ISO 17025 Clause 8: Management System Requirements (Option A vs Option B)
Clause 8 of ISO/IEC 17025:2017 sets out the management system a laboratory must run alongside its technical competence, and it is unusual among ISO standards in offering two distinct routes to conformity. Option A requires a laboratory to build a free-standing, lab-specific management system that meets clause 8's requirements directly. Option B allows a laboratory whose management system already conforms to ISO 9001:2015 — and which also satisfies clause 8's intent — to use that system instead, provided the technical requirements in clauses 4 to 7 are still met in full.
What Clause 8 actually covers
Clause 8 sits at the end of ISO/IEC 17025:2017, after the technical requirements in clauses 4 to 7 (impartiality, confidentiality, structural requirements, resources, process requirements, and results reporting). It addresses the organisational backbone that supports technically valid results over time: management system documentation, control of management system documents, control of records, actions to address risks and opportunities, improvement, corrective actions, internal audits, and management reviews.
These are the same categories of activity that ISO 9001 certified organisations will recognise, which is precisely why ISO/IEC 17025:2017 introduced the two-option structure. A laboratory does not need to build these elements from scratch if it already operates them at a higher organisational level — but it does need to prove that the coverage is genuine, not assumed.
Option A: a laboratory-specific management system
Under Option A, the laboratory establishes, documents, implements and maintains a management system that is capable of supporting and demonstrating consistent achievement of clause 8's requirements, addressing:
- Management system documentation describing the policies, processes and procedures used to fulfil the standard's requirements.
- Control of the documents that form part of the management system, including version control and approval.
- Control of records, both technical and management, with appropriate retention and protection.
- Addressing risks and opportunities associated with laboratory activities — a requirement introduced explicitly in the 2017 revision.
- An improvement process for identifying and acting on opportunities to strengthen the management system.
- Corrective action when nonconformities are identified, including root cause analysis and verification that the action taken was effective.
- A programme of internal audits at planned intervals covering all management system elements and laboratory activities.
- Management reviews conducted at planned intervals to ensure the system remains suitable, adequate and effective.
This is the option most standalone laboratories choose, particularly independent testing and calibration labs that have no parent organisation already running ISO 9001. It is self-contained: everything the laboratory needs to demonstrate is built and owned within the laboratory's own management system, with nothing borrowed from elsewhere.
Option B: building on an existing ISO 9001 system
Option B is available to a laboratory that has established and maintains a management system in accordance with the requirements of ISO 9001:2015, and where that system is capable of supporting and demonstrating the consistent fulfilment of clause 8's requirements. In practice, this route suits laboratories that operate as part of a larger organisation already certified to ISO 9001 — an in-house testing lab inside a manufacturing group, for example, or a calibration department within a certified engineering firm.
The appeal of Option B is flexibility: rather than duplicating document control, internal audit and management review processes that already exist at the corporate level, the laboratory integrates into that existing structure. This can reduce duplication of paperwork and align laboratory governance with wider organisational quality practices. It is not, however, a shortcut or a lighter-touch route — the laboratory still has to demonstrate, to the satisfaction of its accreditation body, that the ISO 9001 system genuinely covers everything clause 8 requires for laboratory activities specifically, not just for the organisation in general.
The point that cannot be overstated: Option B does not touch clauses 4-7
This is the single most important clarification in the whole Option A/B discussion, and it is worth stating without qualification: conformity to ISO 9001:2015 does not, on its own, demonstrate the competence of a laboratory to produce technically valid data and results. Nothing in Option B changes that. ISO 9001 is a generic quality management standard; it says nothing about measurement uncertainty, method validation, equipment calibration traceability, or the competence of personnel performing specific tests or calibrations — because that is not what it is designed to assess.
Clauses 4 to 7 of ISO/IEC 17025:2017 exist specifically to establish and verify that technical competence, and they apply in full regardless of whether a laboratory chooses Option A or Option B for its management system. Choosing Option B affects only how a laboratory satisfies clause 8's management-system requirements; it has no bearing on impartiality (clause 4), confidentiality (clause 5), structural and resource requirements (clause 6), or process requirements covering method selection, validation, measurement uncertainty, and results reporting (clause 7). Every laboratory accredited to ISO/IEC 17025, whichever option it selects, is assessed against the full weight of clauses 4 to 7.
How a laboratory decides between Option A and Option B
The decision is largely structural rather than technical. Key questions a laboratory and its management typically work through include:
- Does the laboratory sit inside a wider organisation that already holds ISO 9001 certification? If not, Option A is usually the more direct path, since there is no existing system to build on.
- Is the existing ISO 9001 system actually structured to cover laboratory-specific activities? A corporate ISO 9001 system built around sales, service delivery or general operations may need meaningful extension before it can credibly demonstrate coverage of clause 8's requirements for laboratory work.
- What does the accreditation body expect? Assessors will scrutinise an Option B claim closely, checking that risk-based thinking, document control, records, corrective action, internal audit and management review are demonstrably applied to laboratory activities — not simply assumed because a certificate exists elsewhere in the organisation.
