ISO/IEC 17025:2017 Implementation Training

This training course opens with the question of how a laboratory knows its last result was right, and why a laboratory sells trust in its results. Covers the scope in clause 1, the objective of the standard, the meaning of shall, should, may and can, and the three main changes in the third edition. Explains accreditation against certification. Follows XYZ Ltd., a testing and calibration laboratory in Dubai, with a food microbiology laboratory in Singapore as a second example.

What you will be able to do

• Explain why laboratories are accredited, not certified
• Describe what the standard covers and who uses it
• Read shall, should, may and can correctly

Why it matters

A laboratory sells trust in its results, and a system that shows how each result is traceable can close a customer's audit in minutes.

Practice: Practice: Welcome: why accreditation matters · 3 questions

Starts with a drinking-water method at XYZ Ltd. where the word validated creates an assessment finding. Covers the two normative references in clause 2, ISO/IEC Guide 99 and ISO/IEC 17000, then the nine terms of clause 3 in three groups: trust and feedback, comparing results with others, and deciding and showing that something is fit. Includes the difference between verification and validation, and three short situations to decide.

What you will be able to do

• Distinguish verification from validation
• Recognise a complaint, whatever its form or source
• Tell proficiency testing apart from other interlaboratory comparisons

Why it matters

One wrong word, such as validated for verified, can create a finding, so using the standard's terms the same way every time protects you.

Practice: Practice: The language of the laboratory · 3 questions

Compares two ways XYZ Ltd. could begin: writing a manual first, or assessing gaps first. Walks through the eight clauses and two annexes, three questions that group clauses 4 to 8, and the order of clause 7. Explains Option A and Option B for the management system, the route to accreditation, a five-step gap assessment, and the range of laboratory activities in clauses 5.3 and 5.4.

What you will be able to do

• Choose between Option A and Option B for the management system
• Carry out a gap assessment and give each gap an owner and a date
• Define the range of laboratory activities you will claim

Why it matters

Finding gaps first lets you fix those that threaten results before writing paperwork, and a range drawn honestly is what you are assessed against.

Practice: Practice: How the standard is built · 3 questions

Opens with XYZ Ltd. and a hotel group that asks for a retest of a result it dislikes. Sets out the five parts of clause 4.1 and the three pressures named in clause 4.1.3, then the sources of risk listed in the note: ownership, management, shared resources, finances, marketing and sales commission. Gives five steps to put it in place, with an impartiality risk register and a declaration of interests.

What you will be able to do

• Identify risks to impartiality from activities and relationships
• Eliminate or minimise each risk and record how
• Build an impartiality risk register for your laboratory

Why it matters

When someone presses for a different result, clear rules and a record protect the one thing customers pay for: trust in the result.

Practice: Practice: Impartiality in the laboratory · 3 questions

Begins with a brochure at XYZ Ltd. that names a hotel group without its agreement. Sets out the four parts of clause 4.2 and what all information covers, from samples and drafts to what staff see at a customer's site. Explains legally enforceable commitments and the four situations: going public, a release the law requires, information from other sources, and agreed sharing. Examples include a regulator's request and a food microbiology laboratory in London.

What you will be able to do

• Explain what legally enforceable commitments mean for staff and contractors
• Handle a legal demand for customer results correctly
• Put five steps in place to protect confidentiality

Why it matters

Customers who are never surprised by what you publish or release keep trusting the laboratory with their samples and data.

Practice: Practice: Confidentiality of information · 3 questions

Opens with XYZ Ltd. and a new mobile van where nobody checks on-site certificates. Takes the seven parts of clause 5 in turn: legal entity and overall management, the range and the sites where work is done, the organisation chart and a laboratory's place in a parent organisation, and the five duties of the quality role. Closes with communication and keeping the system sound during change, using a factory laboratory in Mumbai and a testing laboratory in Sydney.

What you will be able to do

• Define who manages, performs and verifies work that affects results
• Appoint the quality role in writing, with authority and resources
• Plan a change to the system before the first job under it

Why it matters

Clear roles catch problems early, such as a wrong unit on a certificate that is found before the certificate leaves the laboratory.

Practice: Practice: Structural requirements · 3 questions

Starts with a new technician at XYZ Ltd. who signs certificates before anyone has authorised him. Covers the general resource requirement in clause 6.1, then clause 6.2 and its external personnel. Takes documented competence requirements for each function, competence to judge deviations, the six steps with procedures and records in clause 6.2.5, and authorisation in clause 6.2.6 with an authorisation matrix. Examples come from food microbiology in Singapore and a night-shift chemist in Mumbai.

