ISO/IEC 17025 with other accreditation standards of the ISO 17000 series (and unlike most ISO standards for management systems), third party auditing ("assessment") of the laboratory is normally carried out by the national organization responsible for accreditation. Laboratories are therefore "accredited" under ISO/IEC 17025, rather than "certified" or "registered" (c.f. ISO 9000 series). In short, "accreditation" differs from "certification" by adding the concept of a third party (Accreditation Body (AB)) attesting to technical competence within a laboratory in addition to its adherence and operation under a documented quality system, specific to a Scope of Accreditation. In order for accreditation bodies to recognize
ISO/IEC 27006 ISO/IEC 27006 ISO/IEC 27006, part of a growing family of ISO/IEC Information Security Management System (ISMS) standards, the 'ISO/IEC 27000 series', is an information security standard published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It is titled "Information technology - Security techniques - Requirements for bodies providing audit and certification of information security management systems". ISO/IEC 27006 lays out formal requirements for accredited organizations which certify other organizations compliant with ISO/IEC 27001. It effectively replaces EA 7/03 (Guidelines for the Accreditation of bodies operating certification/ registration of. Information Security Management Systems). The standard helps