hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us

ISO 15190 · Medical laboratories, requirements for safety

ISO 15190 laboratory safety consulting for medical laboratories that protect their people.

Make safe practice part of how your medical laboratory works every day, alongside the quality and competence system you run for ISO 15189. ISO 15190 is not a certification standard: no certificate for it is described by ISO, so what counts is a safety programme your staff follow and the evidence that it works. Sterling's expert and experienced consultants build that programme with your laboratory team, in 60+ countries. We help our clients put it into practice and prove it.

  • One all-inclusive proposal: consulting, Effivity software, Sterling Academy access and internal auditor training, as applicable to your standard
  • Expert and experienced consultants who have advised on management systems for laboratories and other organisations across sectors and countries since 2003
  • The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements. Sterling does not certify or accredit; where your laboratory is accredited, the accreditation body assesses and decides

8,100+ client engagements in 60+ countries.

Laboratory client experience
  • Allianz
  • Emirates Flight Catering
  • Etihad Rail
  • Haier
  • Whirlpool
  • Emerson
  • Olam
  • Piramal Pharma Solutions

What it is

What is ISO 15190 and what is it used for?

ISO 15190 is the International Standard titled "Medical laboratories — Requirements for safety". ISO describes its scope in one line: it specifies requirements for safe practices in the medical laboratory. It is developed by ISO/TC 212, the same technical committee responsible for ISO 15189, the standard for quality and competence in medical laboratories, and ISO itself describes ISO 15190 as providing guidance on medical laboratory safety.

The two standards answer different questions. ISO 15189 is about whether patient results can be trusted. ISO 15190 is about whether the laboratory is a safe place to produce them, for the people who work there and for anyone else who could be affected by what happens inside it.

Current edition. ISO 15190:2020, the second edition, was published in February 2020 and replaced the 2003 edition. ISO completed a systematic review and, in November 2025, marked the 2020 edition "to be revised"; a new project, ISO/AWI 15190, is registered in the committee's work programme and will replace it. No publication date for the revised edition has been announced, so ISO 15190:2020 remains the edition to work to. ISO 15189:2022 did not absorb it: ISO 15189:2022 replaced only ISO 15189:2012 and ISO 22870:2016.

Who it is for

Who needs ISO 15190?

Any medical laboratory that examines samples from patients has a safety obligation to its own people, whether it is a hospital department, an independent or reference laboratory or a public health service. Laboratories usually come to Sterling from one of four directions:

  • Your laboratory is accredited, or seeking accreditation, to ISO 15189. You want safety handled with the same discipline as quality, and in the same management system, rather than as a separate binder kept by one person.
  • A hospital group, client or tender asks how you manage safety. Referring hospitals, corporate clients and public tenders increasingly want to see a documented safety programme, and ISO 15190 gives your answer an international reference point.
  • A regulator or health authority is looking at your laboratory. Where national rules apply, we map your programme to them and work alongside your legal and occupational health advisers; the standard does not replace the law.
  • You run several laboratories or sites. Each site has grown its own way of working, incidents are handled differently, and management cannot see one picture. A single safety approach with local ownership fixes that.

What it covers

What are the ISO 15190 requirements?

ISO describes the standard as specifying requirements for safe practices in the medical laboratory. We do not summarise its individual clauses here: a programme is built from the standard itself, which you hold under licence, and every requirement is checked against it during the gap assessment. What we can describe is the work a Sterling ISO 15190 programme covers:

  • Gap assessment: your current safety arrangements compared with ISO 15190:2020, area by area of the laboratory, with what already works kept.
  • Risk assessment: the hazards in your laboratory's own activities identified, the risks evaluated and the controls agreed with the people who do the work.
  • Procedures: safe working practices written for the way your laboratory operates, short enough to be used at the bench.
  • Training and competence: staff, students and contractors trained on the practices that apply to them, with records to show it.
  • Records: the incidents, inspections, checks and actions that show the programme operating, kept in one place.
  • Internal audit and review: the programme audited against the standard, findings closed and results taken to management.
  • Accreditation readiness: where your accreditation body looks at laboratory safety as part of your ISO 15189 assessment, the evidence it will ask for, ready before it arrives.

What does useful ISO 15190 evidence look like?

A risk assessment your staff recognise as describing their own work, procedures that match what happens at the bench, training records for everyone who enters the laboratory, incident reports that led to changes, completed inspection and check records, and audit findings closed with proof. We help you keep only the records the programme genuinely needs, held in Effivity from the start so management and assessors see a system in use.

Putting it into practice

How do you implement ISO 15190?

There is no ISO 15190 certificate to obtain. You implement the standard, show that it operates and, if your laboratory is accredited to ISO 15189, fold the programme into the same management system your accreditation body already assesses. Sterling provides consulting and readiness support; any accreditation decision belongs to the accreditation body.

