ISO/IEC 17025 Audit Preparation for Inspection Companies
A ISO/IEC 17025 audit runs in 6 stages, beginning with apply with preferred assessment dates and the proposed scope; a2la typically assigns.. Developed under ISO's Committee on Conformity Assessment (CASCO). Enforced by accreditation bodies — in the United States principally A2LA, ANAB and PJLA — which since 1 January 2026 operate under the Global Accreditation Cooperation Incorporated (Global ACI) MRA that replaced the ILAC MRA and IAF MLA.
ISO/IEC 17025:2017, the third edition, sets general requirements for the competence, impartiality and consistent operation of laboratories. It is structured as general requirements covering impartiality and confidentiality, then structural, resource, process and management system requirements, with Clause 8 offering Option A — a set of built-in management system requirements — or Option B, an ISO 9001-conforming system. For an NDT provider the practical consequence is that accreditation is granted method by method: the scope of accreditation names each technique rather than asserting general competence. A2LA accredits NDT under ISO/IEC 17025 for testing laboratories and ISO/IEC 17020 for inspection bodies, with an optional additional assessment to ASTM E543 or ASTM E1212. What separates firms that clear an audit from firms that collect findings is not the quality of the documentation but whether it describes what actually happens.
Source: ISO/IEC 17025:2017, third edition, read from the ISO-published redline preview: title page and the full table of contents showing the restructure into Clause 4 general requirements (4.1 impartiality, 4.2 confidentiality), Clause 5 structural, Clause 6 resource (6.1 general, 6.2 personnel, 6.3 facilities and environmental conditions, 6.4 equipment, 6.5 metrological traceability, 6.6 externally provided products and services), Clause 7 process (7.1 to 7.11), Clause 8 management system with Options A and B, and Annexes A and B. Currency confirmed: no 2026 revision of ISO/IEC 17025 exists, unlike ISO/IEC 17020:2026 and ISO/IEC 17024:2026. A2LA R212, Specific Requirements — Nondestructive Testing Laboratory Accreditation Program, publication date 10 September 2025, read in full — general criteria (ISO/IEC 17025 for testing laboratories, ISO/IEC 17020 for inspection bodies), the ASTM E543 / E1212 option, the mandatory ASTM E1359 self-assessment checklist submitted before the assessment, the P102 equipment calibration list quoted method by method, the F215 scope selection list, and the scope breakdown conventions with A2LA's own code-section examples. A2LA ISO/IEC 17025:2017 FAQ (a2la.org) — process steps, ~60-day assessor assignment, 30-day corrective action window, and the 7-month/6-month renewal and surveillance and 4-month/3-month annual review lead times, plus the F104 proficiency testing requirement. Deficiency statistics attributed to A2LA assessor data as reported by Ideagen and in published A2LA top-10 deficiency material — treat the percentages as A2LA-reported, not audited by us. ASTM E543-26, Standard Specification for Agencies Performing Nondestructive Testing, confirmed on the ASTM store as the current designation, last updated 21 January 2026 (A2LA's R212 still cites the older title 'Standard Practice for Evaluating Agencies Performing Nondestructive Testing'). Checked August 2026.
| Stage | What happens | What it tests |
|---|---|---|
| Stage 1 | Apply with preferred assessment dates and the proposed scope; A2LA typically assigns an assessor within about 60 days | Where the paperwork is tested against itself |
| Stage 2 | Document review by the assessor and scheduling of the on-site assessment; submit the ASTM E1359 checklist first if electing ASTM. | Where the paperwork is tested against practice |
| Stage 3 | On-site assessment of the management system plus technical witnessing of each method and technique on the requested scope, including field. | Where the paperwork is tested against practice |
| Stage 4 | Deficiency response and corrective action — A2LA works to a 30-day response window, with root cause and objective evidence | Where the paperwork is tested against practice |
| Stage 5 | Accreditation decision and issue of the scope of accreditation, listing each technique and, where appropriate, the governing code section (A2LA's. | Where the paperwork is tested against practice |
| Stage 6 | Ongoing cycle: renewal and surveillance assessments open seven months before the expiry or anniversary date with initial documents due six. | Where the paperwork is tested against practice |
| Renewal | ISO/IEC 17025 sets no accreditation interval of its own; the accreditation body's cycle governs. A2LA opens renewal assessments seven months before the expiry date with initial documents due six months prior, opens surveillance assessments on the same lead times against the anniversary date, and opens annual reviews four months before with documents due three months before — and proficiency testing documentation is required at initial, renewal, surveillance and annual review alike. Unlike ISO/IEC 17020 and ISO/IEC 17024, which were both reissued in 2026, ISO/IEC 17025:2017 remains the current edition, so there is no edition transition to plan for. | Diarised from the certificate date, not the last audit |
How long does ISO/IEC 17025 audit preparation take?
Document work — the written practice, procedures and quality manual — takes weeks. What cannot be compressed is documented experience and records history: on-the-job hours accrue in real time, and calibration and certification history cannot be back-filled. Firms that start when the audit is scheduled rather than announced clear it without findings.
What does Developed under ISO's Committee on Conformity Assessment (CASCO). Enforced by accreditation bodies — in the United States principally A2LA, ANAB and PJLA — which since 1 January 2026 operate under the Global Accreditation Cooperation Incorporated (Global ACI) MRA that replaced the ILAC MRA and IAF MLA. A2LA's NDT programme is governed by its R212 specific requirements document, with the P102 metrological traceability policy and the F215 scope selection list. look at first?
Records, not manuals. A manual states intent; records show practice. The usual opening move is to take a completed job and trace it back to the technician's certification, the instrument's calibration, the approved procedure and the report — and see whether all four reconcile.
What are the most common ISO/IEC 17025 findings?
Equipment and reference measurement standards without calibration records meeting the accreditation body's traceability policy — A2LA reports that around 38% of its nonconformances fall under clause 6.4, Externally provided products and services not evaluated or controlled — A2LA reports around 21% of nonconformances under clause 6.6, concentrated in 6.6.2, Management review outputs missing the records required by clause 8.9.3, Date of issue omitted from test reports, against clause 7.8.2.1 j). Almost all of them are evidence problems rather than capability problems: the work was done correctly and the proof was not kept, or was kept somewhere the firm could not retrieve during the audit.
Can a consultant attend the ISO/IEC 17025 audit?
Yes, and it changes the outcome. Someone who has sat through the same audit at other firms answers in the auditor's own terms, produces the right record without a search, and stops a clarification turning into a finding. The firm still owns every answer — the consultant does not speak for it.
What happens after a ISO/IEC 17025 finding?
A corrective action with a deadline, and evidence of closure at the next audit. Repeat findings are treated far more seriously than first ones, because they show the corrective-action system itself is not working.
Does ISO/IEC 17025 require a pre-audit or gap assessment?
Not as a requirement, but the arithmetic favours it: a gap assessment finds the same evidence problems the auditor would, without the finding attached, and while there is still time to fix them. Firms entering their first ISO/IEC 17025 audit blind typically collect findings that a sampling exercise would have caught.
What the auditor asks to see
- Management system documentation under Clause 8, Option A or Option B, including control of management system documents and control of records
- Scope of accreditation request — for NDT under A2LA, the F215 Scope of Accreditation Selection List, broken down technique by technique
- Completed ASTM E1359 self-assessment checklist, submitted to the assessor before the assessment, where the laboratory elects to be assessed to ASTM E543
- Test methods and NDT procedures with evidence of selection, verification and validation (7.2)
- Equipment records and calibration certificates meeting the accreditation body's traceability policy — under A2LA P102 this specifically covers MT ammeters, timers, gauss meters and white/black light meters; RT density film strips; PT pressure gauges, white/black light meters and temperature gauges; VT white light meters; leak test pressure gauges and gas sensing units
- Metrological traceability records and reference standards (6.5), and records for externally provided products and services (6.6)
- Personnel competence, training, authorisation and monitoring records (6.2)
- Proficiency testing plan and results summary — A2LA's F104 — required for initial, renewal, surveillance assessments and annual reviews
- Technical records and test reports meeting Clause 7.8, including the date of issue
- Internal audit records (8.8) and management review inputs and outputs (8.9)
Findings to close before the audit
- Equipment and reference measurement standards without calibration records meeting the accreditation body's traceability policy — A2LA reports that around 38% of its nonconformances fall under clause 6.4
- Externally provided products and services not evaluated or controlled — A2LA reports around 21% of nonconformances under clause 6.6, concentrated in 6.6.2
- Management review outputs missing the records required by clause 8.9.3
- Date of issue omitted from test reports, against clause 7.8.2.1 j)
- Personnel competence procedures and records incomplete under clause 6.2.5 — selection, training, supervision, authorisation and ongoing monitoring, not just a certificate on file
- Scope claimed more broadly than the techniques actually witnessed, since ISO/IEC 17025 accreditation is granted method by method rather than as a general competence statement
- ASTM E1359 self-assessment checklist not submitted to the assessor before the assessment where ASTM E543 assessment was elected
- Proficiency testing plan absent, or not covering every normally scheduled assessment and annual review
- NDT equipment outside the A2LA P102 list checked or standardised in a way the method being used does not actually specify
Related: the ISO/IEC 17025 overview, outsourced ASNT Level III cover, written practice development, NDT procedure development, a programme gap assessment, interim Level III cover.