ISO/IEC 17025 is the international standard General requirements for the competence of testing and calibration laboratories, published jointly by ISO and the International Electrotechnical Commission (IEC). The current edition is ISO/IEC 17025:2017, which replaced the 2005 edition and restructured the standard around the newer ISO high-level structure while adding explicit requirements for risk-based thinking and impartiality.
The single most common misunderstanding about this standard is what it actually certifies. ISO/IEC 17025 does not certify an organization as a whole, and a laboratory is never “ISO 17025 certified” in the way a company can be ISO 9001 certified. A laboratory is accredited to ISO/IEC 17025, and that accreditation attests to one specific thing: the laboratory’s technical competence to produce valid results for a defined scope of tests, calibrations, or types of tests/calibrations — not to the organization’s general quality management practices, and not to every test the lab is capable of running.
What ISO/IEC 17025 accreditation actually attests
Accreditation to ISO/IEC 17025 is granted by a national accreditation body — in the United States, bodies such as A2LA (American Association for Laboratory Accreditation), ANAB (ANSI National Accreditation Board), and NVLAP (NIST’s National Voluntary Laboratory Accreditation Program); in the UK, UKAS. These bodies are themselves peer-evaluated members of the International Laboratory Accreditation Cooperation (ILAC), which operates the ILAC Mutual Recognition Arrangement (MRA) so that accredited results are recognized across member economies.
Accreditation is issued against a scope of accreditation — a published, specific list of the tests, calibration types, measurement ranges, and methods the laboratory has demonstrated competence to perform. A laboratory accredited for tensile testing of steel is not thereby accredited for chemical residue testing, even if both happen in the same building under the same management system. Any claim of ISO/IEC 17025 accreditation, or any test report/calibration certificate bearing an accreditation mark, should be checked against the accrediting body’s published scope — the accreditation covers only what is listed there, nothing broader.
This is distinct from certification, the mechanism used for management-system standards like ISO 9001. Certification bodies (accredited themselves, typically under ISO/IEC 17021-1, and operating under the International Accreditation Forum, IAF) certify that an organization’s management system conforms to a standard’s requirements. Accreditation bodies, by contrast, formally recognize the competence of a body to perform specific conformity-assessment activities — testing, calibration, inspection, or certification itself. A testing laboratory is accredited; a management system is certified. The vocabulary is not interchangeable, and mixing it up in a proposal, contract, or regulatory submission is a real, checkable error.
ISO/IEC 17025 vs. ISO 9001: the distinction that matters most
This is the comparison every lab manager, PI, or core-facility director eventually has to explain, and it is where most competing explanations online are thin. The two standards address different questions entirely:
- ISO 9001 asks: does this organization have an effective quality management system — documented processes, customer focus, continual improvement, management review — that applies to whatever it produces or delivers? It is a generic standard, applicable to any organization in any sector, and certification does not evaluate whether the organization’s technical output (a test result, a measurement) is itself correct or fit for purpose.
- ISO/IEC 17025 asks: can this specific laboratory, for this specific defined scope, produce technically valid results with properly evaluated measurement uncertainty, using validated methods, traceable calibration, and competent personnel? It is a sector-specific standard built for testing and calibration laboratories, and it directly evaluates technical competence, not just management-system maturity.
A laboratory can hold ISO 9001 certification and still produce technically unreliable results, because ISO 9001 never audits the technical method, the equipment’s calibration traceability, or the validity of the measurement uncertainty budget — it audits whether the organization runs its processes the way it says it does. ISO/IEC 17025 was written specifically to close that gap for labs whose core product is a number: a test result or a calibration value that a client, a regulator, or a court will rely on.
ISO/IEC 17025:2017 recognizes this relationship directly in its management-system requirements (clause 8), which allow a laboratory two implementation routes: Option A, a minimum standalone set of management-system requirements written into the standard itself, or Option B, meeting those same management-system obligations by operating a management system that already satisfies ISO 9001. Option B is exactly why the two standards are so often confused — a lab can legitimately run one integrated management system that satisfies both — but Option B still requires everything in clauses 4 through 7 (impartiality, structure, resources, and process requirements) to be independently demonstrated for accreditation; ISO 9001 certification alone never substitutes for that technical evaluation.
The clause structure of ISO/IEC 17025:2017
After the standard’s introductory clauses (1: scope, 2: normative references, 3: terms and definitions), the substantive requirements run across five clauses:
- Clause 4 — General requirements. Impartiality (the laboratory must identify and manage risks to its impartiality on an ongoing basis, not just declare it once) and confidentiality of client and proprietary information.
- Clause 5 — Structural requirements. The laboratory must be a legally identifiable entity (or a defined part of one), define its organizational and management structure, and assign responsibility, authority, and interrelationships for personnel who manage, perform, or verify work affecting results.
- Clause 6 — Resource requirements. Personnel competence, facilities and environmental conditions, equipment (including maintenance and calibration status), metrological traceability of measurement results to the International System of Units (SI) or other appropriate reference, and control of externally provided products and services.
