EN ISO/IEC 17067:2026
(Main)Conformity assessment - Fundamentals of and guidelines for conformity assessment schemes (ISO/IEC 17067:2026)
- Abstract
This document specifies the fundamental principles and concepts of conformity assessment schemes (programmes) and provides guidelines for understanding, developing, operating or maintaining them.
- Status
- Published
- Publication Date
- 03-Nov-2026
- Technical Committee
- CEN/CLC/TC 1 - Criteria for conformity assessment bodies
- Current Stage
- 6060 - Definitive text made available (DAV) - Publishing
- Start Date
- 04-Nov-2026
- Completion Date
- 04-Nov-2026
EN ISO/IEC 17067:2026 is the CEN adoption of ISO/IEC 17067 on conformity assessment schemes. It gives the fundamentals and guidance for understanding, developing, operating, and maintaining schemes - sets of rules and procedures that identify what is assessed, against which requirements, and by which methodology.
EN ISO/IEC 17067:2026 is written as guidance: it uses should, may, and can rather than mandatory shall language. That matters in practice because the document helps users design or interpret a scheme, but it is not a body-specific requirements standard.
What does EN ISO/IEC 17067:2026 specify?
EN ISO/IEC 17067:2026 specifies the basic principles and concepts of conformity assessment schemes, sometimes called conformity assessment programmes, and explains how to understand, develop, operate, maintain, and discontinue them. It covers schemes used at international, regional, national, sub-national, sector, or value-chain level, and it treats “scheme” and “programme” as synonyms unless context says otherwise.
The document is organized in a familiar progression: scope, references, terms, scheme concepts, the functional approach, scheme content, scheme owner responsibility, the lifecycle of a scheme, and categorization of scheme types. The annexes then give practical examples for different object types and methods.
| Annex | What it covers |
|---|---|
| A | Schemes that include product, process, or service certification |
| B | Schemes that include management system certification |
| C | Schemes that include certification of persons |
| D | Programmes that include validation or verification |
| E | Schemes that include inspection |
| F | Schemes that include testing |
| G | Schemes that include accreditation |
| H | Schemes that include peer assessment |
| I | Schemes that include declaration |
| J | Schemes that include multiple types of objects of conformity assessment |
| K | Typical characteristics of schemes |
What are the key requirements of EN ISO/IEC 17067:2026?
How a scheme is defined
Clause 3 defines a conformity assessment scheme as a set of rules and procedures that describes the object, identifies the specified requirements, and provides the methodology for conformity assessment. In practice, a usable scheme needs all three parts: what is being assessed, what it must meet, and how the assessment is done.
Clause 4 explains that the object of conformity assessment can be a product, process, service, management system, claim, person, body, organization, or a combination of these. That matters because the scheme has to match the object being assessed, and different objects can require different requirements and methods.
Clause 4 also says specified requirements should be chosen so that, when fulfilled, they address the needs and concerns relevant to the scheme, and where applicable they should be written in terms of results or outcomes. For a scheme owner, this means the criteria should be clear enough to test or review, not just broad policy statements.
How the functional approach is used
Clause 5 presents conformity assessment as a sequence of functions: selection, determination, review, decision, attestation, and surveillance. This structure matters because it shows how evidence becomes a statement of conformity.
Clause 5.3 links the selection and determination steps to methods such as testing, inspection, validation, and verification, and it also points to decision rules and reporting details where they are needed. In practice, the scheme has to say how evidence is gathered and what information must be recorded before a decision is made.
Clause 5.4 treats the decision as the defining activity of conformity assessment, with attestation as the issue of a statement of conformity based on that decision. That means a scheme should be clear about who reviews the evidence, who decides, and what statement is issued afterward.
Clause 5.5 explains surveillance as repeated conformity assessment activities used to keep a statement of conformity valid. In practical terms, this is the part that supports ongoing confidence when the object, the process, or the conditions can change over time.
What a scheme should contain
Clause 6 says a scheme should address sampling, the use of prior conformity assessment results, and outsourcing of conformity assessment activities. That matters because a scheme needs rules for when earlier evidence can be reused and when outsourced work is acceptable.
Clause 6 also covers licensing and control of certificates, marks, or other statements of conformity, plus reporting to the scheme owner. These rules are important for preventing misuse and for giving the owner enough information to improve or control the scheme.
Clause 6.4 requires the scheme to define how complaints and appeals are handled. In practice, users need a route to challenge a decision or raise dissatisfaction with the body involved.
What the scheme owner is responsible for
Clause 7 places responsibility on the scheme owner for development, maintenance, management, and integrity of the scheme. The owner is expected to be able to take responsibility for the scheme’s objectives and content, manage risks and liabilities, and keep the scheme documented and controlled.
Clause 7 also covers confidentiality, competition law, periodic review, and change management. That matters because a scheme is not static - its rules need to stay aligned with the standards and conditions it is meant to serve.
How the lifecycle is handled
Clause 8 covers identifying the need for a scheme, developing it with interested parties, documenting it, and discontinuing it. Before a scheme is ended, the document says to consider the original need, contractual duties, transition arrangements, communication, and the information published by the owner and participants.
