Most laboratories treat Clause 5 as the easy part of the standard. It holds no equipment rules, no method validation, and no uncertainty math. Then the assessor arrives, asks who holds overall responsibility for laboratory activities, and the room goes quiet. The ISO 17025 structural requirements look simple on the page, yet they produce findings in labs that otherwise run clean operations.
ISO 17025 Clause 5 describes how your organization is built, not where it sits. Facility layout, environmental conditions, and access control belong to Clause 6. Section 5 covers legal identity, management responsibility, the range of activities you claim, and the authority you hand to your people. Most of it lands in one document: your quality manual.
Diagram of the seven ISO 17025 structural requirements in Clause 5, from legal entity through communication and change control The seven sub-clauses that make up Section 5 of ISO/IEC 17025:2017.
What the ISO 17025 Structural Requirements Actually Cover
Seven short sub-clauses make up Section 5 of ISO/IEC 17025:2017:
- 5.1 Legal entity
- 5.2 Identified management responsible for the laboratory
- 5.3 Defined range of laboratory activities
- 5.4 Conformity at every location where you work
- 5.5 Organizational structure, responsibility, and documented procedures
- 5.6 Personnel with authority and resources
- 5.7 Communication and management of change
Each one asks a question about your organization rather than your bench. Answer those questions in writing, train your leadership on the answers, and Section 5 stops being a problem.
You can check out the video blog of this post here:
Clause 5.1 and 5.2: Name the Entity, Then Name the Leadership
Clause 5.1 asks you to exist as a legally defined entity that takes responsibility for its laboratory activities. An LLC, an S corporation, or a department inside a university all satisfy this. Assessors rarely ask to see your articles of organization. A clear statement in the quality manual usually carries the requirement on its own.
Write that statement plainly. Name the company, the entity type, the registered or physical location, and confirm that the organization holds legal responsibility for its laboratory activities. If the lab sits inside a parent organization, name the parent. I have implemented systems for university labs housed in a chemistry department and in a materials engineering department. Neither lab held a separate legal entity, so both named the university. That works. It does raise control questions in Clause 6, because the lab does not own its space.
Clause 5.2 moves to leadership. Identify the management that carries overall responsibility for laboratory activities and for the results you issue. I name the roles directly: quality manager, laboratory manager, operations manager, and lead metrologist.
One technique helps smaller labs in particular. Define a quality unit in the manual, list the leadership roles that belong to it, then refer to the quality unit throughout the rest of the document. Responsibilities become shareable, and you stop rewriting the same four titles on every page.
Assessors will ask for an organization chart. Build it around job titles instead of employee names. Titles survive turnover, your documents stay current longer, and the quality system reads cleaner. If you belong to a large corporation, skip the enterprise chart. Show the laboratory activities, the leadership responsible for them, and one level of management above that leadership.
Laboratory organization chart built from job titles rather than employee names, showing quality, technical, and support reporting lines Title based org charts age better than name based charts and need far fewer revisions.
Clause 5.3: Your Scope of Accreditation Draws the Line
Clause 5.3 asks you to define and document the range of laboratory activities that conform to the standard. Your scope of accreditation carries this requirement in practice. You claim conformity only for what the accreditation body approved.
A scope document typically lists the field of calibration or testing, the quantity measured, the range, the calibration and measurement capability, the equipment or reference standards used, and the method. Location of activity appears on many scopes as well, covering fixed site, mobile, and customer site work.
Read the range column carefully, because that column creates most of the confusion. Suppose your scope covers caffeine from 0 ppm to 200 ppm. A customer submits a sample at 400 ppm. That result sits outside your accredited range, so it cannot carry your accreditation symbol. The same logic applies to a calibration point beyond your listed capability.
Labs trip here more than anywhere else in the ISO 17025 structural requirements. A certificate on the wall does not accredit everything the lab performs. Everything on the scope earns an accredited report. Everything off the scope does not, and issuing one anyway creates a nonconformity.
Two columns carry more work than their size suggests: the method column and the calibration and measurement capability column. Each CMC value rests on a defensible uncertainty budget. If you are building those budgets now, our uncertainty budget Excel template gives you a structured starting point.
