Overview
A gap assessment is the foundation of any ISO/IEC 17025:2017 accreditation journey. Before a laboratory can build compliant procedures or submit an application to an accreditation body, it needs a clear picture of where it stands today against the standard’s requirements across Clauses 4 through 8.
This skill walks through every major clause area of ISO/IEC 17025:2017 in a structured interview, gathering information about current laboratory practices and comparing them against what the standard requires. Each clause area receives a maturity rating on a 0-5 scale, from nonexistent practices through to optimized processes. Findings are classified by severity so the laboratory knows which gaps are critical blockers versus observations for future improvement.
The output is a complete gap assessment report with clause-by-clause findings, a structured findings register in JSON format for tracking, and a prioritized remediation roadmap that sequences corrective actions by severity and dependency so the lab can plan its path to accreditation.
What It Covers
- Clause 4 — General Requirements — impartiality commitments and confidentiality arrangements
- Clause 5 — Structural Requirements — legal entity status, organizational structure, management responsibilities
- Clause 6 — Resource Requirements — personnel competence, facilities, equipment, metrological traceability, externally provided products and services
- Clause 7.1-7.4 — Process Requirements — review of requests, selection and validation of methods, sampling, handling of test items
- Clause 7.5-7.8 — Technical Records — technical records, measurement uncertainty, validity of results, reporting
- Clause 7.9-7.11 — Complaints & Nonconforming Work — complaints handling, nonconforming work, data and information management
- Clause 8.1-8.4 — Management System Documentation — management system options, documentation, control of documents and records
- Clause 8.5-8.9 — Continual Improvement — actions to address risks, improvement, corrective actions, internal audits, management reviews
- Maturity scoring — 0 (nonexistent) through 5 (optimized) with consistency validation against findings severity
- Remediation roadmap — prioritized actions with owners, timelines, and dependencies
Output Documents
| Document | Purpose |
|---|---|
| Gap Assessment Report | Clause-by-clause findings with maturity scores and evidence |
| Findings JSON | Structured data with clause_ref, severity, current_state, required_state, remediation_action |
| Remediation Roadmap | Prioritized corrective actions with owners, timelines, and sequencing |
Example Conversation
You: We need to run a gap assessment for our lab. We’re LabTech Analytical, 12 analysts in Austin TX, we do drinking water and soil testing. We’re going for A2LA accreditation and honestly we’ve never done anything formal with quality systems before.
Agent: I’ll run you through a structured gap assessment covering all of ISO/IEC 17025:2017. Let’s start with Clause 4 — General Requirements. This covers impartiality and confidentiality.
Do you have any documented commitments to impartiality? For example, a statement from top management, or any process to identify risks to impartiality from commercial pressures, relationships, or organizational structure?
You: Not really. We have an informal understanding that we report what we find, but nothing written down. A few of our bigger clients are municipal water districts and they bring in a lot of revenue — I could see how that might be a concern. For confidentiality we just tell people not to share client data, no signed agreements or anything.
Agent: That gives me a clear picture for Clause 4. Let me move to Clause 5 — Structural Requirements.
Is LabTech a legally identifiable entity? What does your organizational structure look like — who’s responsible for the quality system, and is there a defined technical manager and quality manager role?
You: Yes we’re an LLC. I’m the lab director and I’ve been doing everything. We don’t have a quality manager — that’s probably going to be a problem. We have a senior chemist, Sarah, who could potentially take that on but she doesn’t have any QMS training.
Agent: That’s a common starting point for labs your size. Let me continue through Clause 6 — Resources. Tell me about your analysts: how many are there, what are their qualifications, and how do you decide who can run which methods?
You: 12 analysts total. Mix of BS and MS in chemistry and environmental science. We train them on the job — someone shadows an experienced analyst for a few weeks and then they’re on their own. No formal competency records or anything like that. For EPA methods we follow the SOPs we got from our old lab director, but I’m not sure when those were last updated.
Agent: I have enough to assess Clauses 4 through 6 now. Let me ask about your equipment and calibration. How do you manage your instruments — do you have an equipment list, calibration schedules, maintenance records?