What terms does EN ISO/IEC 17067:2026 define?
- Conformity assessment scheme / conformity assessment programme - a set of rules and procedures that describes the object, the specified requirements, and the methodology for conformity assessment.
- Conformity assessment system - a set of rules and procedures for managing similar or related conformity assessment schemes.
- Object of conformity assessment - the entity to which specified requirements apply, such as a product, process, service, person, or body.
- Specified requirement - a stated need or expectation, often found in a regulation, standard, or technical specification.
- Attestation - the issue of a statement, based on a decision, that fulfilment of specified requirements has been demonstrated.
- Surveillance - repeated conformity assessment activities used to maintain the validity of the statement of conformity.
- Scheme owner - the person or organization responsible for the development and maintenance of a scheme.
- Member / participant - a member helps develop, revise, or approve the rules; a participant implements or operates under them.
Who uses EN ISO/IEC 17067:2026?
EN ISO/IEC 17067:2026 is intended for people and organizations that own, operate, or are considering a conformity assessment scheme. The introduction names governments and regulatory authorities, industry and trade associations, procurement and purchasing agencies, NGOs, consumer organizations, and bodies that perform conformity assessment activities.
In practice, that means it is relevant to scheme designers, certification bodies, accreditation bodies, inspection bodies, testing laboratories, validation/verification bodies, and peer assessment groups. It is also useful for buyers and regulators who need to understand how a scheme is structured and what kind of assurance it can provide.
What changed in EN ISO/IEC 17067:2026 from the previous edition?
EN ISO/IEC 17067:2026 replaces ISO/IEC 17067:2013. The foreword states that the second edition has been technically revised.
The stated changes are:
- the scope was expanded to apply to conformity assessment schemes in general;
- the title was updated to match the broader scope;
- the clauses were rephrased so they apply to schemes in general;
- clauses were added where needed to give specific guidance, for example for product certification schemes.
Which standards are used with EN ISO/IEC 17067:2026?
EN ISO/IEC 17067:2026 has one normative reference:
- ISO/IEC 17000:2020 - provides the vocabulary and general principles that the document relies on for key terms such as conformity assessment, object, attestation, certification, accreditation, and surveillance.
The annexes and bibliography also point to related standards that give detailed requirements or examples for specific scheme types:
- ISO/IEC 17007 - guidance for drafting normative documents suitable for conformity assessment;
- ISO/IEC 17020, ISO/IEC 17025, ISO/IEC 17065, ISO/IEC 17021-1, ISO/IEC 17024, ISO/IEC 17029, ISO/IEC 17011, ISO/IEC 17040 - detailed requirements for bodies performing inspection, testing, product/process/service certification, management system certification, certification of persons, validation/verification, accreditation, and peer assessment;
- ISO/IEC 17050-1 and ISO/IEC 17050-2 - declaration and supporting documentation;
- ISO/IEC TR 17026, ISO/IEC TR 17028, ISO/IEC TR 17032, ISO/IEC TS 17035 - guidance and examples for product, service, process, and validation/verification schemes.
What does the EN ISO/IEC 17067:2026 document contain?
The document contains a short core text plus a large set of informative annexes with worked examples. Annex A through I show how the functional approach looks in schemes for certification, validation/verification, inspection, testing, accreditation, peer assessment, and declaration.
Annex J is especially practical because it shows how a single scheme can combine multiple objects of conformity assessment, using structured examples and tables to separate the object, the specified requirements, and the methodology. Annex K adds a summary table of typical scheme characteristics, including the kinds of objects, common activities, statement forms, validity periods, and surveillance expectations.
The bibliography lists related standards and technical reports for sampling, conformity evaluation, risk management, and the main conformity assessment bodies. That makes the document useful as a map to the wider CASCO Toolbox when a scheme needs more detailed rules for a specific activity.
Relations
- Effective Date
- 16-Aug-2023
- Consolidated By
ISO/IEC 17067:2026 - Conformity assessment — Fundamentals of and guidelines for conformity assessment schemes - Effective Date
- 12-Feb-2026
Get Certified
Connect with accredited certification bodies for this standard
BSI Group
BSI (British Standards Institution) is the business standards company that helps organizations make excellence a habit.
Bureau Veritas
Bureau Veritas is a world leader in laboratory testing, inspection and certification services.
DNV
DNV is an independent assurance and risk management provider.
Sponsored listings
Frequently Asked Questions
EN ISO/IEC 17067:2026 is a standard published by the European Committee for Standardization (CEN). Its full title is "Conformity assessment - Fundamentals of and guidelines for conformity assessment schemes (ISO/IEC 17067:2026)". This standard covers: This document specifies the fundamental principles and concepts of conformity assessment schemes (programmes) and provides guidelines for understanding, developing, operating or maintaining them.
This document specifies the fundamental principles and concepts of conformity assessment schemes (programmes) and provides guidelines for understanding, developing, operating or maintaining them.
