5.2–5.4: Accountable management and defined scope

Clause 5.2 requires the laboratory to identify the management responsible for the overall performance of the laboratory in relation to the standard. This is not an abstract statement of who is "in charge" — it means there must be identifiable individuals accountable for the lab meeting ISO/IEC 17025 as a whole, not just for individual technical results.

Clause 5.3 requires the laboratory to define the scope of laboratory activities for which it claims conformity to the standard, and it explicitly excludes activities where the laboratory acts exclusively as an organizer of work performed by others, rather than as the entity actually carrying it out. Getting this scope right matters directly for accreditation, since an accreditation body assesses and certifies against the specific scope the laboratory has defined and claimed.

Clause 5.4 requires that laboratory activities be carried out in a way that meets the requirements of the standard itself, as well as the needs of the laboratory's customers, regulatory authorities and organizations providing recognition — a reminder that Clause 5 is not only about internal structure, but about that structure functioning to satisfy external obligations too.

5.5–5.6: Organizational structure and defined responsibilities

Clause 5.5 is where the structural picture is put on paper. The laboratory must define its organizational and management structure, its place within any parent organization, and the relationships between management, technical operations and support services. This is typically evidenced through an organizational chart together with a narrative description of how those functions relate to one another — a chart alone rarely satisfies an assessor if it isn't backed by a clear explanation of reporting lines and interfaces.

Clause 5.6 goes a level further and requires the laboratory to specify — and to make available to personnel — the responsibility, authority and interrelationships of all personnel who manage, perform or verify work affecting the results of laboratory activities. The standard sets out specific roles that management must identify people for, with the authority and resources needed to carry out their duties, including:

• implementing, maintaining and improving the management system;
• identifying deviations from the management system or from procedures for performing laboratory activities;
• initiating actions to prevent or minimize such deviations;
• reporting to laboratory management on the performance of the management system and any need for improvement;
• ensuring the effectiveness of laboratory activities;
• identifying and managing risks and opportunities associated with laboratory activities.

5.7: Communicating structure and policy

Clause 5.7 closes the loop on the structural requirements by requiring the laboratory to communicate its policies, systems, programmes, procedures and instructions to the extent necessary to enable personnel to carry out laboratory activities, and to ensure the implementation of those policies and objectives at all relevant levels within the organization. A well-drawn organizational chart and a set of clearly written role descriptions are of limited value if the people who need to follow them have never seen or understood them — this subclause is what assessors are testing when they interview staff away from management, not just when they review documents.

Practical implications for laboratories

For a small, standalone laboratory, Clause 5 can feel like a formality — of course everyone knows who the technical manager is. But "everyone knows" is not the same as "it is defined and documented," and assessors work from documentation and interviews, not assumptions. Even a small lab needs a written organizational chart, named appointments for technical management and the quality manager function, and a record showing those individuals were given the authority and resources the standard requires.

For a laboratory that sits inside a larger organization, the structural work is heavier. The lab needs to show where its boundary sits within the parent entity, how laboratory decisions are insulated from undue commercial or administrative pressure originating elsewhere in the organization, and how the interfaces between the lab and shared services — procurement, IT, HR — are managed without compromising the lab's control over its own activities and results.

Common mistakes

• Organizational chart out of date with actual staff: a chart that no longer reflects recent hires, departures or reassignments is one of the fastest findings an assessor raises.
• Technical management and quality manager roles not clearly separated on paper: even when combined in one person, the two sets of responsibilities need to be documented as distinct functions, not blended into a single vague description.
• No documented delineation for a lab embedded in a larger entity: the parent organization is named, but there is no clear statement of where the laboratory's boundary and accountability actually sit.
• Job descriptions that list tasks but not authority: Clause 5.6 asks for responsibility and authority, not just a list of duties — staff need to know what decisions they are actually empowered to make.
• Policies filed but not communicated: a quality policy or structural document exists in the management system but staff interviewed during assessment cannot describe how it applies to their own role.

This is also where a tool like IgeraIndustria fits naturally: when a new team member, an internal auditor, or an accreditation assessor asks who holds a given authority or where a particular responsibility is documented, a system that answers directly from the laboratory's own quality management system documents — organizational charts, appointment records, procedures — and cites the exact source is faster and more defensible than searching through shared folders for the current version.

Frequently asked questions about ISO 17025 Clause 5

Does a laboratory need to be a separate legal entity to be accredited?

No. Clause 5.1 allows the laboratory to be a legal entity in its own right, or a clearly defined and identifiable part of a legal entity, such as a department within a larger company or institution, provided that part can be held legally responsible for its laboratory activities.

Can one person be both the technical manager and the quality manager?

The standard does not prohibit combining these roles in one individual, which is common in smaller laboratories. What matters is that the responsibility and authority associated with each function are still separately and clearly defined and documented, rather than merged into one undifferentiated role.

What does "defined part of a legal entity" mean in practice?

It means the laboratory operating within a larger organization needs a clear, documented boundary — showing which activities, staff, facilities and decisions fall under the laboratory itself — so that accountability for laboratory activities under the standard is unambiguous even though the parent organization holds the overall legal personality.

What is included in the scope required by Clause 5.3?

Clause 5.3 requires the laboratory to define the scope of laboratory activities it claims conformity to the standard for, and it specifically excludes activities where the laboratory only organizes work carried out by another party rather than performing the work itself.

Is an organizational chart enough to satisfy Clause 5.5?

An organizational chart is normally part of the evidence, but Clause 5.5 also requires the relationships between management, technical operations and support services to be defined, and Clause 5.6 requires the responsibility, authority and interrelationships of relevant personnel to be specified and made available to them — so a chart alone, without supporting role descriptions, is usually not sufficient.

What authority must be given to the person identified in the quality manager function?

The standard requires that this function have the responsibility and authority for the management system and its compliance, along with the resources needed to carry that out, irrespective of any other duties the individual holds. The specific scope of that authority should be documented rather than left implicit.

How do assessors check compliance with Clause 5 during an assessment?

Assessors typically review organizational charts, appointment and delegation records, job descriptions and the legal-entity or parent-organization documentation, and they commonly cross-check this against staff interviews to confirm that personnel understand their own responsibilities and authority, not just that documents exist describing them.

IgeraSolutions · ISO/IEC 17025 laboratory accreditation series