ISO/IEC 17020:2026 Gap Assessment: Prepare Your Inspection Body for the New Requirements
ISO/IEC 17020 has changed.
The 2026 edition was published on 27 March 2026 and replaces ISO/IEC 17020:2012. For inspection bodies that are already accredited, or organizations preparing for accreditation, this is more than a document update. Some existing arrangements need to be reviewed, particularly around independence, impartiality, risk, competence, inspection methods, technology, and information control.
The good news is that inspection bodies do not need to start their entire management system from scratch.
A gap assessment against ISO/IEC 17020:2026 can help identify what already meets the revised requirements, what needs modification, and where new evidence or controls may be required before the accreditation assessment.
Qualitcert provides ISO/IEC 17020:2026 gap assessment and transition support to help inspection bodies understand these changes and plan their implementation in a practical way.
What Is an ISO/IEC 17020:2026 Gap Assessment?
An ISO/IEC 17020:2026 gap assessment is a structured review of an inspection body’s existing system against the requirements of the 2026 edition.
The purpose is simple: find the gaps before the accreditation assessor finds them.
Instead of immediately rewriting procedures, an experienced assessor or consultant first reviews the current arrangements and determines:
- Which requirements are already effectively implemented
- Which existing procedures need updating
- Which documents or records are missing
- Where responsibilities need clarification
- Whether current practices adequately address impartiality and independence
- Whether inspection personnel have the required competence and monitoring
- How inspection methods and technical processes are controlled
- Whether data, software and information are adequately protected
- What risks and opportunities need to be addressed
- What evidence should be available for assessment
The result should not be a long list of generic observations. A useful gap assessment should give the inspection body a clear action plan for transition or accreditation preparation.
Why Should Inspection Bodies Start With a Gap Assessment?
The 2026 revision introduces several changes that may affect an inspection body’s existing system.
ISO states that the new edition simplifies the independence categories from Type A, B and C to Type A and Type non-A. It also introduces risk-based thinking, provides more flexibility in how requirements are implemented and adds provisions relating to data and information control.
For an organization that has been working with the 2012 edition for years, some of these changes may not be immediately obvious.
For example, an inspection body may have a documented impartiality policy and an existing risk register. That does not automatically mean its arrangements will meet the intent of the revised requirements.
Similarly, an organization may use inspection software, digital reporting platforms, automated equipment or other technology without having formally considered how the technology is validated, controlled and protected.
A gap assessment gives management an opportunity to identify these issues before the transition assessment.
What Does Qualitcert Review During an ISO 17020:2026 Gap Assessment?
At Qualitcert, the assessment can be structured around the actual activities and risks of the inspection body rather than treating the standard as a paperwork exercise.
- Scope of Inspection Activities
The first step is understanding what the inspection body actually does.
The review considers the inspection scope, applicable requirements, inspection methods, technical activities and the way inspection results are reported.
This helps ensure that the documented management system reflects the organization’s real operations.
- Impartiality and Independence
This is one of the areas that deserves particular attention during the 2026 transition.
The independence model has changed from the previous Type A, Type B and Type C structure to Type A and Type non-A.
The gap assessment therefore looks at the organization’s relationships, ownership, activities, personnel responsibilities and potential conflicts of interest.
The objective is not simply to change the terminology in a procedure. The organization needs to demonstrate that its approach to independence and impartiality is appropriate for its actual structure and inspection activities.
- Competence of Inspection Personnel
An inspection body is only as reliable as the people performing its inspection activities.
The assessment reviews areas such as:
- Competence criteria
- Qualification requirements
- Experience
- Training
- Authorization of inspectors
- Competence evaluation
- Ongoing monitoring
- Technical supervision
- Records supporting competence
Where inspectors perform specialized activities, the organization should be able to demonstrate how competence has been established and maintained.
- Inspection Methods and Technical Processes
The assessment also examines how inspections are actually performed.
This may include:
- Inspection procedures
- Inspection criteria
- Sampling arrangements
- Method selection
- Technical instructions
- Inspection records
- Reporting arrangements
- Handling of deviations
- Validation where applicable
The important question is not whether an organization has a procedure with the correct title.
The question is whether the procedure reflects what inspectors actually do in the field.
- Risk-Based Thinking
Risk is another important area introduced more clearly in the 2026 edition.
The organization should consider risks that could affect its ability to perform inspections competently, impartially and consistently.
Depending on the organization, these could include:
- Conflict-of-interest risks
- Inspector competence risks
- Incorrect inspection methods
- Equipment failures
- Data loss
- Software errors
- Inappropriate use of technology
- Confidentiality issues
- Incorrect inspection reporting
A gap assessment helps determine whether these risks are genuinely being managed or whether the organization simply has a generic risk register that does not connect to inspection activities.
- Data and Information Control
Modern inspection activities increasingly depend on digital systems.
Inspection reports may be generated electronically. Inspectors may use tablets or mobile applications. Evidence may be stored in cloud platforms. Software may support calculations or inspection decisions.
The 2026 standard introduces new provisions concerning data and information control.
The assessment therefore considers how information is:
- Created
- Reviewed
- Stored
- Protected
- Retrieved
- Changed
- Shared
- Retained
- Disposed of
Where technology is used as part of inspection activities, the organization should also consider appropriate validation and controls.