EN ISO/IEC 17067:2026 is classified under the following ICS (International Classification for Standards) categories: 03.120.20 - Product and company certification. Conformity assessment. The ICS classification helps identify the subject area and facilitates finding related standards.
EN ISO/IEC 17067:2026 has the following relationships with other standards: It is inter standard links to EN ISO/IEC 17067:2013, ISO/IEC 17067:2026. Understanding these relationships helps ensure you are using the most current and applicable version of the standard.
EN ISO/IEC 17067:2026 is associated with the following European legislation: EU Directives/Regulations: 765/2008; Standardization Mandates: M/580. When a standard is cited in the Official Journal of the European Union, products manufactured in conformity with it benefit from a presumption of conformity with the essential requirements of the corresponding EU directive or regulation.
EN ISO/IEC 17067:2026 is available in PDF format for immediate download after purchase. The document can be added to your cart and obtained through the secure checkout process. Digital delivery ensures instant access to the complete standard document.
Standards Content (Sample)
SLOVENSKI STANDARD
01-december-2026
Nadomešča:
SIST EN ISO/IEC 17067:2013
Ugotavljanje skladnosti - Osnove in smernice za sheme ugotavljanja skladnosti
(ISO/IEC 17067:2026)
Conformity assessment - Fundamentals of and guidelines for conformity assessment
schemes (ISO/IEC 17067:2026)
Konformitätsbewertung - Grundlagen und Leitlinien für
Konformitätsbewertungsprogramme (ISO/IEC 17067:2026)
Évaluation de la conformité - Éléments fondamentaux et lignes directrices pour les
systèmes particuliers d’évaluation de la conformité (ISO/IEC 17067:2026)
Ta slovenski standard je istoveten z: EN ISO/IEC 17067:2026
ICS:
03.120.20 Certificiranje proizvodov in Product and company
podjetij. Ugotavljanje certification. Conformity
skladnosti assessment
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
EUROPEAN STANDARD EN ISO/IEC 17067
NORME EUROPÉENNE
EUROPÄISCHE NORM
November 2026
ICS 03.120.20
Supersedes EN ISO/IEC 17067:2013
English version
Conformity assessment - Fundamentals of and guidelines
for conformity assessment schemes (ISO/IEC 17067:2026)
Évaluation de la conformité - Éléments fondamentaux Konformitätsbewertung - Grundlagen und Leitlinien
et lignes directrices pour les systèmes particuliers für Konformitätsbewertungsprogramme (ISO/IEC
d'évaluation de la conformité (ISO/IEC 17067:2026) 17067:2026)
This European Standard was approved by CEN on 21 September 2026.
CEN and CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for
giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical
references concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to
any CEN and CENELEC member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by
translation under the responsibility of a CEN and CENELEC member into its own language and notified to the CEN-CENELEC
Management Centre has the same status as the official versions.
CEN and CENELEC members are the national standards bodies and national electrotechnical committees of Austria, Belgium,
Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy,
Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of North Macedonia, Romania, Serbia,
Slovakia, Slovenia, Spain, Sweden, Switzerland, Türkiye and United Kingdom.
CEN-CENELEC Management Centre:
Rue de la Science 23, B-1040 Brussels
© 2026 CEN/CENELEC All rights of exploitation in any form and by any means
Ref. No. EN ISO/IEC 17067:2026 E
reserved worldwide for CEN national Members and for
CENELEC Members.
Contents Page
European foreword . 3
European foreword
This document (EN ISO/IEC 17067:2026) has been prepared by Technical Committee ISO/CASCO
"Committee on conformity assessment" in collaboration with Technical Committee CEN-CENELEC/ JTC
1 “Criteria for conformity assessment bodies” the secretariat of which is held by BSI.
This European Standard shall be given the status of a national standard, either by publication of an
identical text or by endorsement, at the latest by May 2027, and conflicting national standards shall be
withdrawn at the latest by May 2027.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CEN-CENELEC shall not be held responsible for identifying any or all such patent rights.
This document supersedes EN ISO/IEC 17067:2013.
Any feedback and questions on this document should be directed to the users’ national standards
body/national committee. A complete listing of these bodies can be found on the CEN and CENELEC
websites.
According to the CEN-CENELEC Internal Regulations, the national standards organizations of the
following countries are bound to implement this European Standard: Austria, Belgium, Bulgaria,
Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland,
Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of
North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Türkiye and the
United Kingdom.
Endorsement notice
The text of ISO/IEC 17067:2026 has been approved by CEN-CENELEC as EN ISO/IEC 17067:2026
without any modification.
International
Standard
ISO/IEC 17067
Second edition
Conformity assessment —
2026-10
Fundamentals of and guidelines for
conformity assessment schemes
Évaluation de la conformité — Éléments fondamentaux et lignes
directrices pour les systèmes particuliers d’évaluation de la
conformité
Reference number
ISO/IEC 17067:2026(en) © ISO/IEC 2026
ISO/IEC 17067:2026(en)
© ISO/IEC 2026
All rights reserved.
This ISO publication is protected by copyright and is owned by ISO and/or its licensors.
