ISO/IEC 17025:2017
Use the licensed 2017 edition as the laboratory requirement baseline.
ISO/IEC 17025:2017 GUIDE
ISO/IEC 17025:2017 — Testing & Calibration Laboratories
Demonstrate competent laboratory work, impartial technical judgement and consistently valid results through controlled methods, traceable measurements and effective assurance.
RPG INTELLIGENCE ASSESSMENTAssess your ISO/IEC 17025:2017 readiness
Start this assessment →Open the controlled clause-based assessment, record evidence and generate a management-ready readiness result.
RPG EXCELLENCE DIGITAL PUBLICATIONDecoding ISO/IEC 17025:2017 — Technical Laboratory Competence Guide
Buy the book →Practical clause-by-clause guidance, worked laboratory examples, impartiality risk controls, technical evidence, templates and posters.
52-page digital PDF · £29.99Overview
What this laboratory standard is designed to achieve
A practical framework for testing, calibration and associated sampling that connects capable people and resources with controlled technical work, reliable information and a management system that sustains confidence in results.
Confidence depends on the technical work behind the result: the people, method, equipment, environment, references, data and review. A management-system certificate alone is not evidence of laboratory competence.
EDITION, STATUS & CONTROL BASELINE
Use the correct published baseline
Use ISO/IEC 17025:2017 and check the current UKAS publications applicable to your activities. Keep the declared scope, locations and evidence of technical competence aligned.
Define the activity range
Identify methods, ranges, sites and testing/calibration/sampling actually performed.
Option A or Option B
Both routes support consistent fulfilment of the technical requirements in clauses 4–7.
Check applicable publications
Use the current UKAS laboratory publications index and the requirements relevant to the intended scope.
The executive assurance brief
Each theme connects the standard to a leadership decision, corroborating evidence and an ISO 19011-aligned auditor challenge. Use it to test implementation, not document presence alone.
01
Competent people and impartial judgement
- What to address
- Reliable laboratory work needs demonstrated competence and protection from undue pressure.
- Leadership decision
- Set method/range-specific authority, supervision, monitoring and technical escalation rights.
- Evidence to corroborate
- Witnessed assessments, authorisation records, impartiality safeguards and examples of decisions under pressure.
- Auditor challenge
- Can the assigned person demonstrate the task and recognise when the result may be invalid?
02
Equipment and measurement conditions
- What to address
- An instrument's calibration status does not alone establish fitness for a particular result.
- Leadership decision
- Set technical acceptance criteria, suitable intervals, relevant checks and environmental limits.
- Evidence to corroborate
- Reference certificates, corrections, drift/check trends, maintenance and conditions recorded at the time of work.
- Auditor challenge
- What demonstrates that the actual setup could achieve the required range and uncertainty?
03
Methods, sampling and customer commitments
- What to address
- The laboratory needs suitable procedures and evidence that they work for the intended application.
- Leadership decision
- Review capability before accepting work; verify standard methods and validate non-standard or changed use where required.
- Evidence to corroborate
- Contract reviews, verification/validation data, sampling records where relevant and approved method deviations.
- Auditor challenge
- Trace one demanding customer requirement into an achievable method, capability and reporting commitment.
04
Uncertainty and traceable results
- What to address
- The reported result must be supported by an appropriate reference chain and uncertainty evaluation.
- Leadership decision
- Assign technical ownership of measurement models, significant contributions, reference selection and correction updates.
- Evidence to corroborate
- Method/range budgets, traceability links, reference competence, current corrections and independent recalculation.
- Auditor challenge
- Can the team explain the main uncertainty contributions and trace this result to an appropriate reference?
05
Quality assurance and reporting integrity
- What to address
- Monitoring and comparisons need to detect weak performance before invalid results reach customers.
- Leadership decision
- Plan suitable validity checks and external comparisons; define reporting review, authorisation and response limits.
- Evidence to corroborate
- Control charts, PT/ILC outcomes, raw data, certificate reviews, agreed decision rules and controlled amendments.
