ISO/IEC 17025 expects labs to address risks and opportunities in their management system. In calibration programs, this means choosing where to spend control effort so high-impact failures are prevented early and low-impact assets are managed efficiently.
Need a printable risk register worksheet?
Use this one-page worksheet to score calibration risks, assign actions, and document ownership for audit-ready follow-up.
Risk and Opportunity Workflow (ISO 17025 Context)
- Identify risk events: what can go wrong in measurement reliability, traceability, timing, or reporting.
- Score and prioritize: use a simple matrix and classify into action bands.
- Define controls: interval rules, interim checks, environmental controls, additional review gates.
- Assign ownership: every action has an owner and due date.
- Review effectiveness: reassess score after corrective actions and trend cycles.
Simple Risk Scoring Matrix
Use a 1-5 score for each factor. Keep scoring criteria short and clear so teams apply it consistently.
| Factor | Definition | Scale |
|---|---|---|
| Severity (S) | Impact if measurement error is undetected | 1 (low) to 5 (critical) |
| Likelihood (L) | Probability of drift/failure before next calibration | 1 (rare) to 5 (frequent) |
| Detectability (D) | Chance issue is caught before impact | 1 (easy detect) to 5 (hard detect) |
Risk score formula: R = S × L × D
- R 1-20: monitor, standard controls
- R 21-50: strengthen controls and review interval decision
- R 51-125: priority action with escalation and short review cycle
Sample Calibration Risk Register
| Instrument | Risk event | S/L/D | Score | Action | Owner |
|---|---|---|---|---|---|
| Balance A-12 | Drift after relocation | 5/3/3 | 45 | Reduce interval, add weekly verification | Metrology Lead |
| Gauge G-33 | Slow directional drift | 3/2/2 | 12 | Monitor trend, keep interval | Quality Engineer |
| Thermometer T-08 | Late calibration due to scheduling gaps | 4/3/4 | 48 | Automate due-date alerts and backup owner | Lab Manager |
Linking Risk Ratings to Interval Choices
Risk scoring becomes valuable only when it drives actual calibration policy decisions.
- Low risk: keep standard interval; extension possible with stable trend evidence.
- Medium risk: hold or slightly reduce interval; tighten extension criteria.
- High risk: shorten interval, add interim checks, and trigger management review.
For the underlying interval policy logic, use the dedicated guide: How to determine calibration intervals.
Combine risk prioritization with audit readiness
After scoring risks, map actions into your full audit evidence pack using the ISO 17025 audit preparation guide.
Worked Example: High-Criticality Balance Fleet
Scenario: A small lab has 8 analytical balances used for release testing. Recent events include one out-of-tolerance finding and two relocations.
- Baseline interval was 6 months for all units.
- Risk scoring raised 3 balances to medium-high risk due to critical use and recent movement.
- Action plan: reduce those 3 units to 3 months, add weekly check weights, and require supervisor review for any drift slope increase.
- Other 5 units remain at 6 months with monthly trend check.
This keeps control effort focused where business impact is highest while avoiding unnecessary calibration load on stable instruments.
Track risk decisions and actions per instrument
LabCalibrate gives you one timeline for calibration events, failures, risk actions, and evidence-ready exports for audits.
FAQ
What does risk-based calibration mean under ISO/IEC 17025?
It means calibration decisions are prioritized using consequence, probability, and detectability rather than relying on one fixed interval for every instrument.
How do we score calibration risk in a small lab?
A practical approach is a 1-5 score for severity, likelihood, and detectability, then multiply to rank priorities and required controls.
Can risk score affect calibration intervals?
Yes. Higher risk scores generally require shorter intervals, stronger interim checks, and tighter approval gates for any extension decision.
What should be in a calibration risk register?
Include the instrument, risk event, score, controls, owner, due date, and status so actions are traceable and auditable.