The content of this ISO publication is provided under licence, not sold. Use is subject to the applicable licence terms issued by ISO,
an ISO member body, or an authorized third-party distributor.
Except as required for implementation or expressly permitted by a separate licence, no part of this ISO publication may be
reproduced, distributed, modified, used, or made available in any form or by any means – electronic or mechanical, including
photocopying, scanning, recording, or posting on internal or external digital platforms.
Any use beyond the scope of the granted rights is prohibited and may result in legal action.
ISO copyright office
CP 401 • CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
© ISO/IEC 2026 – All rights reserved
ii
ISO/IEC 17067:2026(en)
Contents Page
Foreword .v
Introduction .vi
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Conformity assessment schemes (programmes) and systems. 7
4.1 Difference between conformity assessment schemes and systems .7
4.2 Object of conformity assessment .8
4.3 Specified requirements .9
4.4 Methodology .9
5 Functional approach to conformity assessment . 10
5.1 General .10
5.2 Conformity assessment activities .10
5.3 Selection and determination .11
5.4 Review, decision and attestation.11
5.5 Surveillance . 12
6 Content of a scheme .12
6.1 Functional approach implemented in the scheme . 12
6.1.1 Sampling . 12
6.1.2 Prior conformity assessment results . 12
6.1.3 Externally provided conformity assessment activities . 13
6.1.4 Surveillance . 13
6.2 Controlling the use of statement of conformity .14
6.3 Reporting to the scheme owner .14
6.4 Complaints and appeals. 15
6.5 Rules and procedures of a scheme . 15
7 Scheme owner responsibility . 17
7.1 General .17
7.2 Scheme owner .21
7.3 Ownership .21
7.4 Development .21
7.5 Management . . . 22
7.6 Maintenance . 22
7.7 Scheme integrity . 23
8 Lifecycle of a scheme . .23
8.1 Identifying the need for conformity assessment schemes . 23
8.2 Development of schemes . .24
8.3 Scheme documentation .24
8.4 Discontinuing a scheme . 25
9 Categorization and types of schemes .25
Annex A (informative) Conformity assessment schemes that include product, process or
service certification .27
Annex B (informative) Conformity assessment schemes that include management system
certification .31
Annex C (informative) Conformity assessment schemes that include certification of persons .33
Annex D (informative) Conformity assessment programmes that include validation/verification .35
Annex E (informative) Conformity assessment schemes that include inspection.37
Annex F (informative) Conformity assessment schemes that include testing .38
© ISO/IEC 2026 – All rights reserved
iii
ISO/IEC 17067:2026(en)
Annex G (informative) Conformity assessment schemes that include accreditation .39
Annex H (informative) Conformity assessment schemes that include peer assessment . 41
Annex I (informative) Conformity assessment schemes that include declaration .43
Annex J (informative) Conformity assessment schemes that include multiple types of objects of
conformity assessment .44
Annex K (informative) Typical characteristics of schemes .48
Bibliography .50
© ISO/IEC 2026 – All rights reserved
iv
ISO/IEC 17067:2026(en)
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical activity.
ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations,
governmental and non-governmental, in liaison with ISO and IEC, also take part in the work.
The procedures used to develop this document and those intended for its further maintenance are described
in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the different types
of document should be noted. This document was drafted in accordance with the editorial rules of the ISO/
IEC Directives, Part 2 (see www.iso.org/directives or www.iec.ch/members_experts/refdocs).
ISO and IEC draw attention to the possibility that the implementation of this document may involve the
use of (a) patent(s). ISO and IEC take no position concerning the evidence, validity or applicability of any
claimed patent rights in respect thereof. As of the date of publication of this document, ISO and IEC had not
received notice of (a) patent(s) which may be required to implement this document. However, implementers
are cautioned that this may not represent the latest information, which may be obtained from the patent
database available at www.iso.org/patents and https://patents.iec.ch. ISO and IEC shall not be held
responsible for identifying any or all such patent rights.
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and expressions
related to conformity assessment, as well as information about ISO's adherence to the World Trade
Organization (WTO) principles in the Technical Barriers to Trade (TBT) see www.iso.org/iso/foreword.html.
In the IEC, see www.iec.ch/understanding-standards.
This document was prepared by the ISO Committee on Conformity Assessment (CASCO), in collaboration
with the European Committee for Standardization (CEN) Technical Committee CEN/CLC/JTC 1, Criteria for
conformity assessment bodies, in accordance with the Agreement on technical cooperation between ISO and
CEN (Vienna Agreement).
This second edition cancels and replaces the first edition (ISO/IEC 17067:2013), which has been technically
revised.
The main changes are as follows:
— the scope has been expanded to apply to conformity assessment schemes in general;
— the title has been updated to reflect the extended scope;
— individual clauses have been rephrased to apply to conformity assessment schemes in general;
— clauses have been added to provide specifics (e.g. on product certification schemes) where necessary;
— guidelines for product certification schemes are maintained and moved to Annex A;
— annexes have been added to provide guidelines for other schemes (e.g. schemes including inspection,
management system certification, peer assessment, accreditation).
