ISO/IEC 17025 and Quality Management in Forensic Laboratories

ISO 9001 concerns quality management across many types of organisations. ISO/IEC 17025 adds requirements directed to testing and calibration competence. A laboratory can have a documented management system without having demonstrated competence for a particular forensic activity.

The 2017 edition of ISO/IEC 17025 groups requirements into general, structural, resource, process and management-system areas. Read the current standard and applicable programme documents for exact obligations. The categories organise the evidence; they do not themselves certify a result.

Option A addresses the standard's specified management-system requirements. Option B permits an appropriate ISO 9001-based management system that supports consistent fulfilment of the laboratory requirements. Neither option removes competence requirements, and a separate ISO 9001 certificate is not universally required.

Accreditation is recognition for a defined scope through the relevant body's assessment process. Management-system certification is a different conformity-assessment activity. An instrument calibration certificate is different again and applies to its stated measurement work.

These distinctions matter when commissioning an examination. A general quality certificate or a laboratory's reputation cannot establish that the requested matrix, method or activity is currently within accredited scope. Verify the actual published information and any restrictions.

Impartiality requires identifying and managing relevant threats to objective work. Confidentiality requires appropriate handling of information. These principles concern actual arrangements and decisions, not possession of one universal risk-register template.

Responsibilities and authorisations should be clear. Training attendance alone does not establish competence, and an accreditation logo does not authorise every staff member to perform or approve every method. Evaluate performance for the assigned activity and maintain relevant records.

Facilities and environmental conditions should support the work and prevent unacceptable contamination or interference. Conditions that matter differ between trace-element preparation, biological evidence and instrumental analysis. Monitor relevant conditions according to the method and quality system.

Equipment needs identification, suitable maintenance and calibration or checks where required for result validity. Not every item needs the same calibration schedule. An out-of-tolerance finding requires assessment of its effect on affected work, not merely a new sticker.

Standard methods require appropriate implementation and verification of performance. Modified, nonstandard or in-house methods can require validation according to the change and intended use. A published method does not become suitable for a new matrix simply by retaining its original name.

Evidence handling should maintain identity, condition and relevant continuity from receipt through sampling, storage and reporting. Traceability of specimen custody differs from metrological traceability. Both can matter, but one does not substitute for the other.

Technical records should permit review of what was done, by whom and under which conditions. Preserve relevant raw data, calculations, settings and changes. A final PDF alone may not provide the information needed to investigate a questioned result.

Quality control uses operational checks to monitor whether relevant requirements are met. Blanks, controls, duplicates, reference materials and instrument checks are examples. The selection and frequency follow risks, method and applicable requirements rather than one universal per-batch recipe.

Quality assurance provides confidence through planned, systematic activities such as competence assessment, controlled procedures, audits and review. It is ongoing and can involve analysts as well as quality staff. QC and QA are not separated simply by “daily” versus “yearly” work.

A quality-control material has an assigned role and suitable acceptance criteria. Consider its value, uncertainty, matrix and the laboratory's expected performance. The uncertainty interval on a CRM certificate is not automatically a rejection interval for another laboratory's measurement.

Control charts can reveal drift or unusual variation when their data and rules are appropriate. Westgard or other rules are not universally mandatory for every forensic assay. Understand false alarms, trends and the monitored measurement before adopting a chart rule.

When work is nonconforming, identify affected results, control further release where appropriate and investigate significance. Correction addresses an immediate problem; corrective action addresses causes and effectiveness. Repeating a specimen until one acceptable value appears is not a justified corrective-action process.

Internal audits and management review assess different aspects of the system and support improvement. Total quality management describes a broader organisational philosophy and is not a separate compulsory certificate under ISO/IEC 17025. Effectiveness is demonstrated by decisions and outcomes, not slogans.

Metrological traceability links a result to an appropriate reference through a documented unbroken calibration chain, with uncertainty contributions considered. The reference can be SI-related where technically possible or another appropriate reference where that is not possible. Traceability does not require every specimen to be measured by a national institute.

NIST and other national metrology institutes provide important standards and services. A product described as “NIST-traceable” still needs a demonstrable chain and suitable use. Buying a reference material does not automatically make every laboratory result traceable or free of bias.

Reference materials support calibration, validation, control or other defined purposes. A certified reference material has certified property information with associated uncertainty and traceability statements. Check the certificate's actual assigned values, intended use, storage and validity.

Not every property listed on a certificate is certified. NIST SRM 1577c bovine liver, for example, must be used according to its actual certificate rather than described as certifying every toxic element. Producer name and country do not create a universal primary-versus-secondary hierarchy.

Working solutions introduce preparation, purity, volume, stability and homogeneity considerations. Record the link from reference material to calibrant and result. An internal standard can correct selected response effects while leaving other traceability or bias questions unresolved.

Measurement uncertainty describes relevant dispersion associated with the result. Its evaluation and reporting follow the method and requirements. A coverage factor k=2 often supports an approximately 95-percent interval under suitable assumptions, but neither that factor nor a fixed percentage applies universally.

Check accreditation through the body's current directory and scope documents. Scope descriptions can differ in format and detail, and some programmes permit controlled flexible scopes. Ask whether the requested activity is covered rather than assume an accreditation certificate applies to the entire organisation.

In the United States, ANAB provides forensic accreditation programmes with requirements supplementing ISO/IEC 17025. This is one relevant example, not a rule that all US laboratories share one accreditor or identical legal obligations.

In the UK, UKAS accredits forensic activities under the relevant standards. The Forensic Science Regulator's statutory Code has a defined application in England and Wales. Its territorial and activity scope should not be described as a uniform law for every part of the UK.

In India, NABL accredits testing and calibration activities and publishes programme requirements and current laboratory scopes. Its current assessment cycle should be checked in the actual guidance. Historical schedules or medical-laboratory requirements should not be copied into every forensic procedure.

Canada's SCC and Australia's NATA provide further accreditation frameworks and directories. A laboratory can have recognition through a body based outside its country, so a country label alone does not determine its accreditation arrangements.

International recognition arrangements can support confidence in covered accredited activities. They do not guarantee automatic acceptance in every court or cover work outside the recognised scope. Legal reporting, disclosure and admissibility requirements depend on the applicable jurisdiction and proceeding.

A result outside accredited scope is not automatically scientifically invalid or merely presumptive. It must be described accurately and assessed on its actual basis. Conversely, an accredited result can still contain an error requiring investigation.

The record should connect specimen identity, relevant custody, sampling, method version, preparation, instrument data, calculations, controls and authorisation. Record amendments in a way that preserves what changed and why. A fixed four-level document hierarchy is not the only way to achieve control.

Technical review evaluates the analytical basis and interpretation appropriate to the work. It should consider controls, criteria, calculations and the limits of the evidence, rather than only spelling or signature completeness. Personnel authorisation and independence follow the relevant requirements.

Reports should communicate the supported finding clearly with relevant method, specimen and limitations. Statements of conformity need the applicable specification and decision rule where required. A measurement uncertainty is not itself a universal legal rule for deciding a threshold.

Expert opinion and electronic-record requirements vary by jurisdiction and have different purposes. They should not be used to invent universal transition counts, R² values or CRM schedules. Distinguish the analytical support from the legal form of a report.

A documented record helps another competent reviewer assess the result. It does not guarantee that every step was error-free. Where a problem is found, evaluate affected work and make required corrections or notifications through the applicable process.

Related reading: Sample Preparation, Purification and Instrument Calibration.

Related reading: Hyphenated Techniques: GC-MS, LC-MS and GC-FTIR.

Related reading: Method Validation, Measurement Uncertainty and Proficiency Testing.