  1. 01
    Agree the laboratories, disciplines and sites in scope.Confirm which areas, activities and people the programme covers, who will rely on it and any deadline set by a client, tender or assessment.
  2. 02
    Gap assessment against ISO 15190:2020.Compare current arrangements with the standard, keep what works, and agree actions, owners, dates and the resources needed.
  3. 03
    Assess the risks and put the controls in place.Complete the risk assessment with laboratory staff, write the procedures, train the people and start keeping the records.
  4. 04
    Audit the programme and close the findings.An internal audit against the standard and a management review; we raise the findings first and see them closed with evidence.
  5. 05
    Keep it working and ready for assessment.Inspections, incident follow-up, refresher training and audits continue; where the accreditation body reviews safety within ISO 15189, the evidence is current when it visits.

Check the route before you sign. If anyone offers an "ISO 15190 certificate", ask which scheme it belongs to, who accredits the issuer and whether your clients or your accreditation body will recognise it. For ISO 15189 itself, confirm that your accreditation body is a signatory to the Global ACI arrangement.

Cost

How much does ISO 15190 implementation cost?

The cost depends on the laboratory. A single-discipline laboratory with an established safety culture needs far less than a hospital service spread over several buildings with no common approach. Our commitment is a proposal that shows every part of the work, under one all-inclusive proposal.

Cost componentWhat affects it
Consulting and implementationThe disciplines, sites and activities in scope, the maturity of current safety arrangements, and whether you choose Design™ or Drive™
Accreditation bodyOnly where safety is reviewed within an ISO 15189 assessment: set by the accreditation body under its own fee structure, not by Sterling
Internal resourcesTime from the laboratory director, section heads and staff for risk assessment, procedures and training, and any changes to facilities or equipment the assessment identifies
Software and learningIncluded in a Sterling engagement: Effivity for the programme and Sterling Academy access for your people, with users and access period set out in the proposal
Continued supportInternal audits, refresher training, updates when the revised edition is published, and support under Sustain™

What moves the price

  • Number of laboratories, disciplines and sites
  • Headcount, including students, contractors and cleaning staff
  • How much of a safety system exists today and how well it is used
  • Whether the programme is integrated with an ISO 15189 system
  • Deadlines from clients, tenders or assessments

What a Sterling proposal always shows

  • Deliverables, responsibilities, assumptions and exclusions, in writing
  • Any third-party fees kept separate from Sterling's fee
  • Effivity, training and Academy access listed at no additional cost
  • Payments linked to deliverables rather than dates
  • One all-inclusive proposal. No surprises, ever

Timeline

How long does ISO 15190 implementation take?

Timing depends on how many areas the risk assessment has to cover, how quickly staff can be released for training and how long the programme needs to run before an internal audit means something. We give you a planned timeline in the proposal once the scope is clear, with milestones your team can follow in Effivity.

PhaseWhat determines the pace
Scope and gap assessmentAccess to laboratory areas, the laboratory director, section heads and existing safety records
Risk assessment and proceduresThe number of disciplines and activities, and the time staff can give while the laboratory keeps running
Training and recordsShift patterns, the number of people to train and how quickly records start to build up
Internal audit and reviewThe programme operating long enough to audit, then management's availability for review

If an ISO 15189 assessment or client deadline is coming, tell us at the start and we will plan backwards from it.

Your engagement

What your ISO 15190 engagement includes

Your agreed scope covers everything the laboratory needs for a working safety programme, from one team, under one all-inclusive proposal. Choose Design™, where we guide and your team does the work, or Drive™, where we manage the work with your people; either way Sustain™ keeps the programme current afterwards, and Automate™ runs it in Effivity.

  • Scope, gap assessment and plan

    Areas, activities, owners and dates agreed before work starts.

  • Risk assessment and procedures

    Built with your laboratory staff, on Sterling's template sets, for the way your laboratory actually works.

  • Effivity ISO & GRC software

    Risks, incidents, inspections, training and audits in one workspace, included with the engagement at no additional cost.

  • Training for everyone

    Internal auditor training for your audit team, as applicable to your standard, and preferential Sterling Academy access, including complimentary awareness training for your people as part of the engagement.

  • Internal audit and management review

    Conducted or facilitated as agreed, with findings closed with evidence.

  • Accreditation readiness

    Where your ISO 15189 assessment reviews laboratory safety, the evidence prepared and support through the visit.

Sterling does not certify or accredit; where your laboratory is accredited, decisions remain with the accreditation body.

How Sterling implements ISO and GRC standards

Effivity · ISO and GRC software, included in every engagement

How Effivity helps you run, automate and simplify an ISO 15190 safety programme.

Every Sterling ISO 15190 engagement includes Effivity, the ISO and GRC automation platform built by the Sterling group and used in 50+ countries. Your consultant sets up the workspace within the agreed scope, so risk assessments, procedures, incidents, inspections, training records, audits and management review sit together, and the laboratory's safety programme runs in daily work instead of in a cupboard. Sterling consulting clients get their Effivity subscription included with the engagement, at no additional cost.

Effivity: Context of the Organisation dashboard with issues, interested parties and scope
Effivity · Context of the Organisation dashboard
Scope

Laboratories, areas and activities

The areas and activities the programme covers, with an owner for each, updated when the laboratory changes.