- Clause 7 — Process requirements. This is the largest clause and covers the operational core: review of requests, tenders and contracts; method selection, verification, and validation; sampling; handling of test or calibration items; technical records; evaluation of measurement uncertainty; ensuring the validity of results (including proficiency testing and use of certified reference materials); reporting of results; complaints; nonconforming work; and control of data and information management.
- Clause 8 — Management system requirements. Documentation control, control of records, actions to address risks and opportunities, improvement, corrective action, internal audits, and management review — satisfied either via Option A’s standalone minimum requirements or Option B’s ISO 9001-conformant system, as described above.
Worked example: what “in scope” actually looks like
A materials-testing lab holds ISO/IEC 17025 accreditation for tensile testing of metallic materials per a specific ASTM method, within a stated force range, at a specific facility address. If a client asks that same lab to run a hardness test, or to run tensile testing at a different, unlisted facility, or using a different method not listed on the certificate, the work can still be performed — but it falls outside the accredited scope, and the resulting report cannot carry the accreditation mark or be represented as an accredited result. This is the practical consequence of accreditation being scope-specific rather than organization-wide: the accreditation certificate and its published scope of accreditation are the two documents to check together, every time, not the accreditation status alone.
Counter-example: what ISO/IEC 17025 does not cover
A laboratory can be ISO 9001 certified, run disciplined document control, and pass every management-system audit, while still lacking ISO/IEC 17025 accreditation — and in that state, it has no independently verified basis for the technical validity of its test or calibration results, no mandated measurement uncertainty evaluation, and no external check on metrological traceability. Conversely, ISO/IEC 17025 accreditation says nothing about, for example, the laboratory’s environmental management practices (that would be ISO 14001) or its information security controls (ISO/IEC 27001) — accreditation is bounded strictly to the technical competence of the accredited scope, not a general seal of organizational quality.
Related and adjacent standards
Laboratories operating in regulated or specialized environments often need to understand ISO/IEC 17025 alongside neighboring frameworks: ISO 20387 governs biobanking-specific requirements and was itself modeled partly on the ISO/IEC 17025 competence approach; CLIA (Clinical Laboratory Improvement Amendments) and CAP (College of American Pathologists) accreditation govern US clinical/diagnostic laboratories under a different regulatory regime than voluntary ISO/IEC 17025 accreditation; and Good Laboratory Practice (GLP) governs the conduct of non-clinical safety studies submitted to regulators, which is a study-conduct framework rather than a laboratory-competence accreditation. None of these substitute for one another — a lab may need more than one, depending on what it tests and who relies on the results.
For the calibration side of an ISO/IEC 17025 scope specifically, see how individual instrument types are calibrated and documented in practice: pipette calibration, analytical balance calibration, and spectrophotometer calibration. Documented procedures underpinning an accredited scope typically follow the same SOP discipline covered in how to write a lab SOP. For the wider laboratory compliance and quality landscape this standard sits within, see the lab compliance and quality hub.
Frequently asked questions
Is ISO 17025 the same as ISO 9001?
No. ISO 9001 certifies an organization’s general quality management system and applies to any industry. ISO/IEC 17025 accredits a testing or calibration laboratory’s technical competence for a specific, published scope of tests or calibrations, including measurement uncertainty, method validation, and metrological traceability — none of which ISO 9001 evaluates.
Is ISO 17025 mandatory?
Accreditation itself is generally voluntary, but many contracts, regulators, and industry sectors require it as a condition of accepting a laboratory’s results — for example, in forensic testing, construction-materials testing, environmental testing, and calibration services supplying other accredited or regulated labs. Requirements vary by sector and jurisdiction.
Who accredits laboratories to ISO 17025?
National accreditation bodies do, not ISO or IEC themselves. In the US these include A2LA, ANAB, and NVLAP; equivalents exist in most countries (UKAS in the UK, for example). These bodies are peer-evaluated members of the International Laboratory Accreditation Cooperation (ILAC), whose Mutual Recognition Arrangement underpins international acceptance of accredited results.
Does ISO 17025 apply to research labs, or only commercial testing labs?
The standard applies to any laboratory performing testing or calibration, including university core facilities, government labs, and in-house industrial labs, not only third-party commercial testing companies — the requirement to pursue accreditation typically comes from a client, funder, regulator, or accreditation-dependent contract rather than the standard itself.
What is the difference between ISO 17025 calibration and general equipment calibration?
Calibration performed under an ISO/IEC 17025-accredited scope carries metrological traceability to SI units or another stated reference, a documented measurement uncertainty, and is subject to external assessment by the accreditation body. Calibration performed outside an accredited scope (e.g., a manufacturer’s in-house calibration of its own equipment, or a lab’s internal calibration check) may still be technically sound, but it does not carry the same independently verified traceability and uncertainty evidence, and cannot be represented as accredited.
