I get some version of this question from almost every lab client at some point: "We're already ISO 9001 certified — why does the accreditation body want more?" It's a fair question, and it usually comes from someone who assumes quality management is quality management, full stop. It isn't. ISO 9001 and ISO/IEC 17025 solve different problems, and understanding exactly where they overlap and where they diverge will save you from either over-building your management system or walking into an accreditation audit unprepared.
Let me lay out what each standard actually governs, where the two align closely enough that one can support the other, and where a testing or calibration lab has to build something ISO 9001 never asked for.
What Each Standard Actually Governs
ISO 9001:2015 is a generic quality management system standard. It applies to any organization — a manufacturer, a hospital, a consulting firm, a lab — and its purpose is to demonstrate that the organization can consistently provide products or services that meet customer and regulatory requirements. It says nothing about how to run a titration, calibrate a torque wrench, or estimate the uncertainty of a measurement. It's about the management system wrapped around the work, not the technical competence to do the work.
ISO/IEC 17025:2017 is a different kind of document entirely. It's jointly published by ISO and the International Electrotechnical Commission — see the official ISO/IEC 17025:2017 listing — and it applies specifically to testing and calibration laboratories, not to organizations in general. Its formal title is "General requirements for the competence of testing and calibration laboratories," and that word "competence" is the whole ballgame. ISO/IEC 17025 exists to prove that a lab is technically capable of producing valid, defensible results, not just that it has a functioning quality system.
That distinction shows up immediately in how each standard gets verified. ISO 9001 compliance is confirmed through certification, issued by a certification body. ISO/IEC 17025 compliance is confirmed through accreditation, issued by an accreditation body operating under ISO/IEC 17011:2017 (the standard governing accreditation bodies themselves) and typically holding signatory status with the International Laboratory Accreditation Cooperation Mutual Recognition Arrangement. In the US, that's bodies like A2LA and ANAB. Accreditation involves a technical assessment of your methods, your equipment, and your staff's competence, on top of the management system review. Certification does not go that deep.
The Core Difference: Generic QMS vs. Technical Competence
If you strip away the clause numbers, the difference comes down to this: ISO 9001 asks "does your organization have a system that reliably produces conforming outputs?" ISO/IEC 17025 asks that same question and then adds "and can you prove, with data, that your specific technical results are accurate within a known margin of error?"
That second question is where labs run into trouble if they assume their existing ISO 9001 certificate covers them. It doesn't, because ISO 9001 was never built to ask it.
Side-by-Side Comparison
| Element | ISO 9001:2015 | ISO/IEC 17025:2017 |
|---|---|---|
| Scope | Any organization, any sector | Testing and calibration laboratories only |
| Verification method | Certification | Accreditation |
| Verifying body | Certification body | Accreditation body (ILAC MRA signatory) |
| Core question | Does the QMS reliably meet requirements? | Is the lab technically competent to produce valid results? |
| Measurement uncertainty | Not addressed | Required — clause 7.6 |
| Method validation | Not addressed | Required — clause 7.2.2 |
| Proficiency testing / interlab comparison | Not addressed | Required as a validity check — clause 7.7.2 |
| Metrological traceability | Not addressed | Required — clause 6.5 |
| Internal audits | Required — clause 9.2 | Required — clause 8.8 (Option A) |
| Management review | Required — clause 9.3 | Required — clause 8.9 (Option A) |
| Risk-based thinking | Required — clause 6.1 | Required — clause 8.5 |
| Can one satisfy the other? | N/A | Clause 8, Option B, allows an ISO 9001-conformant management system to satisfy Option A's intent |
Where the Two Standards Actually Meet: Option A and Option B
This is the part most people don't know, and it's the single most useful fact in this whole comparison. Clause 8 of ISO/IEC 17025:2017 gives a laboratory two paths for building its management system. Option A spells out detailed requirements across clauses 8.2 through 8.9 — document control, control of records, addressing risks and opportunities, improvement, corrective action, internal audits, and management review. Option B allows a laboratory that has established and maintains a management system in accordance with ISO 9001 to be considered as satisfying the intent of Option A. The condition: that management system must also support and demonstrate consistent fulfillment of the technical requirements in clauses 4 through 7.
In plain terms: if you're already running a solid ISO 9001 system, you don't have to duplicate document control, internal audit, and management review processes from scratch under Option A. Option B lets your existing ISO 9001 backbone carry the management-system half of ISO/IEC 17025. What it can't do is carry the technical half. Clauses 4 through 7 — impartiality, structural requirements, resources, and process requirements — sit entirely outside ISO 9001's scope, and no amount of ISO 9001 conformance substitutes for them.
In my experience, most accredited labs lean toward Option B — less because it's easier on paper than because it avoids running two parallel management systems that say the same thing in different words. If you're already ISO 9001 certified and pursuing ISO/IEC 17025 accreditation, Option B is almost always the more efficient path, and it's worth telling your accreditation body up front which option you're pursuing before the assessment starts.
The Technical Requirements ISO 9001 Never Asked For
Here's where the real work lives, and where I see the most underestimated scope during ISO/IEC 17025 implementation.
-
Measurement uncertainty. Clause 7.6 of ISO/IEC 17025:2017 requires laboratories to identify the contribution of measurement uncertainty for every calibration, and for test results where the method and the client's use of the result require it. ISO 9001 contains no equivalent requirement anywhere in its text. A lab moving from ISO 9001 to ISO/IEC 17025 has to build an uncertainty budget for every method in scope, something most quality managers coming from a generic manufacturing background have never had to do.