Risk

Risk assessments and controls

Hazards, risk ratings and controls by area, with review dates and actions tracked to closure.

Documents

Procedures and safe working practices

Versions, approvals and distribution, so the bench always has the current procedure.

People

Training and competence

Who has been trained on what, and when refreshers are due, linked to Sterling Academy.

Incidents

Incidents and near misses

Reported, investigated and closed with the cause found and the change made.

Checks

Inspections and equipment checks

Scheduled inspections with findings, owners and due dates, visible to section heads.

Evaluation

Internal audit and management review

Audit programmes, findings, follow-up and review decisions recorded in one place.

Across the system

Your own forms and reports

Fields, workflows and reports shaped to your laboratory, without code, and shared with your ISO 15189 system.

What this means when someone asks to see your safety programme

Management, clients and assessors ask the same things: show me the risk assessment, the training records, the last incidents and what changed, and the audit findings. In Effivity each answer is a screen with dates, owners and evidence attached. After implementation, Sustain™ runs in the same workspace, so the programme keeps going between visits.

In your engagement

  • Subscription included with the engagement, at no additional cost
  • Set up by your Sterling consultant within the agreed scope
  • Existing records and registers migrated, not retyped
  • Admin and user training for your team
  • Modules for QMS, OHSMS, ISMS and more when you integrate other standards

Sterling Academy · e-learning for laboratory teams

Help every member of the laboratory understand how safety is managed.

Sterling Academy provides e-learning for whole teams and for the people who run the system: video lessons, practice checkpoints, a final exam and a numbered Certificate of Completion for each learner, verifiable online. Sterling consulting clients receive preferential Sterling Academy course access and special pricing through their Sterling consultant, including complimentary awareness training for their people as part of the engagement.

  • Awareness training for every member of staff, with records of who completed it
  • Internal auditor training for the people who will audit the programme, as applicable to your standard, as part of the engagement
  • Progress by section and a training status report for management
  • New starters trained as they join, so records stay current
  • A Sterling consultant available when a learner has a question

Why Sterling

Why choose Sterling for ISO 15190?

Laboratory safety works when it is part of the same system as quality, not a parallel set of files. Sterling builds ISO 15190 into the way your laboratory already runs, including your ISO 15189 system where you have one, so one team, one set of records and one audit programme cover both.

60+ countries since 2003

Management system consulting across sectors and regions, with offices in 21 countries and one engagement team accountable for your programme wherever your laboratories are.

All-inclusive proposal

Consulting, Effivity, training and Academy access in one proposal, with any third-party fees shown separately. No surprises, ever.

A programme staff actually follow

Short procedures, practical training and records kept in software, so safety becomes part of the working day rather than an extra task.

Expert and experienced consultants

Consultants who have built management systems for laboratories and other organisations since 2003, and who work with your laboratory director and section heads to get it right the first time.

Sterling vs the rest: the full comparisonExplore laboratory client experience

The Sterling Promise

What the Sterling Promise means for ISO 15190

100%on-time completion · success · 8,100+ client engagements

We stay with you until the agreed ISO 15190 outcome is reached: a safety programme implemented, audited and in daily use, with support through any assessment that reviews it. Clear explanations, practical delivery, included software and staff learning leave your laboratory with lasting capability.

The engagement identifies the standard, scope, outcome and responsibilities. Your laboratory supplies accurate information and puts the agreed controls into use. ISO 15190 carries no certificate; where your laboratory is accredited, the accreditation body makes its own decisions. Our commitment concerns the agreed support, not a promise that no incident will ever occur.

FAQs

Frequently asked questions about ISO 15190

Can a laboratory be certified to ISO 15190?

No certificate for ISO 15190 is described by ISO, and we do not know of an accredited certification scheme for it. Laboratories implement the standard and demonstrate it through their records, internal audits and, where they are accredited to ISO 15189, their accreditation body's assessment.

What is the difference between ISO 15189 and ISO 15190?

ISO 15189 sets requirements for quality and competence in medical laboratories and is the standard laboratories are accredited against. ISO 15190 sets requirements for safe practices in the medical laboratory. Both come from ISO/TC 212, and many laboratories run them in one management system.

Is ISO 15190 being revised?

Yes. ISO decided in November 2025 that the 2020 edition should be revised, and a new project, ISO/AWI 15190, is registered to replace it. No publication date has been announced, so laboratories should keep working to ISO 15190:2020; under Sustain™ we update your programme when the new edition appears.

Does ISO 15190 replace our national laboratory safety rules?

No. An International Standard does not override national law or a health authority's requirements. We map your programme to both and work alongside your legal and occupational health advisers, who remain responsible for legal interpretation.

Can ISO 15190 be combined with ISO 45001?

Yes, where it suits the organisation. A hospital or laboratory group with an ISO 45001 occupational health and safety system can use the same risk, incident and audit processes for the laboratory, with ISO 15190 addressing laboratory practice and ISO 45001 providing a certifiable management system.

Keep exploring

More on ISO 15190 and related standards

More in Laboratories, inspection & accreditation

Talk to a consultant

Plan your ISO 15190 laboratory safety programme with confidence.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice