When a testing laboratory is ISO 9001:2015 certified, what requirements are not met for 17025? We are 9001:2015 certified, but comparing the two standards, it seems that we meet all the requirements of 17025. Is this correct?
In the case such as yours, where a testing laboratory has ISO 9001:2015 certification; not all ISO 17025:2017 requirements are met. ISO 17025:2017 does accommodates what is called Option B (as per ISO 17025:2017 Annex B Management system options). This means that your ISO 9001:2015 certification is considered to cover the management system requirements of ISO 17025:2017, namely clauses 8.2 to 8.9. What is missing is the requirements to demonstrate your laboratory’s competence to produce technically valid results and data. You will need to develop your management system to include the requirements of ISO 17025:2017 clauses 4 to 7, being the General, Structural, Resource and Process requirements. You may however, already covered some of these ISO 17025 requirements in your ISO 9001 management system; in which cases I suggest you do a gap assessment to determine what needs to be added.
Regarding meeting all requirements, if the requirements set out in clauses 4-7 are added to an existing ISO 9001:2015 QMs, this would meet the requirements, along with the required procedures and records?
The answer to your question is most likely no, but depending on the extent of your ISO 9001:2015 management system and the planned ISO 17025 scope. As mentioned above, a laboraory will need to develop the management system to include the requirements of ISO 17025:2017 clauses 4 to 7. The clauses do not stand alone – they are intertwined, which means you need to make sure the requirements of clauses 4 to 7 are covered by, or added to, the existing management system processes and activities.
Once you have established the scope of accreditation, i.e. which tests are going to be included for accreditation; a gap assessment should be done. Here you will perform an audit to see to what extent the existing activities, processes, procedures and records (created for ISO 9001:2015) meet the requirements for ISO 17025. For example, you may have an audit program (ISO 17025:2017 clause 8.8) that meets ISO 9001:2015 requirements; however if technical audits had not been included, or your scope has changed, you may not have audited the method validations (clause 7.2) or monitored the environmental conditions (clause 6.3) of a test which is part of your ISO 17025 accreditation scope. Another example is risks and opportunities (clause 8.5), where assessments would be required and the register updated, to cover ISO 17025 activities.