Any feedback or questions on this document should be directed to the user’s national standards
body. A complete listing of these bodies can be found at www.iso.org/members.html and
www.iec.ch/national-committees.
© ISO/IEC 2026 – All rights reserved
v
ISO/IEC 17067:2026(en)
Introduction
This document provides fundamental concepts, principles and guidelines for conformity assessment
schemes (which are sometimes referred to as “conformity assessment programmes”).
Conformity assessment performed in accordance with a conformity assessment scheme can provide
assurance to interested parties via demonstration that specified requirements are fulfilled. Conformity
assessment can thus provide assurance to interested parties in various areas, including, but not limited
to, legal compliance, health and safety, suitability for intended use, performance, durability, compatibility,
environmental impacts, governance and social impacts, resource use efficiency and resource circularity,
management and use of information technology, climate change and sustainability matters.
This document is intended for those who have an interest in conformity assessment schemes, particularly
those who own or operate schemes, or are considering development of a scheme. These people and their
organizations can include:
a) governments and regulatory authorities;
b) industry, trade associations and organizations (e.g. retailers) within value chains;
c) procurement and purchasing agencies;
d) non-governmental organizations (NGOs);
e) consumer organizations;
f) bodies undertaking conformity assessment activities.
A conformity assessment scheme can be operated at an international, regional, national, sub-national level,
or for a specific industry sector or value chain. A scheme can be documented or only orally created.
A conformity assessment scheme is defined as a set of rules and procedures that:
— describes objects of conformity assessment;
— identifies the specified requirements; and
— provides the methodology for performing conformity assessment.
This document is one of the ISO/IEC and ISO documents on conformity assessment that are developed and
maintained by the ISO Committee on Conformity Assessment (CASCO). These ISO/IEC and ISO documents
are colloquially known as the “CASCO toolbox” and contribute to the development of “conformity assessment
procedures” as referenced in the World Trade Organization Agreement on Technical Barriers to Trade (WTO/
TBT). These documents are applied and used by ISO and its members, IEC and its national committees, and
organizations outside of ISO and IEC (e.g. regulatory authorities, NGOs, accreditation bodies and agreement
groups) for globally accepted conformity assessment practice.
Where the context is unambiguous, "scheme" is used in short for the full terms "conformity assessment
scheme" and “conformity assessment programme”. For ease of comprehension of this document, the terms
"conformity assessment scheme" and “conformity assessment programme” are considered synonyms,
unless explicitly stated otherwise.
Where the context is unambiguous, "system" is used in short for the full term "conformity assessment
system".
Where the context is unambiguous, "object" is used in short for the full term "object of conformity
assessment".
© ISO/IEC 2026 – All rights reserved
vi
International Standard ISO/IEC 17067:2026(en)
Conformity assessment — Fundamentals of and guidelines for
conformity assessment schemes
1 Scope
This document specifies the fundamental principles and concepts of conformity assessment schemes
(programmes) and provides guidelines for understanding, developing, operating or maintaining them.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content constitutes
requirements of this document. For dated references, only the edition cited applies. For undated references,
the latest edition of the referenced document (including any amendments) applies.
ISO/IEC 17000, Conformity assessment — Vocabulary and general principles
3 Terms and definitions
For the purposes of this document, the terms and definitions given in ISO/IEC 17000 and the following apply.
ISO and IEC maintain terminology databases for use in standardization at the following addresses:
— ISO Online browsing platform: available at https:// www .iso .org/ obp
— IEC Electropedia: available at https:// www .electropedia .org/
3.1
conformity assessment
demonstration that specified requirements (3.3) are fulfilled
Note 1 to entry: The process of conformity assessment as described in the functional approach in ISO/IEC 17000:2020,
Annex A can have a negative outcome, i.e. demonstrating that the specified requirements are not fulfilled.
Note 2 to entry: Conformity assessment includes activities defined elsewhere in this document, such as but not limited
to testing (3.25), inspection (3.26), validation (3.27), verification (3.28), certification (3.17), and accreditation (3.18).
Note 3 to entry: Conformity assessment is explained in ISO/IEC 17000:2020, Annex A as a series of functions. Activities
contributing to any of these functions can be described as conformity assessment activities.
Note 4 to entry: This document does not include a definition of “conformity”. “Conformity” does not feature in the
definition of “conformity assessment”. Nor does this document address the concept of compliance.
[SOURCE: ISO/IEC 17000:2020, 4.1]
3.2
object of conformity assessment
object
entity to which specified requirements (3.3) apply
EXAMPLE Product, process, service, system, installation, project, data, design, material, claim, person, body or
organization, or any combination thereof.
© ISO/IEC 2026 – All rights reserved
ISO/IEC 17067:2026(en)
Note 1 to entry: The term “body” is used in this document to refer to the conformity assessment body (3.19) and
accreditation body (3.20). The term “organization” is used in its general meaning and may include bodies according
to the context. The more specific ISO/IEC Guide 2 definition of an organization as a body based on membership is not
applicable to the field of conformity assessment (3.1).
