ISO/IEC 17025:2017 structure: what each clause covers

• Clause 4 — General: impartiality and confidentiality.
• Clause 5 — Structural: legal identity, management, scope of activities, organisation.
• Clause 6 — Resources: personnel, facilities and environment, equipment, metrological traceability, externally provided products and services.
• Clause 7 — Process: review of requests, method selection and validation, sampling, handling of items, technical records, evaluation of measurement uncertainty, ensuring validity of results, reporting, complaints, nonconforming work, control of data and information management.
• Clause 8 — Management system: documentation, control of documents and records, risks and opportunities, improvement, corrective actions, internal audits, management reviews.

Most technical questions from customers — 'is this traceable', 'what is the uncertainty', 'why does the certificate say that' — are answered by clauses 6.5, 7.6 and 7.8 respectively.

Where to look for the question you actually have

The standard is short but not linear, and the clause you want is rarely the one whose title matches your question. This is the lookup table most people build for themselves eventually.

Two structural things the 2017 edition changed

First, risk. The 2017 edition replaced much of the prescriptive preventive-action machinery of the 2005 version with a requirement to address risks and opportunities (8.5) and to manage risks to impartiality (4.1). This is why a modern assessment asks what could go wrong here rather than only show me the procedure.

Second, the decision rule. Statements of conformity now require the rule to be documented and agreed, which moved the treatment of uncertainty in pass/fail decisions from an optional refinement to a requirement. If you have one thing to check on an old certificate template, check that.

Options A and B for the management system

Clause 8 offers two routes. Option A is the set of management-system requirements written out in the standard itself — documentation, control of records, risks and opportunities, improvement, corrective action, internal audit, management review. Option B is available to a laboratory that already maintains a management system conforming to ISO 9001 in a way that supports and demonstrates fulfilment of clauses 4 to 7. Option B is not a lighter obligation; it is the same obligations discharged through an existing system, and the laboratory still has to show clauses 4 to 7 are met.

Read clause 7 first if you are new to the standard. It is the process clause — the work itself, from taking the request to issuing the report — and clauses 4 to 6 exist to make it possible.