ISO/IEC 17020 for Maritime and offshore Inspection Firms
NDT and inspection service providers that issue statements of conformity rather than raw measurements — in-service inspection, third-party witness and shop surveillance, field and rope-access crews, and firms bidding public or regulated work that requires accredited inspection. It fits providers whose product is a judgement about an item, and it is the standard clients name when they want the provider's independence proven rather than asserted.
For maritime and offshore firms, ISO/IEC 17020 compliance turns on the operator qualification file the surveyor opens first. ISO/IEC 17020 is enforced by Developed by the ISO Committee on Conformity Assessment, and accepts employer-based personnel certification. In this sector approval names one class society and does not transfer, so a yard working two flags carries two audit cycles.
ISO/IEC 17020 contains requirements for the competence and impartiality of bodies performing inspection and for the consistent operation of their inspection activities. The third edition, ISO/IEC 17020:2026, was published in March 2026 and cancels and replaces the 2012 second edition. The headline change for an inspection firm is that the categorisation of independence collapses from types A, B and C to type A and type non-A, with the independence requirements sitting in normative Annex A and impartiality requirements applying equally to both types. The finding recorded most often is: Independence type asserted without an Annex A justification that matches actual ownership, group companies and commercial relationships — the type A / type non-A.
Source: ISO/IEC 17020:2026 itself, read from the ISO-published preview: title page (third edition, 2026-03), Foreword (prepared by CASCO with CEN/CLC/JTC 1; cancels and replaces the second edition ISO/IEC 17020:2012; the listed main changes including type A / type non-A, the new.
| Factor | What applies | Why it matters |
|---|---|---|
| Sector | Maritime and offshore | Approval names one class society and does not transfer, so a yard working two flags carries two audit cycles |
| Regime | ISO/IEC 17020, Conformity assessment — Requirements for bodies performing inspection | Enforced by Developed by the ISO Committee on Conformity Assessment |
| Personnel basis | Employer-based — a contracted Level III can sign the written practice | Decides whether outsourced cover can carry the signature |
| Record this sector is judged on | The operator qualification file the surveyor opens first | What the auditor opens before anything else |
| Documents demanded | Management system documentation under Clause 8 — policies and responsibilities, documented information, records control, Independence declaration and type A / type non-A justification against normative Annex A, supported by the actual ownership and commercial relationships, Impartiality risk register with evidence of ongoing monitoring of activities and of personnel relationships (4.1.3), and top management commitment to impartiality (4.1.5), Legally enforceable confidentiality commitments extending to employees, contractors, committee members and anyone acting on the body's behalf (4.2.1, 4.2.4), Legal entity evidence and arrangements covering liabilities arising from operations (5.2) | Each has to survive being traced from a finished job |
| Methods in scope | RT, MT, UT, PAUT, PT, ET | Each needs its own procedure and qualified personnel |
| Renewal | ISO/IEC 17020 sets no accreditation interval of its own — the accreditation body's cycle governs, with surveillance assessments. | Diarised from the certificate date, not the last audit |
What does ISO/IEC 17020 require of a maritime and offshore firm?
NDT and inspection service providers that issue statements of conformity rather than raw measurements — in-service inspection, third-party witness and shop surveillance, field and rope-access crews, and firms bidding public or regulated work that requires accredited inspection. For this sector the binding detail is the operator qualification file the surveyor opens first, because approval names one class society and does not transfer, so a yard working two flags carries two audit cycles.
Can an outsourced Level III cover ISO/IEC 17020 in this sector?
Yes. ISO/IEC 17020 accepts employer-based certification, so a contracted Level III can write and sign the written practice, approve procedures and administer examinations — provided they hold each method they sign for. The employer still owns the records and the outcome.
What gets a maritime and offshore firm a finding under ISO/IEC 17020?
Independence type asserted without an Annex A justification that matches actual ownership, group companies and commercial relationships — the type A / type non-A change makes previously comfortable type B and C claims worth re-arguing, Impartiality threats identified once at implementation and never monitored on an ongoing basis, including the relationships of personnel (4.1.3), Inspector remuneration linked to inspection outcomes or pass rates, which 4.1.7 treats as a direct nonconformity. These are records failures rather than capability failures — the work was done correctly and the evidence could not be produced, which under ISO/IEC 17020 is treated the same as not having done it.
Which methods matter most for maritime and offshore under ISO/IEC 17020?
RT, MT, UT, PAUT, PT, ET. Each needs its own approved procedure and personnel qualified in that specific method — a Level III qualified in one method cannot approve another, and signing outside your own method list is among the most common findings involving a Level III.
How long does ISO/IEC 17020 readiness take in this sector?
Documents take weeks. What cannot be compressed is documented experience and records history — on-the-job hours accrue in real time and calibration history cannot be back-filled. Approval names one class society and does not transfer, so a yard working two flags carries two audit cycles, which is why firms that start when the audit is announced rather than scheduled collect findings.
How often is ISO/IEC 17020 renewed?
ISO/IEC 17020 sets no accreditation interval of its own — the accreditation body's cycle governs, with surveillance assessments between reassessments. What is fixed is the edition deadline. Firms that diarise from the certificate date rather than the last audit avoid the lapse that forces a full reapplication.
Personnel certification under ISO/IEC 17020
ISO/IEC 17020 names no personnel certification scheme. Clause 6.1 requires the body to define competence criteria and to select, train, authorise and monitor personnel against them; the inspection scheme or the client's specification decides what evidence counts, and Clause 3.3 notes that an inspection scheme can specify independence requirements. In most industrial NDT work an employer-based SNT-TC-1A or CP-189 programme satisfies clause 6.1, which means an outsourced Level III can hold the technical authority — writing competence criteria, approving procedures, signing qualifications.
What an auditor asks to see
- Management system documentation under Clause 8 — policies and responsibilities, documented information, records control
- Independence declaration and type A / type non-A justification against normative Annex A, supported by the actual ownership and commercial relationships
- Impartiality risk register with evidence of ongoing monitoring of activities and of personnel relationships (4.1.3), and top management commitment to impartiality (4.1.5)
- Legally enforceable confidentiality commitments extending to employees, contractors, committee members and anyone acting on the body's behalf (4.2.1, 4.2.4)
- Legal entity evidence and arrangements covering liabilities arising from operations (5.2)
- Personnel competence criteria, authorisation records, training and ongoing monitoring records (6.1)
- Facilities and equipment records including calibration and traceability (6.2), and control of externally provided products and services including subcontracted NDT (6.3)
- Inspection methods and procedures, inspection records, and inspection reports or inspection certificates (7.2, 7.4, 7.6)
- Contract review records and control of data and information (7.1, 7.5)
- Appeals and complaints registers, internal audit records, management review records and corrective action records (7.7, 7.8, 8.5, 8.6, 8.7)
Related: the ISO/IEC 17020 overview, ISO/IEC 17020 audit preparation, outsourced ASNT Level III cover, a programme gap assessment and independent report validation.
Speak to an ASNT NDT Level III
Atlantis NDT provides ASNT Level III consulting, NDT training to SNT-TC-1A and ISO 9712, inspection management software and independent report validation. Request a free consultation and we will return a tailored quote — affordable, accessible and fully customizable to your programme.