ISO/IEC 17025 clause 7.8.6: make defensible conformity statements
Clause 7.8.6 controls statements that a result conforms to a specification or standard. The laboratory must document and apply the decision rule, considering the associated risk where required. The report must identify the relevant results, the requirements met or not met and the rule used unless it is inherent in the requested specification or standard.
What clause 7.8.6 requires in practice
Clause 7.8.6 governs any statement that a result meets, or fails to meet, a specification or standard, for example a pass or fail remark. Before such a statement is given, the laboratory documents a decision rule and applies it. The rule explains how measurement uncertainty is taken into account when a measured value sits near a limit, and it considers the risk of wrongly accepting or wrongly rejecting an item, along with the statistical assumptions behind the rule.
A note in the clause says no further risk consideration is needed when the customer, a regulation or a normative document already prescribes the rule.
When the statement is reported, it has to make three things clear: which results it covers, which specification, standard or parts of it are met or not met, and which decision rule was used, unless that rule is built into the requested specification or standard.
The clause does not choose a rule for the laboratory. It requires that a rule exists, is written down, is applied consistently and is visible in the report.
Distinguish the limit from the decision rule
A specification states the requirement. A decision rule describes how measurement uncertainty is accounted for when deciding conformity. Two laboratories can compare similar measured values with the same limit yet reach different conclusions if they use different rules. The basis therefore needs to be established clearly, not selected after the result is known.
Clause 7.1 requires the specification and rule to be defined when conformity is requested. Unless inherent in the requested specification or standard, the selected rule must be communicated to and agreed with the customer. Connect contract review with report preparation so the agreed basis is actually used.
Consider the risk associated with the rule
Clause 7.8.6.1 refers to risks such as false acceptance and false rejection and the statistical assumptions involved. Use competent technical judgement and appropriate guidance for the application. The standard does not prescribe one universal guard band or numerical rule for every result.
Where the customer, regulations or normative documents prescribe the rule, the standard notes that a further consideration of its risk level is unnecessary. This qualification does not remove the need to apply the rule correctly, document it and report the conclusion appropriately.
Make the statement specific
Identify which results the statement covers and which specification, standard or part is met or not met. State the decision rule unless the permitted inherent-rule condition applies. Avoid a broad “product approved” statement when only a particular characteristic was tested.
Use personnel authorised for the relevant analysis and reporting. If the rule or customer request is unclear, resolve it through the appropriate review rather than improvising a conclusion to meet the dispatch deadline. A conformity statement is distinct from an opinion or interpretation under clause 7.8.7.
Why defensible conformity statements matter to the business
Customers act on pass and fail words. They release product, accept equipment, or file evidence with a regulator. If two laboratories can reach opposite verdicts on the same measured value because each uses a different hidden rule, trust in both suffers.
A documented rule agreed at the start gives the laboratory a clear answer when a customer challenges a borderline result. It also reduces the pressure to improvise at dispatch time, which is when commercial urgency can shape a technical judgement. For many customers in regulated sectors, a transparent rule is the difference between a report that is accepted and one that is queried.
How to implement clause 7.8.6
Treat the decision rule as part of the service definition, agreed before work begins and then applied without exception.
- Identify every service where customers ask for a pass or fail remark, and record which specification or limit applies to each.
- Decide whether the customer, a regulation or a normative document already prescribes the rule, and note where it does.
- Where the rule is the laboratory's own choice, have technically competent people select it, record the reasoning on false acceptance and false rejection, and confirm the statistical assumptions are suited to the measurement.
- Include the rule in the contract review conversation so the customer knows and agrees to the basis.
- Configure the report template so each statement names the results covered, the requirement tested and the rule used.
- Limit release of conformity statements to authorised personnel and sample a few reports each period to confirm the rule was applied as written.
Two illustrative conformity decisions
A calibration laboratory reports a value near a tolerance boundary. It applies the agreed rule using the relevant uncertainty and reports the specific requirement and result to which the conclusion applies. It does not decide that rounding alone makes the instrument acceptable.
A construction customer requests a statement under a specification containing its own decision rule. The laboratory identifies that basis, applies it correctly and makes the scope of the statement clear. It does not substitute its preferred rule without resolving the contract and technical implications.
Evidence and common mistakes
Retain the documented rule, relevant customer agreement, calculation or evaluation and report. Ensure the technical record supports the conclusion. A decision-rule field in the report template is useful only if the selected value matches the actual work.
Avoid choosing rules after seeing results, confusing uncertainty with tolerance, issuing an unrestricted conformity claim for partially tested characteristics, or assuming the customer understands an unexplained “pass”. Neither a simple nor a complex rule is inherently suitable for every application.
Frequently asked questions
Does ISO/IEC 17025 require one decision rule for all laboratories?
No. The rule must fit the applicable requirements and be documented and applied correctly, with the necessary risk consideration, customer agreement and reporting.
Must we evaluate additional risk when a regulator prescribes the rule?
The standard notes that further risk-level consideration is unnecessary where the rule is prescribed by regulations, the customer or normative documents. Correct application and reporting remain necessary.
Is a conformity statement the same as product certification?
No. A statement relates specified results to particular requirements using a decision rule. Product certification is a distinct conformity-assessment activity with its own arrangements.
Turn this requirement into reliable laboratory practice
Sterling can help connect contract review, uncertainty understanding and conformity reporting in your laboratory system. Bring a difficult pass/fail case to a free consultation to identify process and training needs, with technical rules determined by competent authorised specialists.
Build the team's understanding through Measurement Uncertainty (ISO/IEC 17025:2017). Discuss the relevant scope, employee learning and agreed access to Effivity ISO & GRC automation software with Sterling; laboratory technical decisions remain with competent, authorised personnel.
ISO/IEC 17025 requirements hub · Reporting overview · Agree the requested service · Measurement uncertainty · Technical authorisation