What you will be able to do

• Document competence requirements for each function
• Run selection, training, supervision, authorisation and monitoring with records
• Build an authorisation matrix by name and task

Why it matters

When a customer asks who allowed a person to sign, you can answer from the records: competent first, then authorised by name.

Practice: Practice: Resources and personnel · 3 questions

Begins with XYZ Ltd. calibrating balances beside a loading door and a fan in a customer's packing hall. Lists the influences named in the note to clause 6.3.1, then the five parts of clause 6.3: suitable facilities, documented requirements, monitoring, control and records, measures such as access and separation, and work outside permanent control. Includes an alert, stop, fix, look back and record rule, an on-site checklist, and laboratories in London and Toronto.

What you will be able to do

• Document the facility and environmental requirements for your work
• Monitor, control and record conditions, and act when they go out of range
• Check and record conditions at a customer's site before starting

Why it matters

The room is part of the measurement: a record of conditions on the day links every result to the conditions it was produced in.

Practice: Practice: Facilities and environmental conditions · 3 questions

Begins with an overdue reference gauge at XYZ Ltd. that puts forty certificates in question. Defines equipment broadly, including software, measurement standards and reference materials, then takes clause 6.4 in order: the handling and maintenance procedure, verification before service, capability, which equipment needs calibration, the calibration programme and status labels. Covers equipment in doubt, intermediate checks, corrections, protection from unintended adjustment, and the equipment records of clause 6.4.13.

What you will be able to do

• Decide which equipment needs calibration and record the decision
• Take doubtful equipment out of service and look back at past results
• Keep an equipment record for each item that can influence results

Why it matters

Showing that equipment is fit for use, instead of assuming it, protects every certificate issued since the last good check.

Practice: Practice: Equipment and its calibration · 3 questions

Starts with a reference thermometer sent to a low-cost provider whose certificate states no uncertainty and no traceability. Defines metrological traceability as a documented, unbroken chain of calibrations, then covers the three routes to the SI in clause 6.5.2, the cases where the SI is not technically possible in clause 6.5.3, and certified reference materials in a water laboratory. Annex A is explained through class weights, provider scopes and a traceability record for pressure.

What you will be able to do

• Describe the chain that links a measurement result to the SI
• Check a provider's published scope and certificate before relying on it
• Keep a traceability record for each measurement area

Why it matters

If you can trace one result back link by link in a few moments, you can show a customer's auditor or an assessor that your results hold up.

Practice: Practice: Metrological traceability · 3 questions

Opens with a cheaper culture media supplier at XYZ Ltd. whose first batch is used without a check. Explains the three situations in clause 6.6.1, the procedure and records of clause 6.6.2 (requirements, criteria for providers, checks before use and resulting actions), and what to tell providers under clause 6.6.3. Includes an approved provider list, laboratory work done by another laboratory, and a contractor re-evaluation at a testing laboratory in Sydney.

What you will be able to do

• Define requirements and evaluation criteria for external providers
• Check calibration certificates, reagents and culture media before use
• Re-evaluate providers and act on what monitoring finds

Why it matters

Checking a purchase before it touches a result stops one weak batch or one missing certificate from putting a week of results in doubt.

Practice: Practice: Externally provided products and services · 3 questions

Opens with a property developer asking XYZ Ltd. to test water from one hundred and twenty apartments in one week. Sets out the four points of clause 7.1.1, a five-step review, telling a customer when a requested method is out of date, and the decision rule defined in clause 3.7 and agreed under clause 7.1.3. Covers contract changes, cooperation with customers, review records, and examples from laboratories in Toronto and London.

What you will be able to do

• Review a request for capability, resources and methods before saying yes
• Agree a decision rule with the customer in writing
• Repeat the review when a job changes after work has started

Why it matters

Saying yes only when you can deliver means results arrive on time and valid, and the customer knows how conformity will be judged.

Practice: Practice: Review of requests, tenders and contracts · 3 questions

Opens with a revised drinking-water method that XYZ Ltd. fails to notice. Separates verification in clause 3.8 from validation in clause 3.9, then takes the seven parts of clause 7.2.1: appropriate methods, up-to-date documents, the latest valid version, choosing a method when the customer names none, verification before introduction, planned method development, and four conditions for deviations. Includes a four-step verification approach, a method register, and examples from Mumbai and Singapore.

What you will be able to do

• Verify a standard method before its first customer report
• Choose and name a method when the customer specifies none
• Allow a deviation from a method only when it meets the four conditions

Why it matters

A method proven somewhere must be shown to work in your laboratory, and a dated verification record is the evidence behind each early report.

Practice: Practice: Selecting and verifying methods · 3 questions

Opens with a food microbiology laboratory in Singapore that shortens an incubation time and loses a bakery chain's trust. Separates verification from validation, then takes the four parts of clause 7.2.2: the four kinds of method to validate, changes to a validated method, performance characteristics relevant to the customer's needs, and five records ending in a statement of fitness. Examples include swimming-pool water at XYZ Ltd. and a construction-materials laboratory in London.

What you will be able to do

• Identify which methods need validation
• Choose performance characteristics from the customer's decision
• Retain the five validation records, ending in a signed statement

Why it matters

A changed method is a new method, and validating it with criteria set before the data gives you evidence behind every report.

Practice: Practice: Validating methods · 3 questions

Compares loose and careful sampling of drinking water at a hotel served by XYZ Ltd. Takes clause 7.3 in three parts: the sampling plan and method, what the method describes, and the eight kinds of sampling record. Then covers clause 7.4: the handling procedure from transportation to disposal or return, unique identification of items, recording deviations on receipt and consulting the customer, and storage conditions. Examples come from laboratories in Mumbai and Manila.

What you will be able to do

• Keep a sampling plan and method available where sampling is done
• Identify each item uniquely so items are never confused
• Record deviations on receipt and consult the customer first

Why it matters

A result is only as strong as its sample, so being able to walk back from a report to the moment of sampling makes the result defensible.

Practice: Practice: Sampling and handling items · 3 questions

Opens with a queried temperature probe certificate that XYZ Ltd. cannot rebuild from a pad of notes. Covers the content of technical records in clause 7.5.1, recording at the time and tracking amendments. Explains measurement uncertainty with a suitcase weighed on a bathroom scale, then the contributions in clause 7.6.1, the duties in clauses 7.6.2 and 7.6.3, a common route for an evaluation, and an uncertainty budget for pressure gauges.

What you will be able to do

• Keep technical records that let someone else repeat the work
• Correct a record while keeping the original data
• Identify the contributions to measurement uncertainty

Why it matters

A record made at the time can be defended, and a result stated with its uncertainty can be judged by the customer who relies on it.

Practice: Practice: Technical records and uncertainty · 3 questions

Opens with a check weight chart at XYZ Ltd. that drifts for six weeks while staying inside its limits. Takes the three parts of clause 7.7: a monitoring procedure whose data shows trends, the eleven activities it includes where appropriate, and comparison with other laboratories through proficiency testing or other interlaboratory comparisons. Covers control chart rules, four habits for proficiency testing, and analysing data and acting before an incorrect result is reported.

What you will be able to do

• Plan the monitoring of validity for each method
• Write trend rules for control charts
• Act on data outside criteria and look back at reported results

Why it matters

Watching the trend, not only the limit, catches a drift in its first week, before any certificate has to be recalled.

Practice: Practice: Ensuring the validity of results · 3 questions

Opens with a food microbiology laboratory in Toronto whose report does not say the customer took the sample. Takes clause 7.8.1, review and authorisation before release, and the list in clause 7.8.2.1 in two halves, then customer-provided information and results from external providers. Covers what test reports, calibration certificates and sampling reports add, including measurement uncertainty, and the rule that a certificate recommends no calibration interval unless agreed.

What you will be able to do

• Check a report template against the clause 7.8.2.1 list
• Identify customer-provided data and state that results apply as received
• State measurement uncertainty correctly on a calibration certificate

Why it matters

A good report says what the result covers and what it does not, which settles disputes about sampling or meaning in a day, not weeks.

Practice: Practice: Reporting results · 3 questions

Begins with XYZ Ltd. and a factory that read the same gauge result as in tolerance and as possibly out, because no rule was agreed. Explains the decision rule with a suitcase example of simple and guarded acceptance, false accept and false reject, and what a statement of conformity must identify. Then covers who may release opinions and interpretations, recording spoken ones, and amending an issued report by a further document or a new report.

What you will be able to do

• Agree a decision rule with the customer before testing
• State the rule and the results it applies to on the report
• Amend an issued report so the change is clearly identified

Why it matters

A verdict agreed before anyone sees the number stands up when a customer's auditor adds the uncertainty and looks again.

Practice: Practice: Conformity, opinions and amendments · 3 questions

Opens with a failed air conditioner in XYZ Ltd.'s calibration room and two ways to respond. Takes the complaints process: receive, validate, investigate, decide by someone not involved, and close. Then the nonconforming work procedure with its six points, XYZ Ltd.'s risk levels, impact analysis on previous results, records under clauses 7.10.2 and 7.10.3, and corrective action. Examples include a construction-materials laboratory in Sydney.

