When laboratory activities change, verify that risk reviews, personnel authorization, and related records change with them. This page focuses on management responsibility and evidence, with the system scope to be discussed by the organization and qualified professionals.
Who may need this and when
Applicable laboratories and related organizations handling, storing, transporting, or disposing of hazardous biological materials may review applicability and controls when activities, sites, or personnel change. For mixed operations, distinguish activities within the standard's scope.
Common business challenges
Authorization lists may not reflect staff changes, and professional review may not reach the people responsible for implementation. Training attendance alone does not show role competence or replace professional judgment about controls.
Approach and applicable requirements
ISO 35001:2019 and Amendment 1:2024 address identifying, assessing, controlling, and monitoring risks from hazardous biological materials. Laboratories testing food or feed for microorganisms or toxins, and risks related to agricultural genetically modified crops, are outside the intended scope. See the ISO overview.
Possible project scope, subject to agreement:
- Activity scope and risk-review responsibilities: define the management boundary and responsibilities for assessment, control review, and change approval; flag matters requiring specialist review.
- Safety, security, and personnel authorization: distinguish accidental exposure or release from unauthorized access, loss, or misuse; align competence, training, supervision, and authorization.
- Materials, facilities, and external interfaces: organize evidence for material records, handoffs, and disposal and connect facility maintenance, specialist testing, and outsourced responsibilities. System forms are not technical operating instructions.
- Incidents and internal improvement: define reporting and specialist-response roles and use authorized exercises or record reviews to track communication, audits, and open actions.
Support and work stages
- Confirm activity boundaries and responsibilities, and identify matters for qualified biosafety review.
- Check whether activity and personnel changes reach the right reviewers; map approval and notification paths.
- Sample management handoff records using appropriate data masking.
- Review incident reporting and improvement status; route resources and unresolved matters to management.
Possible deliverables by agreement include an activity-responsibility list, change and authorization workflow, management-record gap list, and incident-improvement tracker. Review focuses on traceability of assessment, authorization, and handoffs; technical controls are determined by qualified personnel.
Information to prepare
- A non-sensitive summary of activities, sites, and responsibilities.
- An index of risk reviews, authorization, and change procedures.
- Summaries of competence, training, maintenance, and specialist testing.
- De-identified incidents, exercises, and open improvement items.
An initial discussion can use summaries. Details about material types, storage locations, and security permissions should only be shared when necessary, authorized, and under agreed safeguards.
Schedule and fees
Workload depends on activities, sites, and system maturity. Any site review requires prior confirmation of authorization and safety conditions. Material handling, facility design and construction, testing, and disposal remain with qualified specialists. System review, laboratory accreditation, and statutory permits are separate matters.
Frequently asked questions
Does this apply to every testing laboratory?
Check exclusions first. A laboratory name alone does not establish applicability, and mixed activities must be distinguished.
What should be checked when staff leave or change roles?
Review authorization, responsibility handover, and replacement personnel competence so records match actual practice.
Can an existing occupational-safety system be reused?
Shared procedures can be assessed, but biorisk and biosecurity responsibilities and specialist controls still require separate review.
Is a complete material inventory needed for an initial discussion?
Start with a summary. Decide whether more detail is needed after the work purpose and access permissions are clear.
Does system certification provide a laboratory permit?
Management-system certification, laboratory accreditation, and facility or activity permits are distinct and do not replace one another automatically.
Which edition should be used?
The checked reference is the 2019 edition with the 2024 amendment. A revision project should not be described as a published new edition; confirm any third-party scheme separately.
Related services
Describe the activity type and the authorization, change, or handoff issue you want to address; sensitive material details are not needed initially. Contact Captain International.