You: We have a spreadsheet with our major instruments — ICP-MS, GC-MS, two IC systems, a few spectrophotometers. Calibration is mostly done by the vendor service contracts. We do daily calibration checks on the ICP-MS. I don’t think we have formal records for everything though.
Agent: What about your processes — how do you handle incoming samples, report results, deal with complaints or problems?
You: Samples come in, we log them in our LIMS, run the tests, and the analysts enter results. I review everything before it goes out. If a client calls with a question we handle it, but we don’t have a formal complaints process. When something goes wrong — like a QC failure — the analyst usually just reruns the batch. We don’t document it.
Agent: That’s very helpful. Let me draft the full gap assessment now.
Running
clause_gap_detector…Clause Gap Detector — PASS: All 8 major clause areas assessed.
Running
maturity_rating_tool…Maturity Rating — PASS: All scores consistent with findings severity.
Here’s your maturity summary:
Clause Area Maturity Key Gaps 4 — General Requirements 1 — Initial No documented impartiality commitment, no confidentiality agreements 5 — Structural Requirements 1 — Initial No quality manager role, no documented organizational structure 6 — Resource Requirements 1 — Initial No competence matrix, no formal training records, no equipment register 7.1-7.4 — Process Requirements 2 — Managed LIMS exists but methods not formally validated, no sampling procedures 7.5-7.8 — Technical Records 1 — Initial No measurement uncertainty budgets, no formal validation records 7.9-7.11 — Complaints & NC Work 0 — Nonexistent No complaints procedure, QC failures not documented 8.1-8.4 — Management System Docs 0 — Nonexistent No quality manual, no document control, no records management 8.5-8.9 — Continual Improvement 0 — Nonexistent No internal audits, no management reviews, no corrective action process Overall maturity: 0.75 average — Initial. Your lab has the technical capability but lacks the management system infrastructure that A2LA will require. The remediation roadmap prioritizes quick wins first: appoint a quality manager, write the quality manual, and establish document control — everything else builds on those.
Sample Output Excerpt
Below is a representative excerpt from the generated Gap Assessment Report showing findings for Clause 6 (Resource Requirements) and the remediation roadmap summary.
Clause 6 — Resource Requirements
Maturity: 1 — Initial
| # | Clause Ref | Finding | Severity | Current State | Required State | Remediation Action |
|---|---|---|---|---|---|---|
| F-12 | 6.2.2 | No documented competence criteria for laboratory personnel | Major | Analysts trained informally through shadowing; no written criteria per role | Documented competence criteria for each activity including education, training, experience, and demonstrated skills | Define competence criteria per role; build competence matrix mapping each analyst to authorized methods |
| F-13 | 6.2.3 | Training records incomplete | Major | No formal training records maintained; on-the-job training not documented | Records of education, training, skills, experience, and authorization for each person | Implement training log; retrospectively document existing analyst qualifications |
| F-14 | 6.2.5 | No authorization process for personnel | Major | Analysts begin independent work after informal shadowing period | Formal authorization based on demonstrated competence, with records | Create authorization procedure with competency assessments and sign-off |
| F-15 | 6.3.1 | Environmental monitoring not documented | Minor | Lab temperature controlled by HVAC but not monitored or recorded | Documented monitoring program with parameters, limits, and out-of-limit procedures | Install temperature/humidity loggers; define acceptance limits per method |
| F-16 | 6.4.3 | Equipment register incomplete | Major | Spreadsheet exists but missing calibration status, acceptance criteria, unique IDs | Complete equipment register with unique ID, calibration status, dates, acceptance criteria | Expand spreadsheet to full equipment register; assign unique IDs to all instruments |
| F-17 | 6.4.6 | No intermediate check procedures | Minor | Daily calibration checks on ICP-MS only; other instruments not covered | Documented intermediate check procedures for all critical equipment | Define intermediate checks per instrument type with acceptance criteria |
