TL;DR
- An ISO 15189 quality management system is how a medical lab controls, evidences and improves its work, with management system requirements mainly in clause 8 of ISO 15189:2022.
- Clause 8 covers documentation, document and record control, risks and opportunities, improvement, nonconformities and corrective action, internal audits and management review.
- An ISO 9001-aligned QMS can help, but it must still meet ISO 15189. ISO 15189:2022 no longer requires a quality manual or a quality manager.
- Software can connect documents, training and quality records to daily work, but it does not make a lab accredited.
Every medical laboratory quality management system has the same job: make good results repeatable and prove it. Under ISO 15189:2022, that system has to work across the whole testing path, from request to report.
This guide covers how to build and run the QMS itself: what clause 8 asks you to operate, a practical build sequence, common gaps and where software fits. New to the standard? Start with what ISO 15189:2022 is.
What Is an ISO 15189 Quality Management System?
An ISO 15189 quality management system is the coordinated set of policies, processes, people, resources and records that lets a medical laboratory consistently meet the quality and competence requirements of ISO 15189:2022. CAP describes a QMS as a set of interacting parts and activities that typically includes planned processes, continual analysis and improvement, quality metrics and supporting infrastructure.
How the QMS fits inside ISO 15189:2022
In the 2022 edition, management system requirements sit mainly in clause 8, while quality thinking runs through clauses 4 to 7 (impartiality, governance, resources and the examination process). Clause 8 is the engine that keeps the rest controlled, reviewed and improving. For the full clause map and the evidence assessors ask for, see our clause-by-clause guide to ISO 15189 requirements ⟦PLANNED LINK⟧.
ISO 15189 vs ISO 9001 (and when a 9001-aligned QMS helps)
ISO 9001 is a generic quality management standard for any organization. ISO 15189 is specific to medical laboratories and, according to CAP, incorporates the essential elements of ISO 9001 and adds technical competence requirements.
ISO 15189:2022 gives labs two practical routes: build the laboratory quality management system directly to clause 8, or run a QMS such as one aligned with ISO 9001, provided that system supports and demonstrates consistent fulfilment of ISO 15189's management and technical requirements (Eurachem). CAP notes that ISO 9001 covers many, though not necessarily all, ISO 15189 quality requirements, and that CAP 15189 participants must use ISO 15189 to design the QMS. Accreditation bodies set their own rules for assessing a certified 9001 system; Australia's NATA lists its conditions under clause 8.1.2.
What changed for the management system in 2022
ISO 15189:2022 is less prescriptive about how you structure quality management. It does not require a quality manual or a named quality manager, although CAP 15189 still requires a quality manual for participation. The 2022 edition follows a structure similar to ISO/IEC 17025, places more weight on risk to patients, and no longer refers to preventive action. Risks and opportunities are handled instead.
Clause 8 Management System Requirements (Core Components)
Treat clause 8 as a set of processes you run, not a list you file. The summaries below paraphrase the 2022 clause titles; they are not the standard's text.
8.1 General requirements and options
The lab must establish, document, implement and maintain a management system that supports clauses 4 to 7. Clause 8.1 also sets out the two routes above: meet clauses 8.2 to 8.9 directly, or use an existing QMS that demonstrably fulfils them.
In practice: decide the route early and write it down, because it shapes how your accreditation body plans the assessment.
Documentation, document control and records (8.2–8.4)
Clause 8.2 covers the documentation that describes the management system, such as the quality policy and objectives. Because no single quality manual is required, that content can sit across the system. Clauses 8.3 and 8.4 cover control of documents and records, which most other processes depend on; see our guide to ISO 15189 document control ⟦PLANNED LINK⟧ for the step-by-step process.
Risks, improvement and nonconformities (8.5–8.7)
- 8.5 Actions to address risks and opportunities: identify risks to patients and services, plan actions and check that they worked.
- 8.6 Improvement: use audits, complaints, EQA results, staff and user feedback, and data to find opportunities.
- 8.7 Nonconformities and corrective actions: investigate root cause, correct, and confirm the action was effective.
Eurachem notes that the 2022 edition has no separate preventive-action concept. Prevention now sits within risk management.
In practice: run these three as one loop. A nonconformity should prompt a risk review, and the risk register should show which improvement actions came from it.
Evaluations, internal audits and management review (8.8–8.9)
- 8.8 Evaluations: include internal audits that cover the management system and laboratory activities.
- 8.9 Management reviews: leadership reviews performance, risks, audit findings and improvement actions, then sets decisions and resources.
In practice: the standard leaves room on scheduling, but accreditation bodies may set expectations. NATA, for example, expects management review at least once a year and an internal audit schedule that ideally covers all ISO 15189 requirements within 12 months.
How to Build and Implement an ISO 15189 QMS
1. Define scope, roles and quality objectives
Write down which examinations and sites are in scope and who is accountable for the management system. Set a few measurable quality objectives tied to patient care, such as turnaround or specimen rejection, and name an owner for each.
2. Map processes and close gaps
Map your pre-examination, examination and post-examination processes, then run a gap analysis against ISO 15189:2022. Eurachem suggests cross-referencing existing procedures to the new clauses. Prioritize gaps by risk to patients, not by how easy they are to fix.
3. Control documents and records
Build one controlled register for policies, procedures and forms. Define who approves changes, how staff acknowledge new versions and how long records are kept. Link training to the procedure version it covers, so competence records stay current when procedures change.
4. Run audits, CAPA and management review on a cadence
Set an internal audit schedule, a corrective action workflow with effectiveness checks and a standing management review agenda. Feed audit findings, complaints, nonconformities and risk updates into each review, so the loop runs all year, not just before assessment. For the accreditation steps that follow, see the ISO 15189 certification process.
Common Gaps When Running a Laboratory QMS
Evidence that exists on paper but not in practice
Many labs have the procedure but can't prove it ran. Common examples include risk registers that no one updates, management review minutes with no follow-up on actions, and corrective actions closed without an effectiveness check. Assessors look for this evidence directly. CAP 15189, for instance, still expects procedures for document control, internal audits, management review, nonconforming work and corrective action.
Disconnected training, CAPA and audit trails
When documents sit in shared folders, training in spreadsheets and CAPA in email, the links break. A procedure changes, but training records still point to the old version. An audit finding opens a corrective action that no one can trace back to the result it affected. Pulling that story together before an assessment takes days.
How Software Supports an ISO 15189 Quality Management System
What to look for in QMS / LIMS / LIS tooling
When choosing tools for an ISO 15189 QMS, look for:
- Document control with versioning, approvals and acknowledgment
- Training linked to SOPs
- Change control
- CAPA and nonconformity workflows
- Audit trails and e-signatures
- Links from quality records to sample, instrument and result data
Whatever you choose, the lab still validates it for intended use and owns staff competence.
How Scispot can sit alongside your QMS
Software does not make a lab ISO 15189 accredited or compliant. Scispot supports the evidence. Scispot QMS offers document control with version control, approval workflows and acknowledgment tracking, training linked to SOPs, change control, audit logs and e-signatures. Scispot LIMS and LIS add audit trails, role-based access and instrument data capture, and Scispot can coexist with an existing QMS or LIMS rather than replace it.
Most map to ISO 15189 themes, such as personnel and equipment under clause 6 and documents, assessments and improvement under clause 8. Accreditation is still assessed against ISO 15189 itself.
Ready to connect documents, training, samples and results for ISO 15189 evidence? Book a Demo →