ISO/IEC 17025 clause 8.7: correct causes and prevent repeat problems

What clause 8.7 requires in practice

Clause 8.7 applies under Option A and sets out what happens when a nonconformity occurs. The laboratory reacts to it and, as applicable, takes action to control and correct it and deals with its consequences. It then evaluates whether action is needed to remove the causes so the problem does not recur or appear elsewhere. That evaluation involves reviewing and analysing the nonconformity, determining its causes and checking whether similar nonconformities exist or could arise.

Any needed action is carried out, and its effectiveness is reviewed. Where necessary, the laboratory updates the risks and opportunities it identified during planning and changes the management system.

Corrective actions are appropriate to the effects of the nonconformities. The laboratory retains records showing the nature of each nonconformity, its causes, the actions taken and the results of corrective action.

The clause separates fixing the immediate problem from preventing its return, and it expects evidence for both.

Distinguish correction from cause removal

Correction addresses the immediate nonconformity, such as amending a report or replacing an unsuitable instruction. Corrective action addresses why the problem happened and whether it could recur or exist elsewhere. Both may be needed, but one should not be presented as proof of the other.

For technical nonconforming work, clause 7.10 governs immediate work and result decisions. Clause 8.7 provides the wider cause-and-effect process under Option A. Use the processes together rather than opening disconnected records with contradictory conclusions.

Why corrective action matters to the business

A laboratory that only corrects individual errors will meet the same errors repeatedly, each time at the cost of rework, delayed reports and customer patience. Finding the cause and checking whether it exists elsewhere is how those costs go down.

Corrective action also shows the character of the system. Assessors and customers pay attention to whether a laboratory explains why something went wrong, rather than blaming a person and moving on. Well-handled corrective action builds confidence after an incident, and its records give management real information about where the system is weak, which feeds improvement, risk review and resource decisions.

Investigate causes with evidence

Implement and test the action

Take the necessary action and review its effectiveness. Define what evidence would demonstrate that the cause has been addressed, considering the type and frequency of the activity. The absence of a repeat incident over an irrelevant short period may prove little.

Update risks and opportunities where necessary and change the management system where needed. An effective local fix may need to be applied to related methods, sites or systems if the same cause exists there. Proportionality means matching the response to the effects, not minimising work regardless of risk.

Common nonconformities with clause 8.7

Corrective action records are among the first items an assessor opens, and weaknesses show up quickly.

• Records describe the correction, such as a reissued report, but never state the cause or whether similar problems exist elsewhere.
• The recorded cause is simply operator error, and retraining is the sole action, with no look at instructions, tools or workload.
• Effectiveness is declared in the same entry that closes the action, with no later check that the problem stayed away.
• Actions in the corrective action log and in nonconforming work records give different conclusions, and risks or the system are never updated.

Two illustrative corrective actions

Retain evidence that explains the decision

Clause 8.7.3 requires records of the nonconformity, causes, subsequent actions and corrective-action results. The record should explain why the chosen action fits the cause and how effectiveness was assessed. A particular form or severity scale is optional unless required through another applicable arrangement.

Avoid unsupported root-cause labels, closure based only on training attendance, failure to examine similar work and effectiveness checks performed before the action has operated meaningfully. Corrective action is complete when the evidence supports the conclusion, not simply when a due date arrives.