Skip to main content
v2026.11,610 entries · CC-BY 4.0
LAC HealthLaboratory & ResearchLab & research supplies.Reagents, consumables, PPE & instruments — documented, fast, chain-of-custody shipping.Shop lac.us lac.us

What Is IQCP (Individualized Quality Control Plan)? CLIA Requirements Explained

IQCP (Individualized Quality Control Plan) under CLIA: the three required components, who needs one, and how point-of-care analyzer choice shapes it.

Ask about What Is IQCP (Individualized Quality Control Plan)? CLIA Requirements Explained

Answers are drawn from this guide and the rest of the CASRAI corpus, with a link to every source.

Answers are AI-generated from CASRAI’s own published pages and can be wrong, so check the linked sources before relying on one; your question is logged without personal data — never sold, never used to train a third-party model — to show us what CASRAI is missing, so please do not type personal or confidential details. How we use this

An IQCP (Individualized Quality Control Plan) is one of three quality-control pathways a clinical laboratory can follow under CLIA (the Clinical Laboratory Improvement Amendments, 42 CFR Part 493) for a non-waived test system. Instead of running the CLIA default schedule of two levels of control material every day of testing, a lab that develops an IQCP uses a documented risk assessment to justify a customized QC frequency and process for that specific test system. IQCP is built on CLSI guideline EP23-A2, “Laboratory Quality Control Based on Risk Management”, and is administered by CMS as part of the CLIA program.

This matters most where the choice of testing device drives the risk picture — point-of-care (POC) analyzers such as blood gas/chemistry cartridge systems are the clearest case, because their built-in electronic checks and single-use format change what a sound risk assessment actually looks like compared to a traditional benchtop analyzer. This guide covers what an IQCP is, its three required components, who needs one, and how test-system and device selection shape it.

What Is an IQCP?

Operationally, a document only counts as an IQCP if it contains all three of the following, specific to one test system at one testing site:

  • A Risk Assessment that evaluates the entire testing process — pre-analytic, analytic, and post-analytic — for that specific test system, at that specific location, performed by the people who actually run it.
  • A Quality Control Plan derived from that risk assessment, specifying the number, type, and frequency of QC, plus the other practices (specimen handling, personnel competency, environmental factors) needed to control the risks identified.
  • An ongoing Quality Assessment process that monitors whether the plan is actually working and triggers a fresh risk assessment when something changes.

A lab cannot simply declare a reduced QC schedule and call it an IQCP — CMS surveyors and accreditors (CAP included) expect to see the risk assessment documentation and the ongoing quality-assessment monitoring, not just the resulting QC frequency.

Where IQCP Fits in CLIA’s Quality Control Framework

Under CLIA, a laboratory running a non-waived (moderate- or high-complexity) test generally has three options for meeting the QC requirement:

  1. Follow the manufacturer’s FDA-cleared instructions for QC frequency and materials, where the package insert specifies one.
  2. Follow the CLIA default under 42 CFR 493.1256: two levels of control material tested each day of patient testing, for test systems without a specified manufacturer QC frequency.
  3. Develop and follow an IQCP as a documented, risk-based alternative to option 2.

An IQCP does not override an FDA-cleared manufacturer QC instruction — where the manufacturer specifies a required QC frequency, the lab has to follow it regardless of what a risk assessment concludes. IQCP exists for the cases where the CLIA default is either impractical or doesn’t reflect the real risk profile of the test system, most commonly with point-of-care and unit-use device formats.

IQCP replaced a prior option called Equivalent Quality Control (EQC), which CMS phased out effective January 1, 2016. Labs that had been using EQC had to transition to one of the three options above by that date. See CASRAI’s CLIA certification guide for how test complexity categories and certificate types work more broadly.

The Three Components of an IQCP, in Practice

1. Risk Assessment (RA)

The lab systematically identifies potential sources of error across the testing process for one specific test system: specimen collection and handling, reagent and environmental factors, operator technique, instrument/reagent stability, and result reporting/interpretation. This is done using the manufacturer’s package insert, the lab’s own history with the test system (error logs, proficiency testing performance, QC failures), and applicable regulatory or accreditation requirements as inputs. The output is a documented list of risks and the existing or proposed controls for each one.

2. Quality Control Plan (QCP)

Using the risk assessment as justification, the lab writes the actual QC plan: how many levels of control, how often, what triggers additional QC (a new reagent lot, an environmental excursion, an operator change), and what other quality practices (specimen acceptability checks, competency assessment cadence, maintenance schedules) mitigate the risks that QC materials alone don’t cover.

3. Quality Assessment (QA)

The lab monitors, at a minimum annually, whether the QCP is actually catching errors and whether anything about the test system, staff, or environment has changed enough to warrant redoing the risk assessment. QA is what keeps an IQCP from becoming a one-time paperwork exercise — CMS and CAP surveyors specifically look for evidence of this ongoing review, not just the original RA and QCP documents.

Why Point-of-Care Analyzer Choice Drives IQCP Design

The risk assessment for a bench-top chemistry analyzer running liquid reagents looks very different from the risk assessment for a cartridge-based point-of-care device. Unit-use and cartridge-based POC systems (the category that includes handheld blood gas/electrolyte analyzers and coagulation testing devices) typically build electronic and procedural checks directly into each cartridge or test strip — checks a bench analyzer doesn’t need because it runs continuous liquid QC instead. A sound risk assessment has to account for what the device’s built-in controls actually detect and, just as importantly, what they don’t. Vendor documentation for these device categories routinely addresses IQCP directly, because the manufacturer’s engineering choices materially change what a defensible risk assessment and QC frequency look like for that specific instrument.

Practically, this means IQCP development belongs in the evaluation process when a lab is selecting a POC analyzer, not as an afterthought once the device is already in service — the built-in QC architecture of the instrument a lab buys directly shapes how much ongoing external QC burden that lab is taking on.

Who Needs an IQCP (and Who Doesn’t)

  • Waived tests (the least-complex CLIA category) are not subject to the CLIA QC requirements that IQCP addresses — see CASRAI’s CLIA certification guide for how waived, moderate, and high complexity are determined. Manufacturer instructions still apply for good laboratory practice, but IQCP itself is a moderate/high-complexity (non-waived) mechanism.
  • IQCP is elected per test system, not lab-wide. A lab can run an IQCP for its point-of-care glucose or blood gas testing while following the CLIA default or manufacturer instructions for other non-waived tests on the menu.
  • IQCP is optional, never required. A lab that’s satisfied following the CLIA default two-levels-per-day schedule, or the manufacturer’s specified QC frequency, never has to build an IQCP at all.

Building an IQCP: A Step-by-Step Overview

  1. Select the test system and confirm it’s non-waived and not already governed by a mandatory manufacturer QC frequency that would make an IQCP moot.
  2. Gather inputs: package insert, instrument/reagent history at the site, applicable regulations and accreditation standards, and relevant published literature or manufacturer risk-management documentation.
  3. Conduct and document the risk assessment across pre-analytic, analytic, and post-analytic phases.
  4. Draft the QC plan: QC materials, frequency, acceptance criteria, and the non-QC practices (competency checks, specimen rejection criteria, maintenance) that address the remaining risks.
  5. Implement, train staff on the plan, and begin ongoing quality assessment monitoring.
  6. Review at least annually, and immediately after any change that could invalidate the original risk assessment — a new reagent lot with different performance characteristics, a software or firmware update, a new testing location, or a QC or proficiency-testing failure.

IQCP and Laboratory Accreditation

CMS accepts a properly built and maintained IQCP as satisfying the CLIA QC requirement, and deemed accreditors that survey on CMS’s behalf — including CAP — recognize IQCP as consistent with their own checklist requirements, though each accreditor may ask for specific documentation formats during survey. Labs building an IQCP for accreditation purposes should confirm the current documentation expectations with their specific accrediting body rather than assuming CLIA’s baseline is sufficient on its own. See CASRAI’s proficiency testing and external quality assessment guide for how PT performance feeds into ongoing quality monitoring more broadly, and the lab compliance pillar for the wider regulatory landscape (ISO 15189/17025 accreditation, GxP, biosafety) an IQCP sits alongside.

Common Pitfalls

  • Treating IQCP as a way to simply reduce QC frequency without a documented, defensible risk assessment behind it — surveyors cite this as a deficiency because the plan isn’t actually risk-based, just reduced.
  • Never revisiting the risk assessment after a reagent lot change, software update, or new operator group — an IQCP that hasn’t been reviewed in years is a common survey finding.
  • Applying one IQCP across multiple sites or instruments without confirming the risk profile is actually the same at each location — an IQCP is specific to the test system and testing site it was built for.
  • Overriding a manufacturer-specified QC frequency with a less-frequent IQCP schedule — not permitted where the FDA-cleared labeling specifies a required frequency.

Frequently Asked Questions

Is an IQCP (Individualized Quality Control Plan) mandatory under CLIA?

No. It’s one of three ways to meet the CLIA QC requirement for a non-waived test system — the other two being the manufacturer’s specified QC frequency (where one exists) or the CLIA default of two QC levels every day of testing. A lab only needs an IQCP if it wants an alternative to those two.

What did IQCP replace?

IQCP replaced Equivalent Quality Control (EQC), an earlier CMS QC option that was phased out effective January 1, 2016, at which point labs using EQC had to move to an IQCP, the CLIA default, or manufacturer instructions.

Does IQCP apply to waived tests?

No. Waived tests fall outside the CLIA QC requirements that IQCP is designed to satisfy; IQCP is a moderate/high-complexity (non-waived) mechanism.

Does choosing a different point-of-care analyzer change our IQCP?

Yes, generally. Because the risk assessment has to reflect the specific test system’s design — including its built-in electronic or procedural checks — switching to a different POC device typically requires a new or substantially revised risk assessment, not a copy-paste of the prior instrument’s plan.

This guide summarizes the CLIA IQCP framework for general reference. Laboratories should confirm current CMS guidance and their specific accreditor’s documentation requirements before finalizing an IQCP, since survey expectations can be updated over time.

Referenced across the research world

University of Cambridge logoColumbia University logoCrossref logoUniversity of Edinburgh logoHarvard University logoUniversity of Oxford logoPrinceton University logoStanford School of Medicine logoUniversity College London logoORCID logoUniversity of Cambridge logoColumbia University logoCrossref logoUniversity of Edinburgh logoHarvard University logoUniversity of Oxford logoPrinceton University logoStanford School of Medicine logoUniversity College London logoORCID logo
  • University of Cambridge logo
  • Columbia University logo
  • Crossref logo
  • University of Edinburgh logo
  • Harvard University logo
  • University of Oxford logo
  • Princeton University logo
  • Stanford School of Medicine logo
  • University College London logo
  • ORCID logo

View CASRAI adoption →