability, data control and reporting. Laboratories that proactively align procedures, document decision rules, and engage with accreditation bodies will secure continuity of accreditation and benefit from more robust quality and technical practices.

References

1. ISO/IEC Guide 98-4:2012, Uncertainty of measurement — Part 4: Role of measurement uncertainty in conformity assessment (JCGM 106).
2. A. Williams and B. Magnusson (Eds), Eurachem/CITAC guide: Use of uncertainty information in compliance assessment, 2nd Edition, 2021.
3. ILAC P10:07/2020, ILAC Policy on Metrological Traceability of Measurement Results.