Remediation Roadmap — Summary
| Priority | Action | Clause | Owner | Timeline | Dependencies |
|---|---|---|---|---|---|
| 1 | Appoint Quality Manager | 5.4 | Lab Director | Week 1 | None |
| 2 | Draft Quality Manual and Quality Policy | 8.1, 8.2 | Quality Manager | Weeks 2-4 | P1 |
| 3 | Establish document control procedure | 8.3 | Quality Manager | Week 3 | P2 |
| 4 | Write impartiality commitment and confidentiality policy | 4.1, 4.2 | Quality Manager | Week 4 | P2 |
| 5 | Build competence matrix and training records | 6.2 | Lab Director + QM | Weeks 4-8 | P3 |
| 6 | Complete equipment register with calibration program | 6.4 | Senior Chemist | Weeks 4-8 | P3 |
| 7 | Validate test methods and document uncertainty budgets | 7.2, 7.6 | Senior Chemist | Weeks 6-12 | P5, P6 |
| 8 | Implement complaints and nonconforming work procedures | 7.9, 7.10 | Quality Manager | Weeks 6-8 | P3 |
| 9 | Conduct first internal audit | 8.8 | External Consultant | Week 14 | P2-P8 |
| 10 | Conduct first management review | 8.9 | Lab Director | Week 16 | P9 |
Estimated timeline to A2LA readiness: 16-20 weeks with dedicated effort
Extension Tools
clause_gap_detector
Validates that all 8 major ISO/IEC 17025:2017 clause areas are assessed in the gap assessment document. Run after drafting findings to ensure no clause area was overlooked.
| Check | What It Looks For | Severity if Missing |
|---|---|---|
| General Requirements (Clause 4) | References to impartiality, confidentiality | ERROR |
| Structural Requirements (Clause 5) | References to legal entity, organizational structure | ERROR |
| Resource Requirements (Clause 6) | References to personnel, facilities, equipment | ERROR |
| Process Requirements 7.1-7.4 | References to requests, methods, sampling, handling | ERROR |
| Process Requirements Technical 7.5-7.8 | References to records, uncertainty, validation, reporting | ERROR |
| Process Requirements Management 7.9-7.11 | References to complaints, nonconforming work, data control | ERROR |
| Management System Documentation 8.1-8.4 | References to management system, documentation, control | ERROR |
| Management System Improvement 8.5-8.9 | References to actions, audits, management reviews | ERROR |
| Severity classifications | Presence of critical/major/minor/observation labels | ERROR |
maturity_rating_tool
Validates maturity scores (0-5 scale) for consistency with findings. Flags contradictions where a high maturity score coexists with critical findings, and checks that each finding has the required data fields.
| Check | What It Validates | Severity if Missing |
|---|---|---|
| Maturity ratings present | At least one maturity score in the document | ERROR |
| Score range | All scores between 0 and 5 | ERROR |
| Score-finding consistency | No maturity 4-5 with critical findings in same area | ERROR |
| clause_ref field | Each finding references a clause | ERROR |
| current_state field | Each finding documents the current state | ERROR |
| required_state field | Each finding documents what the standard requires | ERROR |
| remediation_action field | Each finding includes a corrective action | ERROR |
| Severity classifications | critical/major/minor/observation labels present | ERROR |
Getting Started
Activate the ISO 17025 Gap Assessment skill. This is typically the first skill to run in an ISO 17025 accreditation program — it establishes the baseline and prioritizes all subsequent work.
Have this information ready:
- Laboratory identity — name, location, legal entity type, number of staff
- Scope of testing/calibration — what you test, which methods you use (EPA, ASTM, ISO, etc.)
- Current practices — how you handle samples, train staff, manage equipment, report results, deal with problems
- Organizational structure — who does what, reporting lines, whether you have quality management roles
- Equipment overview — major instruments, how calibration is handled, any existing registers or spreadsheets
- Existing documentation — any SOPs, procedures, or quality documents already in place
The agent guides you through a clause-by-clause interview, then drafts the full gap assessment report with maturity scores and a prioritized remediation roadmap. Both extension tools validate the output automatically — the clause gap detector confirms all clause areas were assessed, and the maturity rating tool checks that scores are consistent with findings.