- Auditor challenge
- What action followed a failed check or comparison, and which results were affected?
06
Scope, failure response and management decisions
- What to address
- Confidence depends on a controlled activity range and effective action when technical work fails.
- Leadership decision
- Protect scope accuracy, investigate previous-result impact and use audit/review evidence to allocate resources.
- Evidence to corroborate
- Activity and accreditation scope comparisons, holds/notifications, restart authority, CAPA effectiveness and management decisions.
- Auditor challenge
- Show how management dealt with a technical weakness beyond repairing the immediate problem.
BOARD & MANAGEMENT REVIEW
Eight questions that expose readiness
Answers should be supported by current evidence, named accountability and a decision—not assurance language alone.
- 01Does our declared activity range match the methods, ranges, locations and competence we can demonstrate?
- 02Who is authorised for each critical method and for independent technical review and release?
- 03Can our equipment, conditions and uncertainty evaluation support the results we promise?
- 04Are reference corrections and traceability links current and technically suitable?
- 05What do quality-control trends and external comparisons tell us about result validity?
- 06Could we identify all earlier results affected by a failed reference standard or incorrect calculation?
- 07Are conformity rules, raw data, certificates and report amendments technically controlled?
- 08Which technical issue requires a management decision now, and how will the action's effectiveness be tested?
ISO 19011-ALIGNED AUDIT TRAILS
Test the system end to end
Follow a real laboratory job from the customer requirement to the released result. Combine technical witnessing, calculations, records, interviews and monitoring evidence; use changed or abnormal work where relevant.
Customer request to released resultTrace an agreed job through item identity, authorised work, method, conditions, references, raw data, uncertainty and certificate release.
Reference standard to traceable measurementFollow the calibration chain, uncertainty contributions, corrections, intermediate checks and equipment suitability for the measured range.
Technical failure to controlled restartFollow a failed check or suspect reference through containment, previous-result impact, necessary customer action, restart approval and effectiveness.
Method change to demonstrated capabilityTest verification or validation, uncertainty, staff authority, data-system checks and monitoring before and after a changed method is released.
Key clauses explained
Open each clause for its requirement map, practical application, evidence and sampling prompts, auditor questions, weaknesses and required management output.
Clause 4General requirementsProtect impartial technical judgement and the confidentiality of laboratory information.
Open audit guide
Protect impartial technical judgement and the confidentiality of laboratory information.
Requirement map
- 4.1 — impartial activities, management commitment and protection from undue pressure
- 4.1 — ongoing identification and control of impartiality risks
- 4.2 — enforceable confidentiality commitments, controlled disclosure and protection of third-party sources
- 4.2 — confidentiality duties for employees, contractors and others acting for the laboratory
Practical application
Review ownership, reporting lines, customer relationships, incentives and shared production resources for risks to objective results. Give staff a usable escalation route and protect confidential information through the whole job lifecycle, including external providers and customer witnessing.
Objective evidence and sampling
Impartiality reviews and decisions; conflict declarations; reporting and release authorities; confidentiality commitments; disclosure approvals; access controls; interviews and examples of decisions made under commercial pressure.
Auditor challenge questions
- What happened when a customer challenged an unwelcome result?
- How are technicians protected from pressure to change technical conclusions?
- Who can see customer data and how are third-party sources protected?
Weakness and escalation indicators
A signed policy without working safeguards; the sales function controlling technical release; unresolved conflicts; shared access to confidential records; complaints revealing a third-party source without permission.
Required management output
Demonstrated impartiality safeguards and clear accountability for confidential information and disclosures.
Assurance focus
Technical integrity, freedom to escalate and reliable information protection across internal and external relationships.
RPG control pathway
Use RPG Excellence to assess the laboratory criterion, record objective evidence and assign an accountable Company User. Link a gap to a controlled Finding and proportionate CAPA-8D where needed, then retain implementation and effectiveness evidence. The platform supports preparation and internal assurance; accreditation decisions remain with the accreditation body.
Discuss Clause 4 support →Clause 5Structural requirementsDefine the laboratory's legal responsibility, management, activity range, interfaces and technical authority.
Open audit guide
Define the laboratory's legal responsibility, management, activity range, interfaces and technical authority.
Requirement map
- 5.1–5.2 — legal responsibility and identified management with overall laboratory accountability
- 5.3 — documented range of activities for which conformity is claimed
- 5.4 — consistent control at permanent, temporary, mobile and customer locations
- 5.5–5.6 — structure, procedures, responsibilities, resources and authority to act
- 5.7 — communication and preservation of system integrity during change
Practical application
Map the actual testing, calibration and sampling offered: methods, measurands, ranges, locations and technical interfaces. Align marketed capability, contracts and any accredited scope with what is demonstrated. Do not describe ongoing externally provided laboratory activities as the laboratory's own conforming activity range.
Objective evidence and sampling
Legal identity; organisation chart; controlled activity scope; methods/ranges and location lists; role and delegation records; stop-work authority; support-service interfaces; management communications and change reviews.
Auditor challenge questions
- Which activities and locations are inside the declared range?
- Who can stop work and authorise technical resumption?
- Does the service offered match the capability and any published accreditation schedule?
Weakness and escalation indicators
An ambiguous legal entity; missing site or fieldwork controls; nominal technical authority; scope claims broader than demonstrated capability; organisational change that bypasses laboratory controls.
Required management output
A clear, defensible laboratory boundary with accountable management, working authorities and controlled interfaces.
Assurance focus
Scope accuracy, technical accountability and preservation of competence through organisational or service changes.
RPG control pathway
Use RPG Excellence to assess the laboratory criterion, record objective evidence and assign an accountable Company User. Link a gap to a controlled Finding and proportionate CAPA-8D where needed, then retain implementation and effectiveness evidence. The platform supports preparation and internal assurance; accreditation decisions remain with the accreditation body.
Discuss Clause 5 support →Clause 6Resource requirementsProvide competent people, suitable facilities and dependable equipment backed by valid metrological references.
Open audit guide
Provide competent people, suitable facilities and dependable equipment backed by valid metrological references.
Requirement map
- 6.1 — available personnel, facilities, equipment, systems and support services
- 6.2 — documented competence criteria, selection, training, supervision, authorisation and monitoring
- 6.3 — suitable facilities, defined environmental requirements and relevant monitoring
- 6.4 — equipment fitness, acceptance, calibration, maintenance, status, checks, corrections and history
- 6.5 — demonstrable metrological traceability to appropriate references
- 6.6 — technically controlled external products and services
Practical application
Authorise staff for specific methods, ranges and release activities using demonstrated competence. Set conditions appropriate to the method and uncertainty. Technically review reference certificates, apply current corrections, conduct required intermediate checks and investigate suspect equipment. Evaluate providers against the capability actually purchased.
Objective evidence and sampling
Competence criteria and witnessed assessments; authorisation matrix; environmental data matched to job time; equipment/firmware history; acceptance and calibration records; correction tables; intermediate-check trends; traceability chains; provider evaluation and receipt approval.
Auditor challenge questions
- Can the technician demonstrate the method and interpret a deviation?
- Does the reference equipment support the required range and uncertainty?
- How was a supplier's delivered certificate accepted for its intended use?
- Which earlier results could be affected by an out-of-tolerance reference?
Weakness and escalation indicators
Training attendance treated as competence; blanket signatory authority; an in-date label mistaken for fitness; missed environmental excursions; wrong or omitted correction factors; unsuitable provider capability; no review of previous results after a reference failure.
Required management output
Verified technical capability, controlled environmental influences and a defensible reference chain for the laboratory's work.
Assurance focus
The people, equipment, facilities and traceability factors highlighted by UKAS, tested against actual methods and reported results.
RPG control pathway
Use RPG Excellence to assess the laboratory criterion, record objective evidence and assign an accountable Company User. Link a gap to a controlled Finding and proportionate CAPA-8D where needed, then retain implementation and effectiveness evidence. The platform supports preparation and internal assurance; accreditation decisions remain with the accreditation body.
Discuss Clause 6 support →Clause 7Process requirementsControl the complete technical process so every reported result is valid, reconstructable and understandable.
Open audit guide
Control the complete technical process so every reported result is valid, reconstructable and understandable.
Requirement map
- 7.1 — technical review of requests and contracts, including agreed decision rules where conformity is requested
- 7.2.1–7.2.2 — suitable methods, verified capability and validation when required
- 7.3–7.4 — sampling where performed and controlled handling/identification of items
- 7.5 — contemporaneous technical records and traceable amendments
- 7.6 — suitable uncertainty evaluation, including all calibration activities and in-house calibrations
- 7.7 — planned validity monitoring, suitable external comparisons and action on adverse results
- 7.8.1–7.8.2 — clear reporting, common information and authorised review/release
- 7.8.3–7.8.5 — activity-specific testing, calibration and sampling reporting
- 7.8.6–7.8.8 — conformity statements, opinions/interpretations and controlled report amendments
- 7.9–7.10 — complaint handling and risk-based control of nonconforming work
- 7.11 — validated data functions, information integrity and checked calculations/transfers
Practical application
Follow a customer job from agreed method, range and capability through receipt, work, original readings, corrections, uncertainty and release. Witness a demanding measurement and recalculate a reported result. Use validity monitoring to inform technical decisions. On failure, consider holds, previous-result impact, notification or recall where needed and authorised restart. Validate custom spreadsheets, interfaces and relevant system changes.
Objective evidence and sampling
Contract and decision-rule agreements; method verification/validation; sampling/receipt records; raw data; equipment and environmental links; uncertainty models; control charts; PT/ILC plans and results; certificates and release records; amendment links; complaint investigations; impact assessments; data-system validation and recovery evidence.
Auditor challenge questions
- Can this certificate value be reconstructed from the original data?
- Which uncertainty contributors matter for this method and range?
- What changed after an adverse check or comparison result?
- Was the borderline pass/fail decision made using the rule agreed with the customer?
- Could an unauthorised user alter a released result or a spreadsheet formula?
Weakness and escalation indicators
Methods adopted without demonstrated capability; generic uncertainty budgets; no plan for suitable external comparisons; incomplete raw data; available as-found failures hidden by as-left reporting; incorrect conformity statements; uncontrolled report replacements; failed references repaired without historical impact review.
Required management output
A complete technical evidence trail with valid results, justified uncertainty, controlled reporting and defensible decisions when work goes wrong.
Assurance focus
Valid methods, relevant sampling, accurate recording/reporting, technical quality assurance and result integrity. Apply testing-only or sampling-only requirements according to the actual activity range.
RPG control pathway
Use RPG Excellence to assess the laboratory criterion, record objective evidence and assign an accountable Company User. Link a gap to a controlled Finding and proportionate CAPA-8D where needed, then retain implementation and effectiveness evidence. The platform supports preparation and internal assurance; accreditation decisions remain with the accreditation body.
Discuss Clause 7 support →Clause 8Management system requirementsOperate a management system that supports laboratory competence, impartiality and consistently valid work.
Open audit guide
Operate a management system that supports laboratory competence, impartiality and consistently valid work.
Requirement map
- 8.1.1–8.1.3 — select Option A or Option B while continuing to meet clauses 4–7
- 8.2–8.4 — system documentation, document control and record control
- 8.5–8.6 — proportionate risk/opportunity actions, improvement and customer feedback
- 8.7 — correction, cause/extent evaluation, action and effectiveness review
- 8.8 — planned internal audits, defined scope/criteria, reporting and timely follow-up
- 8.9 — management review with complete inputs and recorded decisions on effectiveness, improvement, resources and change
Practical application
Under Option A, address the management requirements directly. Under Option B, demonstrate that the ISO 9001-aligned system consistently supports clauses 4–7 and fulfils the intent of 8.2–8.9. Certification is not a prerequisite to choosing Option B and is not proof of technical competence. Use technical risks, changes and previous results to plan audits and make management review decision-focused.
Objective evidence and sampling
Documented system route; laboratory-to-corporate system mapping where relevant; controlled documents and retained records; risk actions; feedback and improvement data; cause/extent analysis; effectiveness checks; audit programme, evidence and follow-up; complete management-review inputs, decisions and resourcing actions.
Auditor challenge questions
- Which route is used and how is it implemented in this laboratory?
- Does internal audit witness technical work and test data rather than only review procedures?
- Which recent technical trend changed a management decision?
- What proves corrective action reduced recurrence rather than merely completing a task?
Weakness and escalation indicators
Marking the entire management system not applicable under Option B; corporate certification treated as laboratory accreditation; audit coverage disconnected from technical risk; repeated failures closed on retraining; management minutes with no decisions or follow-through.
Required management output
An implemented system that sustains competence and result validity, supported by effective audit, review, resource decisions and verified improvement.
Assurance focus
No numerical RPG score or completed checklist can replace competent assessment or override unresolved significant technical gaps.
RPG control pathway
Use RPG Excellence to assess the laboratory criterion, record objective evidence and assign an accountable Company User. Link a gap to a controlled Finding and proportionate CAPA-8D where needed, then retain implementation and effectiveness evidence. The platform supports preparation and internal assurance; accreditation decisions remain with the accreditation body.
Discuss Clause 8 support →MANAGEMENT-SYSTEM OPTIONS & INTERPRETATION
Apply the right route without weakening technical control.
Record the chosen system route and explain any activity-specific non-applicability. Informative annexes help interpretation and are not scored as additional requirements.
Direct management controls
Address 8.2–8.9 through a working laboratory system: documentation, records, risk action, improvement, CAPA, audit and review.
Demonstrated ISO 9001 alignment
Show how the wider system supports consistent fulfilment of clauses 4–7 and the intent of 8.2–8.9. An ISO 9001 certificate alone is insufficient.
Understand the reference chain
Use the explanation of metrological traceability to challenge missing links, unsuitable references or uncertainty contributions. Assess the applicable requirement in 6.5.
Understand the system options
Use the explanation of the two routes to assess real implementation. Neither route removes the technical requirements or creates an accreditation decision.
OFFICIAL UKAS RESOURCES
Connect preparation to the accreditation criteria.
UKAS identifies competent staff, suitable equipment and facilities, sound technical procedures, traceability and dependable records/reporting as factors supporting reliable laboratory results. Use its current resources alongside the licensed standard. These links provide independent source guidance; they do not imply UKAS endorsement of RPG Excellence.
UKAS overview and preparation
Review the laboratory competence factors, the official readiness-tool link and application information. Distinguish preparation from the accreditation decision.
Read official UKAS guidance ↗Define the offered capability
Use the UKAS calibration overview to consider the relevant measurement disciplines and the capability the laboratory intends to demonstrate.
Read official UKAS guidance ↗Use the current technical guidance
Check LAB 5 for calibration reporting, LAB 48 for conformity decisions, M3003 for uncertainty, TPS 41 for traceability and TPS 47 for proficiency testing. Confirm applicability and current issues through the official index.
Read official UKAS guidance ↗Separate recommendation from grant
UKAS uses an independent decision process following assessment. A recommendation, internal audit or RPG readiness percentage does not itself grant accreditation or extend its scope.
Read official UKAS guidance ↗RPG EXCELLENCE SUPPORT
Discuss ISO/IEC 17025:2017 support →Move from understanding to controlled implementation.
Use RPG Excellence for gap analysis, implementation support, internal auditing, evidence control, findings, CAPA-8D and management reporting across a single or integrated system.