[SOURCE: ISO/IEC 17000:2020, 4.2]
3.3
specified requirement
need or expectation that is stated
Note 1 to entry: Specified requirements can be stated in normative documents such as regulations, standards and
technical specifications.
Note 2 to entry: Specified requirements can be detailed or general.
[SOURCE: ISO/IEC 17000:2020, 5.1]
3.4
conformity assessment scheme
conformity assessment programme
set of rules and procedures (3.21) that describes the objects of conformity assessment (3.2), identifies the
specified requirements (3.3) and provides the methodology (3.22) for performing conformity assessment (3.1)
Note 1 to entry: A conformity assessment scheme can be managed within a conformity assessment system (3.5).
Note 2 to entry: A conformity assessment scheme can be operated at an international, regional, national, sub-national,
or industry sector level.
Note 3 to entry: A scheme can cover all or part of the conformity assessment functions explained in ISO/IEC 17000:2020,
Annex A.
[SOURCE: ISO/IEC 17000:2020, 4.9]
3.5
conformity assessment system
set of rules and procedures (3.21) for the management of similar or related conformity assessment schemes
(3.4)
Note 1 to entry: A conformity assessment system can be operated at an international, regional, national, sub-national,
or industry sector level.
[SOURCE: ISO/IEC 17000:2020, 4.8]
3.6
owner
owner of a system
owner of a scheme
system owner
scheme owner
person or organization responsible for the development and maintenance of a conformity assessment system
(3.5) or conformity assessment scheme (3.4)
Note 1 to entry: A scheme owner does not necessarily operate the scheme (3.4).
Note 2 to entry: A system owner or a scheme owner can be a conformity assessment body (3.19) itself, a governmental
authority, a trade association, a group of conformity assessment bodies or others.
[SOURCE: ISO/IEC 17000:2020, 4.13]
© ISO/IEC 2026 – All rights reserved
ISO/IEC 17067:2026(en)
3.7
participant
participant in a system
participant in a scheme
person or organization that implements or operates under the rules and procedures (3.21) of a conformity
assessment system (3.5) or scheme (3.4) without being involved in their development, revision or approval
[SOURCE: ISO/IEC 17000:2020, 4.11]
3.8
member
member of a system
member of a scheme
person or organization that is involved in the development, revision or approval of the rules and procedures
(3.21) of a conformity assessment system (3.5) or scheme (3.4)
[SOURCE: ISO/IEC 17000:2020, 4.12]
3.9
first-party conformity assessment activity
conformity assessment (3.1) activity that is performed by the person or organization that provides or that is
the object of conformity assessment (3.2)
Note 1 to entry: The first-, second- and third-party descriptors used to characterize conformity assessment activities
in relation to a given object are not to be confused with the legal identification of the relevant parties to a contract.
EXAMPLE Activities performed by providers, designers or owners of the object, investors in the object, and
advertisers or promoters of the object.
Note 2 to entry: If an activity is performed by an external body acting on behalf of and controlled by a person or
organization that provides or is the object, the activity is still called a first-party conformity assessment activity (e.g.
internal audits performed by a consultant who is not part of the organization).
[SOURCE: ISO/IEC 17000:2020, 4.3]
3.10
second-party conformity assessment activity
conformity assessment (3.1) activity that is performed by a person or organization that has a user interest in
the object of conformity assessment (3.2)
Note 1 to entry: The first-, second- and third-party descriptors used to characterize conformity assessment activities
in relation to a given object are not to be confused with the legal identification of the relevant parties to a contract.
EXAMPLE Persons or organizations performing second-party conformity assessment activities include, for
example, purchasers or users of products, or potential customers seeking to rely on a supplier's management system,
or organizations representing those interests. Examples of organizations representing user interest include consumer
advocacy organizations, regulators implementing legislation governing products and services for the protection of
consumer and public interests, centralized government procurement organizations and private sector purchasing
agents.
Note 2 to entry: If an activity is performed by an external body acting on behalf of and controlled by a person or
organization with a user interest, the activity is still called a second-party conformity assessment activity (e.g. supply
chain audits conducted by an external body on behalf of the purchaser).
[SOURCE: ISO/IEC 17000:2020, 4.4]
3.11
third-party conformity assessment activity
conformity assessment (3.1) activity that is performed by a person or organization that is independent of the
provider of the object of conformity assessment (3.2) and has no user interest in the object
Note 1 to entry: The first-, second- and third-party descriptors used to characterize conformity assessment activities
in relation to a given object are not to be confused with the legal identification of the relevant parties to a contract.
© ISO/IEC 2026 – All rights reserved
ISO/IEC 17067:2026(en)
[SOURCE: ISO/IEC 17000:2020, 4.5]
3.12
review
consideration of the suitability, adequacy and effectiveness of selection and determination activities, and the
results of these activities, with regard to fulfilment of specified requirements (3.3) by an object of conformity
assessment (3.2)
Note 1 to entry: A description of “selection and determination activities” is included in 5.1, 5.3 and ISO/IEC 17000:2020,
A.2 and A.3.
