Written by Joanne Hughes, Policy & Compliance Specialist at Policy Pros | Last reviewed: March 2026

Standard Operating Procedures (SOP) Writers

Standard Operating Procedures (SOPs) are detailed, written instructions that describe how to carry out a specific task or process consistently and correctly. They are foundational documents in any organisation that takes quality, compliance and operational efficiency seriously.

SOPs are more than just reference documents; they are the blueprints guiding teams in efficiently and effectively executing routine operations. Their role in ensuring that every task is performed to a high standard cannot be overstated.

SOP vs Policy vs Procedure vs Work Instruction: What Is the Difference?

One of the most common areas of confusion in organisational documentation is the distinction between policies, procedures, SOPs and work instructions. Understanding these differences is essential for creating the right type of document for the right purpose.

Policy: A policy is a high-level statement of intent that sets out an organisation's position on a particular subject. It explains what the organisation will do and why. For example, a health and safety policy states the organisation's commitment to providing a safe working environment and outlines the general responsibilities of management and staff. Policies are typically approved at board or senior management level.

Procedure: A procedure describes the steps required to implement a policy. It explains how the policy is put into practice at a broad level. For example, a fire evacuation procedure sets out the sequence of actions to take when a fire alarm sounds, including assembly points and roll-call responsibilities.

Standard Operating Procedure (SOP): An SOP is a more detailed, step-by-step document that provides specific instructions for carrying out a particular task or process. SOPs are typically more granular than procedures and are designed to ensure that tasks are performed consistently, regardless of who carries them out. For example, an SOP for administering medication in a care home would specify every step from checking the prescription to recording the administration on the medication chart.

Work instruction: A work instruction is the most detailed level of documentation, often covering a single, specific task within a broader SOP. Work instructions may include photographs, diagrams or checklists. For example, a work instruction for calibrating a specific piece of laboratory equipment would detail every button press, setting and verification step.

In practice, these documents form a hierarchy: policies sit at the top, supported by procedures, which are implemented through SOPs, which may in turn reference individual work instructions.

When Are SOPs Legally Required vs Best Practice?

In certain sectors and contexts, SOPs are not simply a matter of good practice — they are a legal or regulatory requirement.

ISO 9001:2015 (Quality Management Systems): Clause 7.5 of ISO 9001:2015 requires organisations to maintain "documented information" necessary for the effectiveness of their quality management system. While ISO 9001 does not use the term "SOP" explicitly, the requirement for documented processes that ensure consistent outputs effectively mandates SOPs for critical processes. Organisations seeking or maintaining ISO 9001 certification must be able to demonstrate that their processes are documented, controlled and reviewed.

Care Quality Commission (CQC) standards: Health and social care providers registered with the CQC in England must have SOPs covering key areas of service delivery. CQC inspectors assess whether providers have clear, documented processes for activities such as medication management, infection prevention and control, safeguarding, and incident reporting. A failure to have adequate SOPs can result in enforcement action, including conditions on registration or, in serious cases, cancellation of registration.

Good Manufacturing Practice (GMP) regulations: Businesses in the pharmaceutical, food production and cosmetics sectors are subject to GMP requirements that mandate detailed written procedures for every aspect of production, testing and quality control. The Medicines and Healthcare products Regulatory Agency (MHRA) and the Food Standards Agency (FSA) both expect to see comprehensive SOPs during inspections.

Health and Safety Executive (HSE) expectations: While the Health and Safety at Work Act 1974 does not specifically require SOPs, the HSE expects employers to have documented safe systems of work for hazardous activities. The Management of Health and Safety at Work Regulations 1999 require employers to make suitable and sufficient assessments of risk, and SOPs are the standard mechanism for translating risk assessments into practical working instructions.

Even where SOPs are not legally mandated, they represent best practice for any organisation that wants to ensure consistency, reduce errors, support training, and demonstrate due diligence in the event of an incident, complaint or legal claim.

How to Structure an SOP

An effective SOP follows a clear, consistent structure that makes it easy to follow and maintain. The following elements should be included:

1. Title and reference number: A clear title describing the process, together with a unique reference number for version control and cross-referencing.
2. Purpose: A brief statement explaining why the SOP exists and what it aims to achieve.
3. Scope: A description of what the SOP covers, including which departments, roles or locations it applies to, and any exclusions.
4. Responsibilities: A clear statement of who is responsible for carrying out each step, who supervises the process, and who has authority to approve deviations.
5. Definitions: An explanation of any technical terms, abbreviations or acronyms used in the document.
6. Equipment and materials: A list of any tools, equipment, software or materials required to complete the process.
7. Step-by-step instructions: The core of the SOP — a numbered, sequential list of actions to be performed. Each step should be written in clear, imperative language and should be specific enough to be followed by someone performing the task for the first time.
8. Records and documentation: Details of what records must be created, completed or retained as evidence that the process has been followed correctly. This is particularly important for audit and regulatory compliance purposes.
9. Review and approval: Details of who approved the SOP, when it was last reviewed, and when the next review is due. This supports the document control requirements of ISO 9001:2015 and similar standards.
10. Related documents: Cross-references to associated policies, procedures, risk assessments, forms or templates.