-
Method validation. Clause 7.2.2 requires validation of non-standard methods, laboratory-developed methods, and standard methods used outside their intended scope, with documented evidence of accuracy, precision, and measurement uncertainty appropriate to the intended use. ISO 9001's closest cousin is clause 8.3, design and development controls, but that clause is written for product development generally and doesn't require the kind of statistical validation a lab needs to defend a test method.
-
Proficiency testing and interlaboratory comparisons. Clause 7.7.2 requires labs to monitor the validity of their results, and it explicitly names participation in proficiency testing or interlaboratory comparisons as an acceptable monitoring method. ISO 9001 has nothing resembling this. There's no requirement anywhere in the generic standard for an organization to compare its output against independent, blind reference results.
-
Metrological traceability. Clause 6.5 requires labs to establish and maintain traceability of measurement results to the International System of Units, typically through an unbroken chain of calibrations. ISO 9001's equivalent, clause 7.1.5, is much thinner — it requires that monitoring and measuring resources are suitable and, where relevant, calibrated or verified against measurement standards traceable to international or national standards. It's the same underlying idea, applied with far less rigor.
-
Impartiality and confidentiality. Clause 4 of ISO/IEC 17025:2017 requires labs to identify risks to impartiality on an ongoing basis and to manage those risks actively — commercial, financial, or other pressures that could compromise the objectivity of a result. ISO 9001 doesn't address impartiality at all, because most ISO 9001-certified organizations aren't in the business of producing results that a third party will rely on as objective fact.
Do You Need Both?
For most standalone testing or calibration labs, the answer is no — accreditation under Option B (see above) already delivers the management-system credibility of ISO 9001 alongside the technical credibility the market wants from a lab. Running a separate ISO 9001 certificate alongside full ISO/IEC 17025 accreditation is usually redundant unless a specific customer or contract requires the ISO 9001 certificate by name.
Where dual certification does make sense is inside a larger organization where the lab is one function among several. A contract manufacturer with an in-house QC lab, for example, might hold ISO 9001 certification at the site level to cover manufacturing, warehousing, and customer service, while the lab itself pursues ISO/IEC 17025 accreditation for specific test methods that customers or regulators require to be accredited. In that structure, the two standards aren't competing — they're covering different parts of the same operation, and Option B still lets the lab's slice of the management system nest inside the site-wide ISO 9001 system rather than duplicating it.
Common Implementation Pitfalls
The mistake I see most often is a lab assuming its ISO 9001 document control system, corrective action process, and internal audit program will transfer wholesale to ISO/IEC 17025 with no changes. Some of it will. But document control under ISO/IEC 17025 clause 8.3 has to reach technical records — calibration certificates, validation data, uncertainty budgets — not just the procedures and forms an ISO 9001 auditor typically samples. If your document control system was scoped for quality manual and SOP control only, it's going to need to expand.
The second mistake is treating the technical assessment as an afterthought. Accreditation bodies send technical assessors, usually subject matter experts in the specific test methods in scope, and they will ask to see raw data, not just signed-off reports. A lab that spent all its preparation effort polishing management-system procedures and none of it validating methods and calculating uncertainty will pass the paperwork review and fail the technical one.
The third mistake, and it's a subtle one, is picking Option A when Option B (see above) would have saved months of duplicated work — usually because nobody on the implementation team realized it was available, or because the lab's existing ISO 9001 system felt too weak to lean on.
If you're weighing which standard your lab actually needs, or you're trying to figure out whether your current ISO 9001 system can carry Option B, that's a scoping conversation worth having before you commit resources in the wrong direction. You can see how we approach ISO 9001 implementation or reach out through our contact page to talk through your specific lab's situation.
FAQ
Can a lab be ISO 9001 certified instead of pursuing ISO/IEC 17025 accreditation? Yes, but it won't satisfy customers or regulators who specifically require accredited test results. ISO 9001 certifies that a management system functions consistently; it says nothing about the technical validity of test or calibration results, which is what ISO/IEC 17025 accreditation is built to demonstrate.
Does ISO/IEC 17025 accreditation automatically include ISO 9001 certification? No. Accreditation to ISO/IEC 17025 and certification to ISO 9001 are separate conformity assessment activities issued by different types of bodies. A lab accredited under Option B has a management system that meets the intent of ISO 9001, but it doesn't hold an ISO 9001 certificate unless it separately pursues one.
What's the difference between Option A and Option B in ISO/IEC 17025:2017 clause 8? Option A lists detailed, standalone management system requirements in clauses 8.2 through 8.9. Option B allows a laboratory whose management system already conforms to ISO 9001 to satisfy Option A's intent, as long as it also fulfills the technical requirements in clauses 4 through 7. Option B doesn't reduce the technical scope — only the management-system documentation burden.
Do I need both ISO 9001 and ISO 17025 for my lab? Usually not as two separate certificates. Most standalone labs get more value from ISO/IEC 17025 accreditation alone, using Option B to absorb the ISO 9001-equivalent management requirements. Dual certification tends to make sense only when the lab is part of a larger site that needs ISO 9001 for non-laboratory functions.
What's the difference between accreditation and certification? Certification is issued by a certification body and confirms a management system meets a standard's requirements. Accreditation is issued by an accreditation body operating under ISO/IEC 17011:2017 and involves a technical evaluation of competence, in addition to the management system review — which is why ISO/IEC 17025 uses accreditation rather than certification.
Last updated: 2026-08-22
Jared Clark
Principal Consultant, Certify Consulting
Jared Clark is the founder of Certify Consulting, helping organizations achieve and maintain compliance with international standards and regulatory requirements.