[SOURCE: ISO/IEC 17000:2020, 7.1, modified — Note to entry 1 added.]
3.13
decision
conclusion, based on the results of review (3.12), that fulfilment of specified requirements (3.3) has or has not
been demonstrated
[SOURCE: ISO/IEC 17000:2020, 7.2]
3.14
attestation
issue of a statement, based on a decision (3.13), that fulfilment of specified requirements (3.3) has been
demonstrated
Note 1 to entry: The resulting statement, referred to in this document as a “statement of conformity”, is intended to
convey the assurance that the specified requirements have been fulfilled. Such an assurance does not, of itself, provide
contractual or other legal guarantees.
Note 2 to entry: First-party attestation and third-party attestation are distinguished by the terms declaration (3.16),
certification (3.17) and accreditation (3.18), but there is no corresponding term applicable to second-party attestation.
[SOURCE: ISO/IEC 17000:2020, 7.3]
3.15
surveillance
systematic iteration of conformity assessment activities as a basis for maintaining the validity of the
statement of conformity
[SOURCE: ISO/IEC 17000:2020, 8.1]
3.16
declaration
first-party attestation (3.14)
[SOURCE: ISO/IEC 17000:2020, 7.5]
3.17
certification
third-party attestation (3.14) related to an object of conformity assessment (3.2), with the exception of
accreditation (3.18)
[SOURCE: ISO/IEC 17000:2020, 7.6]
3.18
accreditation
third-party attestation (3.14) related to a conformity assessment body (3.19), conveying formal demonstration
of its competence, impartiality and consistent operation in performing specific conformity assessment
activities
[SOURCE: ISO/IEC 17000:2020, 7.7]
© ISO/IEC 2026 – All rights reserved
ISO/IEC 17067:2026(en)
3.19
conformity assessment body
body that performs conformity assessment activities, excluding accreditation (3.18)
[SOURCE: ISO/IEC 17000:2020, 4.6]
3.20
accreditation body
authoritative body that performs accreditation (3.18)
Note 1 to entry: The authority of an accreditation body can be derived from government, public authorities, contracts,
market acceptance or scheme owners.
[SOURCE: ISO/IEC 17000:2020, 4.7]
3.21
procedure
specified way to carry out an activity or a process
Note 1 to entry: In this context, a process is defined as a set of interrelated or interacting activities that use inputs to
deliver an intended result.
[SOURCE: ISO/IEC 17000:2020, 5.2]
3.22
methodology
systematic collection of methods
Note 1 to entry: In conformity assessment (3.1), a systematic approach, or collection of methods, for performing
activities contributing to the functions described in ISO/IEC 17000:2020, Annex A, (the functional approach) is one
part of a conformity assessment scheme (3.4). Individual demonstrations performed in accordance with the same
conformity assessment scheme follow the same methodology.
Note 2 to entry: A method or procedure for a specific individual conformity assessment activity within the functional
approach (e.g. a sampling protocol, test method, calibration method, inspection procedure, a general plan for an audit
of a management system, a general plan for validation or verification of a type of claim, the formatting of a statement
of conformity) can be included or referenced in the methodology provided in a conformity assessment scheme.
However, a method or procedure for a specific individual conformity assessment activity is not by itself a methodology
for demonstrating the fulfilment of specified requirements (3.3).
[SOURCE: ISO/IEC 17007:2026, 3.10]
3.23
complaint
expression of dissatisfaction, other than appeal (3.24), by any person or organization to a conformity
assessment body (3.19) or an accreditation body (3.20), relating to the activities of that body, where a response
is expected
[SOURCE: ISO/IEC 17000:2020, 8.7]
3.24
appeal
request by the person or organization that provides, or that is, the object of conformity assessment (3.2) to
a conformity assessment body (3.19) or an accreditation body (3.20) for reconsideration by that body of a
decision (3.13) it has made relating to that object
[SOURCE: ISO/IEC 17000:2020, 8.6]
© ISO/IEC 2026 – All rights reserved
ISO/IEC 17067:2026(en)
3.25
testing
determination of one or more characteristics of an object of conformity assessment (3.2), according to a
procedure (3.21)
Note 1 to entry: The procedure can be intended to control variables within testing as a contribution to the accuracy or
reliability of the results.
Note 2 to entry: The results of testing can be expressed in terms of specified units or objective comparison with
agreed references.
Note 3 to entry: The output of testing can include comments (e.g. opinions and interpretations) about the test results
and fulfilment of specified requirements.
Note 4 to entry: Additional information on the concepts of testing and inspection (3.26) is given in ISO/IEC 17000:2020,
A.3.4.
[SOURCE: ISO/IEC 17000:2020, 6.2]
3.26
inspection
examination of an object of conformity assessment (3.2) and determination of its conformity with detailed
requirements or, on the basis of professional judgement, with general requirements
Note 1 to entry: Examination can include direct or indirect observations, which can include measurements or the
output of instruments.