What you will be able to do

• Handle a complaint from receipt to formal close
• Evaluate the impact of nonconforming work on previous results
• Set risk levels that decide when work is halted

Why it matters

A customer who hears about a problem from you first, with a look back at past results, has a reason to stay.

Practice: Practice: Complaints and nonconforming work · 3 questions

Opens with a software update at XYZ Ltd. that rounds water results to one decimal place without anyone noticing. Takes the six parts of clause 7.11 and what the laboratory information management system includes, computerised and non-computerised. Covers validation of the system and of each change before use, protection against unauthorised access, tampering and loss, recording failures, systems run by an external provider, and checks of calculations and data transfers, with laboratories in Sydney and Singapore.

What you will be able to do

• Validate a data system and every change before it is used
• Protect data against unauthorised access, tampering and loss
• Check calculations and data transfers in a systematic way

Why it matters

Checking every change before anyone relies on it finds a setting error within an hour, not after a week of reports.

Practice: Practice: Data and information management · 3 questions

Opens with a printed procedure in XYZ Ltd.'s van that was not updated, so eighteen gauges were calibrated at the old points. Compares Option A, with the eight elements of clauses 8.2 to 8.9, with Option B for a laboratory that has an ISO 9001 system, and what Annex B adds. Then covers policies and objectives in clause 8.2, a recommended document structure, the six document controls of clause 8.3.2, and records under clause 8.4 with a records register.

What you will be able to do

• Choose between Option A and Option B and apply it fully
• Control documents so one current version is used at the point of use
• Set controls for the identification, storage and retention of records

Why it matters

One current version at every bench and van, and records you can find, keep the whole laboratory working the same way.

Practice: Practice: Options A and B, documents and records · 3 questions

Opens with XYZ Ltd. losing customers when the only technician authorised on its dead-weight tester leaves. Explains why a laboratory considers risks and opportunities, planning actions in proportion, and why no formal risk method is required. Then covers integrating and evaluating actions, sources of improvement, seeking positive and negative customer feedback, and the corrective action steps, including asking why repeatedly, with examples from London, Hong Kong and Manila.

What you will be able to do

• Plan actions in proportion to the impact on valid results
• Seek and use customer feedback, positive and negative
• Find the cause of a nonconformity and review the action's effectiveness

Why it matters

Thinking ahead, in proportion to what could go wrong, keeps work flowing when a key person or provider is lost.

Practice: Practice: Risks, improvement, corrective actions · 3 questions

Opens with a food microbiology laboratory in New York whose management review only noted a doubtful proficiency testing result. Covers the audit programme in clause 8.8.2, weighting by importance, change and past results, and auditing by following one report back to the bench. Then the fifteen inputs of clause 8.9.2, a way to run the meeting, and the outputs of clause 8.9.3, with an example finding from XYZ Ltd.'s van.

What you will be able to do

• Plan an audit programme weighted by importance, change and past results
• Write an audit finding with the requirement and the evidence
• Turn management review inputs into decisions with owners and dates

Why it matters

An audit that finds and a review that decides let your laboratory correct gaps before an accreditation assessor sees them.

Practice: Practice: Internal audits and management reviews · 3 questions

Compares a laboratory that buys sixty procedures with XYZ Ltd., which starts from the standard. Shows how to read shall have a procedure, shall document and shall retain records. Lists the eight topics that need a procedure, four further written arrangements, the items to document, and three groups of records from clauses 6, 7 and 8, then what is your choice. A document map and a cross-reference table bring the clauses of this training course together.

What you will be able to do

• Separate required procedures and records from optional ones
• Build a cross-reference from each requirement to its document and record
• Combine related requirements into a small set of documents

Why it matters

Writing what is required and keeping every record gives a smaller set of documents that people use and an assessor can follow.

Practice: Practice: The procedures and records you need · 3 questions

Compares a water testing laboratory in Manila that applies in a rush with XYZ Ltd. in Dubai, which builds and runs its system first. Lays out the eight phases, a gap assessment and dated plan, the items that take longest, and how to choose an accreditation body. Describes in general terms the assessment, closing findings at their cause, surveillance and extending the range, then eight readiness checks and the key takeaways of the training course.

What you will be able to do

• Draft a dated road map to accreditation with an owner for each phase
• Choose an accreditation body that your customers accept
• Close an assessment finding at its cause, with evidence

Why it matters

Accreditation follows a system that already runs, so months of records behind every requirement matter more than a rushed application.

Practice: Practice: Your road map to accreditation · 3 questions