Sector-Specific SOP Examples

SOPs vary significantly in content and complexity depending on the sector. Below are examples of the types of SOPs commonly required in key UK industries:

Care home SOPs: Care providers require SOPs for medication administration, personal care delivery, infection prevention and control, safeguarding referrals, falls management, end-of-life care, and emergency evacuation. These SOPs must align with CQC fundamental standards and are reviewed during inspections under the Safe, Effective, Caring, Responsive and Well-Led domains.

Food safety SOPs: Food businesses must have SOPs covering food handling, storage temperatures, cleaning and sanitisation schedules, allergen management, pest control, and supplier approval. These are required under the Food Safety Act 1990 and the Food Hygiene Regulations 2006, and must comply with Hazard Analysis and Critical Control Points (HACCP) principles as mandated by the FSA.

Pharmaceutical SOPs: Pharmaceutical manufacturers and distributors require SOPs for every stage of production, from raw material receipt through manufacturing, packaging, labelling, quality testing, batch release and distribution. These SOPs must comply with EU and UK GMP requirements as enforced by the MHRA, and must be validated to demonstrate that the documented process consistently produces the intended result.

IT SOPs: Technology teams require SOPs for incident response, change management, system backup and recovery, access control, software deployment, and cybersecurity event handling. These SOPs support compliance with standards such as ISO 27001 (Information Security Management) and the National Cyber Security Centre (NCSC) Cyber Assessment Framework.

Common SOP Mistakes That Cause Audit Failures

Having SOPs in place is necessary but not sufficient — they must be accurate, current and actually followed. The following are among the most common reasons SOPs contribute to audit failures:

• Outdated content: SOPs that have not been reviewed following changes to legislation, equipment, software or working practices. Auditors from bodies such as the CQC, MHRA and ISO certification bodies will check review dates and flag documents that are overdue for review.
• Lack of version control: Using multiple versions of the same SOP, or failing to maintain a document register that tracks which version is current. ISO 9001:2015 Clause 7.5.3 specifically requires organisations to control the distribution and access of documented information.
• Too vague or too detailed: SOPs that are so high-level they do not provide actionable guidance, or so detailed they become impractical to follow. The best SOPs strike a balance between specificity and usability.
• Not reflecting actual practice: SOPs that describe an idealised process rather than how the task is actually performed. Auditors routinely compare documented procedures against observed practice, and discrepancies are flagged as non-conformances.
• Missing records: SOPs that require records to be completed but where those records cannot be produced during an audit. This is a particularly common issue in care settings and manufacturing environments.
• No evidence of staff training: Even a well-written SOP is ineffective if staff have not been trained on it. Auditors expect to see training records demonstrating that relevant personnel have read, understood and been assessed on the SOP.

How Often Should SOPs Be Reviewed and Who Approves Them?

The frequency of SOP reviews depends on the sector, the nature of the process, and any applicable regulatory or certification requirements. As a general guide:

• Annual review is the minimum recommended frequency for most SOPs, and is the standard expected by ISO 9001:2015 certification bodies.
• Triggered reviews should occur whenever there is a change to legislation, a significant incident or near-miss, a change to equipment or software, an audit finding, or feedback from staff using the SOP.
• Sector-specific requirements may mandate more frequent reviews. For example, CQC-registered providers are expected to review SOPs whenever regulations or guidance change, and pharmaceutical SOPs must be revalidated whenever there is a change to the manufacturing process.

Approval of SOPs should follow a defined process. Typically, the person who carries out the process drafts or contributes to the SOP, a subject matter expert or line manager reviews it for accuracy, and a senior manager or quality lead provides final approval. This ensures that SOPs are both technically accurate and aligned with organisational objectives.

How Policy Pros Produces SOPs Alongside Policies

We write and review SOP procedure documents for all company and organisation types, from non-profits to government departments and blue-chip companies.

Our approach to SOP development mirrors our policy writing process:

• We begin with a scoping conversation to understand your operations, the processes that need documenting, and any regulatory or certification requirements that apply.
• We review existing documentation — including policies, risk assessments and any informal process notes — to ensure the SOPs integrate seamlessly with your wider documentation suite.
• We draft SOPs in clear, step-by-step language, tailored to your sector and the competence level of the staff who will use them.
• We build in the version control, review dates and approval fields needed to satisfy auditors and certification bodies.
• We provide guidance on implementation, including how to roll out new SOPs, train staff, and maintain compliance over time.

SOPs work best when they are developed alongside the policies and procedures they support. By commissioning your SOPs and policies together, you ensure consistency of language, structure and cross-referencing across your entire documentation suite. For more information about our quality control policies and wider services, please get in touch.