Your scope arrives after your assessment, so you will not have the issued document while you build the system. Reference it in the manual anyway and link to the final version once the accreditation body issues it. You can confirm which bodies hold international recognition through the ILAC MRA signatory list, and both A2LA and ANAB publish searchable directories of accredited organizations.
Clause 5.4: The Rules Travel With You
Clause 5.4 extends your obligations to every place you perform laboratory activities. That includes permanent facilities, sites away from permanent facilities, temporary or mobile facilities, and work performed at a customer location.
Mobile and on site calibration work carries the same expectations as bench work. Your policy should say so directly, and your procedures should show how you control environmental conditions, equipment, and records in the field. Other clauses define the controls. The ISO 17025 structural requirements commit you to applying them everywhere.
Clause 5.5 and 5.6: Push Authority Into Job Descriptions
Clause 5.5 asks for three outputs. Define the organization and management structure, including the laboratory’s place in any parent organization and the relationships between management, technical operations, and support services. Specify the responsibility, authority, and interrelationship of all personnel who manage, perform, or verify work affecting results. Document your procedures to the extent needed for consistent application and valid results.
Your org chart and your job descriptions answer the first two. Your document control system answers the third.
Clause 5.6 offers the easiest compliance win in Section 5. The standard expects personnel who hold the authority and resources to carry out five activities:
- Implementing, maintaining, and improving the management system
- Identifying deviations from the management system or from laboratory procedures
- Initiating actions that prevent or minimize those deviations
- Reporting to laboratory management on management system performance and improvement needs
- Ensuring the effectiveness of laboratory activities
Write these into job descriptions, then train on them. I include item 4 in every job description from entry level technician through senior management, and item 2 in nearly as many. Corrective action, internal audit findings, and management review all feed from those two responsibilities.
Clause 5.7: Communication and Change Control
Clause 5.7 puts two duties on laboratory management. Communicate about the effectiveness of the management system and the importance of meeting customer and other requirements. Maintain the integrity of the management system when you plan and implement changes.
Management review handles most of the first duty. Many labs save everything for one annual meeting, which technically works and practically fails. Leadership disengages, quality topics feel dry next to sales and growth, and the agenda runs long. Break the review into monthly or quarterly sessions instead. Engagement improves and the required inputs get real discussion.
Your change control process handles the second duty. When you revise a procedure, add a method, or restructure a department, the system needs to absorb that change without losing traceability or training currency.
How the Quality Manual Carries the ISO 17025 Structural Requirements
The quality manual does most of the heavy lifting for Section 5. Mirror the standard’s numbering so your manual’s Section 5 answers the standard’s Clause 5. Assessors find what they need quickly, and so does your quality manager.
Keep the manual as a policy backbone rather than a procedure dump. Controlling documents belongs in its own SOP. The manual states the policy and points to that SOP and to the document master list. Every controlled document in your system should connect back to it.
The manual also has a training problem worth naming. Almost nobody reads it cover to cover. New hires skim by page two, and onboarding checklists record a signature rather than understanding. So train it in person. Walk people through the policies in a presentation, show the procedures in practice, then capture the attestation. The manual earns its keep for audits and for your quality manager, but it will never train your staff on its own.
Four Mistakes Labs Make With ISO 17025 Clause 5
- Names in the org chart. Every resignation triggers a document revision. Use titles.
- Claiming accreditation off scope. Your certificate covers listed parameters, ranges, and methods, not the whole building.
- Leaving field work out of the system. Mobile and customer site activities need the same controls as the bench.
- Responsibilities that live nowhere. If the five authorities in Clause 5.6 never appear in a job description, you have no evidence.
Your Next Step on the ISO 17025 Structural Requirements
Pull your quality manual and read its Section 5 against the seven sub-clauses above. Check three things first: whether you named the management responsible for laboratory activities, whether your org chart uses titles, and whether the Clause 5.6 authorities appear in real job descriptions. Those three gaps account for most ISO 17025 Clause 5 findings I see during gap analyses.
Verify every clause reference against your controlled copy of ISO/IEC 17025:2017 before you update your documentation.
Disclaimer: This article offers general educational guidance and does not constitute legal, regulatory, or accreditation advice. Accreditation requirements can vary by accreditation body. Review your own scope and processes with your quality manager, and confirm all clause references against your controlled copy of ISO/IEC 17025:2017.