- External Providers and Subcontracted Activities
Many inspection bodies rely on external suppliers for certain services, equipment, calibration, testing or technical support.
The gap assessment can review how these external providers are selected, evaluated and monitored.
The organization should be able to demonstrate that externally provided services do not compromise the quality, impartiality or reliability of its inspection activities.
- Complaints and Appeals
Complaints and appeals are important indicators of how effectively an inspection body controls its services.
The review considers whether the organization has suitable processes for receiving, investigating, responding to and recording complaints and appeals.
The process should also protect impartiality and avoid situations where the person involved in the original activity improperly influences the investigation.
ISO/IEC 17020:2012 vs ISO/IEC 17020:2026
The 2026 edition introduces a number of changes that inspection bodies should evaluate rather than simply update their manuals.
| Area | ISO/IEC 17020:2012 | ISO/IEC 17020:2026 |
| Independence | Type A, Type B and Type C | Type A and Type non-A |
| Risk | Less explicitly structured | Greater emphasis on risk-based thinking |
| Flexibility | More prescriptive in some areas | Greater flexibility and performance-based approach |
| Data & information | Existing controls | New provisions for data and information control |
| Terminology | Previous conformity assessment terminology | Updated and aligned terminology |
| Technology | Less explicit | Greater relevance to technology and digital inspection activities |
| Management system | Existing structure | Revised and reorganized requirements |
The exact impact will depend on the inspection body’s existing system and scope.
That is why a gap assessment is more useful than simply downloading a transition checklist and marking documents as complete.
What Does the ISO 17020:2026 Gap Assessment Process Look Like?
A practical assessment can follow five stages.
Stage 1: Understand the Organization
The first step is to understand the inspection body, its scope, organizational structure, personnel, inspection activities and existing management system.
Stage 2: Review Existing Documentation
Existing policies, procedures, forms, records and technical documents are reviewed against the applicable 2026 requirements.
Stage 3: Evaluate Implementation
Documentation alone is not enough.
The assessment should also consider how the system operates in practice. Interviews, sample records and evidence from actual inspection activities can help identify implementation gaps.
Stage 4: Identify and Prioritize Gaps
Findings can be categorized according to their significance.
For example:
- Requirement already addressed
- Minor modification required
- Significant action required
- New process or control required
- Evidence/record required
- Implementation needs to be demonstrated
Stage 5: Prepare an Action Plan
The final output should help management decide what to do next.
A useful action plan can identify:
Requirement → Existing arrangement → Gap → Required action → Responsible person → Target date → Evidence required
This makes the assessment much more useful than a simple compliance score.
Gap Assessment vs Accreditation Assessment
These two activities should not be confused.
A gap assessment is a preparation exercise. Its purpose is to identify weaknesses and help the organization address them.
An accreditation assessment is conducted by the organization’s accreditation body as part of the formal accreditation process.
A consultant performing a gap assessment is not replacing the accreditation body.
Instead, the gap assessment gives the inspection body an opportunity to identify and address potential issues before the formal assessment.
Who Should Consider an ISO/IEC 17020:2026 Gap Assessment?
The service can be useful for:
- Inspection bodies currently accredited to ISO/IEC 17020:2012
- Organizations preparing for first-time ISO/IEC 17020 accreditation
- Inspection companies expanding their accreditation scope
- Organizations introducing new inspection technologies
- Inspection bodies reviewing their independence classification
- Organizations with significant changes to their inspection processes
- Management teams preparing for transition assessments
It can also be valuable when an organization believes its existing system is compliant but wants an independent review before the accreditation assessment.
Why Choose Qualitcert for ISO 17020:2026 Gap Assessment?
The value of a gap assessment depends heavily on how well the assessor understands both the standard and the organization’s actual operations.
Qualitcert’s approach is focused on practical implementation rather than documentation alone.
The assessment can help your organization:
- Understand the changes introduced in ISO/IEC 17020:2026
- Identify gaps in the existing system
- Review independence and impartiality arrangements
- Evaluate competence and inspection processes
- Assess risks associated with inspection activities
- Review data and information controls
- Identify documentation and implementation requirements
- Prioritize corrective actions
- Prepare evidence for the next assessment
Most importantly, the objective is to leave your team with a clear understanding of what needs to change and why.
Start Your ISO/IEC 17020:2026 Transition With a Gap Assessment
The 2026 edition gives inspection bodies an opportunity to review how their systems work in practice and make them more consistent with current inspection and conformity-assessment activities.
Waiting until the assessment date to discover gaps can create unnecessary pressure.
A structured gap assessment gives your organization time to review the system, make changes, implement them properly and generate the evidence needed to demonstrate effectiveness.
ISO/IEC 17020:2026 is already published, and accreditation bodies are now establishing their transition arrangements. For example, UKAS has published its transition arrangements, while other accreditation bodies have their own implementation schedules.
Planning early gives your inspection body more control over the transition.
Get an ISO/IEC 17020:2026 Gap Assessment From Qualitcert
If your inspection body is currently accredited to ISO/IEC 17020:2012 or preparing for ISO/IEC 17020:2026 accreditation, Qualitcert can help you assess your current system and identify the actions required for transition.
Contact Qualitcert to discuss your ISO/IEC 17020:2026 gap assessment requirements.