Note 2 to entry: Conformity assessment schemes or contracts can specify inspection as examination only.
Note 3 to entry: Additional information on the concepts of testing (3.25) and inspection (3.26) is given in
ISO/IEC 17000:2020, A.3.4.
[SOURCE: ISO/IEC 17000:2020, 6.3]
3.27
validation
confirmation of plausibility for a specific intended use or application through the provision of objective
evidence that specified requirements (3.3) have been fulfilled
Note 1 to entry: Validation can be applied to claims to confirm the information declared with the claim regarding an
intended future use.
[SOURCE: ISO/IEC 17000:2020, 6.5]
3.28
verification
confirmation of truthfulness through the provision of objective evidence that specified requirements (3.3)
have been fulfilled
Note 1 to entry: Verification can be applied to claims to confirm the information declared with the claim regarding
events that have already occurred or results that have already been obtained.
[SOURCE: ISO/IEC 17000:2020, 6.6]
3.29
agreement group
bodies that are signatories to the agreement on which an arrangement is based
[SOURCE: ISO/IEC 17000:2020, 9.10]
© ISO/IEC 2026 – All rights reserved
ISO/IEC 17067:2026(en)
3.30
recognition
recognition of a conformity assessment result
acknowledgement of the validity of a conformity assessment result provided by another person or
organization
Note 1 to entry: The expression “conformity assessment result” signifies the output of any conformity assessment
activity (e.g. a report or certificate) and can include a finding of nonconformity.
[SOURCE: ISO/IEC 17000:2020, 9.5]
3.31
acceptance
acceptance of a conformity assessment result
use of a conformity assessment result provided by another person or organization
Note 1 to entry: The expression “conformity assessment result” signifies the output of any conformity assessment
activity (e.g. a report or certificate) and can include a finding of nonconformity.
[SOURCE: ISO/IEC 17000:2020, 9.6]
4 Conformity assessment schemes (programmes) and systems
4.1 Difference between conformity assessment schemes and systems
4.1.1 The set of rules and procedures defined as a “conformity assessment scheme” or “conformity
assessment programme” relates to:
a) a description of the object of conformity assessment (see 4.2);
b) identification of the specified requirements (see 4.3);
c) provision of the methodology (see 4.4 and Clause 5) for performing conformity assessment (e.g. rules
for persons and organizations involved in conformity assessment, procedures for individual activities,
rules and procedures for issuing statements of conformity).
4.1.2 Rules and procedures can be unique to a conformity assessment scheme or shared by multiple
schemes. The rules and procedures shared by multiple schemes can be described and documented separately
from the content of the individual schemes. Such common rules and procedures can relate to concepts (e.g.
specific to a sector or an application), structure, methodology, requirements, or other content shared by the
schemes. Documents providing such general contents for multiple schemes are different from documents
containing an individual conformity assessment scheme. Sometimes these documents are referred to as
“frameworks”.
4.1.3 Depending on the object of conformity assessment and the needs of users of conformity assessment,
a scheme can be used only once or repeatedly.
4.1.4 The rules and procedures in a scheme can be provided in a single document or in multiple documents
linked by reference. Documented schemes can be intended for repeated use over a long period of time.
4.1.5 A conformity assessment system is also a set of rules and procedures. However, these rules and
procedures are to manage several conformity assessment schemes that are similar or related. An example for
a conformity assessment system is the IEC CA System to manage the IECEE, IECQ, IECRE, IECEx certification
schemes. Whenever conformity assessment is performed, a scheme always exists, but a system for managing
schemes is optional.
Figure 1 illustrates the relationship between a scheme and a system.
© ISO/IEC 2026 – All rights reserved
ISO/IEC 17067:2026(en)
Figure 1 — Relationship between conformity assessment scheme and conformity assessment
system
4.2 Object of conformity assessment
4.2.1 An object of conformity assessment can be, for example, a product, process, service, management
system, system, design, project, data, information, software, material, installation, claim, person, body or
organization, or any combination thereof (e.g. a product and its production process, an installation and its
maintenance service). The conformity assessment scheme should clearly describe the object of conformity
assessment to which the specified requirements within the scheme will apply.
4.2.2 The object can be a single item or a group of items based on common characteristics (e.g. any area
of land used for a specific purpose, any person with a specific ability, any management system for a specific
discipline, or any person performing a specific type of activity).
© ISO/IEC 2026 – All rights reserved
ISO/IEC 17067:2026(en)
4.2.3 Schemes that describe multiple objects can identify unique specified requirements to be used for
each object. Specified requirements are identified for each object in the scheme.
4.3 Specified requirements
4.3.1 Specified requirements applicable to the object of conformity assessment are stated needs or
expectations. The content of specified requirements should indicate the type of object of conformity
assessment to which they apply.
4.3.2 Specified requirements are chosen for the scheme so that, when fulfilled, needs and concerns for
assurance are resolved.
4.3.3 Specified requirements are often in the form of provisions in normative documents such as
standards, technical specifications, codes of practice and regulations.
4.3.4 Specified requirements can be detaile
...