- How much administrative duplication does the laboratory want to avoid? Where a strong, well-integrated ISO 9001 system already exists, Option B can genuinely reduce duplicated audit and review cycles.
Many independent, standalone laboratories find Option A simpler in practice, precisely because it avoids the extra step of proving that a broader organisational system adequately reaches down into laboratory-specific activities. Laboratories embedded within larger certified organisations more often find Option B worth the additional integration effort.
Practical impact on day-to-day operations
Whichever option is chosen, the practical demands on laboratory staff are similar: documents need to be current and controlled, records need to be retrievable, corrective actions need a documented root cause and a verified close-out, and internal audits and management reviews need to happen on schedule with real evidence behind them. The difference under Option B is where the audit trail for some of these activities lives — potentially in a corporate quality system rather than a laboratory-only one — and how clearly the laboratory can show an assessor that its specific activities are genuinely captured within it.
This is where retrieval speed becomes an operational issue as much as a documentation one. During an assessment, being able to produce the exact controlled document, the specific corrective action record, or the internal audit report covering a particular activity — quickly and with the precise reference — makes the difference between a smooth assessment and one that drags on sampling. IgeraIndustria is built for exactly this kind of retrieval: it connects to a laboratory's own QMS documents, whichever option they sit under, and answers staff or assessor questions by citing the exact source document and clause, rather than producing a generated summary that has to be cross-checked separately.
- Option B claimed without demonstrable coverage. A laboratory states it follows Option B, but cannot show that risk and opportunity management, internal audits, or management reviews are actually applied to its specific testing or calibration activities.
- Corrective actions closed without verification. A nonconformity is logged and marked resolved, but there is no evidence the corrective action's effectiveness was actually checked afterwards.
- Internal audit programmes that skip technical activities. Audits cover general administrative processes but never sample the technical areas covered by clauses 4 to 7, leaving a gap between the management system and the work it is meant to oversee.
- Management reviews that are procedural rather than substantive. A review meeting is held and minuted, but does not actually assess whether the management system remains suitable, adequate and effective against real performance data.
- Document control gaps. Superseded procedures remain in circulation on the lab floor, or records cannot be located within a reasonable time during the assessment.
- Confusing ISO 9001 conformity with technical competence. An organisation assumes its existing ISO 9001 certificate says something about its measurement capability — it does not, and assessors will test clauses 4 to 7 independently regardless of which management system option is in place.
Frequently Asked Questions
What is the main difference between Option A and Option B under ISO/IEC 17025:2017 Clause 8?
Option A requires a laboratory to build and maintain its own free-standing management system that meets clause 8's requirements directly. Option B allows a laboratory whose management system already conforms to ISO 9001:2015 — and which also satisfies clause 8's intent — to use that system instead, as long as it demonstrably covers laboratory-specific activities.
Does choosing Option B mean a laboratory does not need to meet the technical requirements of ISO/IEC 17025?
No. Clauses 4 to 7, covering impartiality, confidentiality, structural and resource requirements, and process requirements including method validation and measurement uncertainty, apply in full regardless of which management system option is chosen. Option B only affects how clause 8's management-system requirements are satisfied.
Does ISO 9001 certification prove a laboratory is technically competent?
No. ISO 9001 conformity alone does not demonstrate the technical competence needed to produce valid results. That competence is established and assessed through clauses 4 to 7 of ISO/IEC 17025:2017, which exist specifically for that purpose and are independent of the clause 8 option selected.
Which laboratories typically choose Option B?
Option B tends to suit laboratories operating within a larger organisation that already holds ISO 9001 certification, such as an in-house testing or calibration department inside a manufacturing or engineering group, where integrating with an existing system can reduce duplicated document control, audit and review processes.
Is Option A more common for standalone testing or calibration laboratories?
Yes, independent laboratories with no parent organisation running ISO 9001 generally find Option A more straightforward, since it avoids having to prove that a broader corporate system genuinely reaches down into laboratory-specific activities.
What do assessors look for when a laboratory claims Option B?
Assessors check that the ISO 9001 system is not just present at the organisational level but is demonstrably applied to the laboratory's own activities — including risk and opportunity management, document and record control, corrective action, internal audit and management review specific to the laboratory's technical work.
Can a laboratory switch between Option A and Option B?
A laboratory can change its management system approach, but doing so is a significant change that should be planned with its accreditation body, since it affects how conformity to clause 8 will be assessed at the next surveillance or reassessment visit.
Is this article accreditation or legal advice?
No. This article is provided for general informational purposes only and does not constitute accreditation, legal, or professional advice. Requirements can vary by accreditation body and are subject to change; laboratories should consult a qualified accreditation consultant or their relevant accreditation body before making decisions about their management system approach.
Disclaimer: This content is informational and does not replace professional accreditation consultancy. ISO/IEC 17025 requirements and their interpretation by accreditation bodies can evolve; always confirm current requirements with a qualified consultant or your accreditation body.
