What Are Standard Operating Procedures and Does Your Business Need Them?

Standard operating procedures (SOPs) are written, step-by-step instructions that describe how to carry out a specific task or process so that it is done the same way every time, by whoever performs it. They sit below policies and procedures in an organisation's documentation hierarchy and supply the operational detail those higher-level documents leave out.

For many UK organisations, SOPs are expected rather than optional. ISO 9001 certification depends on maintaining documented information for processes that affect quality, registered care providers must operate effective systems and processes under Regulation 17 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, and every food business needs a food safety management system that meets HACCP principles.

This guide explains what SOPs are, how they differ from policies, procedures and work instructions, where they are required or expected, and what a well-written SOP contains. It also sets out the warning signs that a business has outgrown undocumented ways of working.

Policy Pros writes and reviews SOPs for UK businesses as part of our policy and procedure writing services. The final section explains what the SOP service includes and how pricing works.

SOP, Policy, Procedure and Work Instruction: The Differences

The four document types answer different questions at different levels of detail. The table below is a quick reference, and the rest of this guide expands on each.

In practice the four types form a hierarchy. Policies sit at the top and state the organisation's position, procedures describe how each policy is put into effect, SOPs break individual processes into repeatable steps, and work instructions cover single tasks in fine detail, often with photographs or diagrams.

A medication example shows the chain. A care provider's medication policy commits it to safe handling of medicines, the supporting procedure covers ordering, storage and disposal, the administration SOP specifies every step from checking the prescription to signing the medication record, and a work instruction might cover operating one monitored dosage system.

What SOP Means in Business Terms

In business, SOP means a controlled document that captures the agreed best way to perform a routine process. Controlled is the important word: an SOP has an owner, a version number, an approval record and a review date, which is what separates it from informal notes and unwritten habit.

The commercial case for SOPs rests on consistency. Documented processes reduce errors and rework, shorten induction for new starters, and protect the business when an experienced employee leaves and would otherwise take the process knowledge with them.

SOPs also generate evidence. When a customer, auditor or inspector asks how a task is controlled, a dated, approved SOP together with its completed records answers the question; an unwritten routine does not.

Where SOPs Are Required or Expected

No single UK law says that every business must hold SOPs. Instead, SOPs are the standard way of meeting documentation duties that arise in particular sectors and frameworks.

ISO 9001 quality management

Clause 7.5 of ISO 9001:2015 requires organisations to maintain the documented information necessary for the effectiveness of their quality management system, and to control how it is created, updated and distributed. The standard does not prescribe document titles, so each organisation decides which processes need SOPs, but certification auditors expect documented, controlled processes wherever an undocumented one could affect output quality.

Our guide to ISO 9001 documented information requirements covers this clause in detail. A revised edition of ISO 9001 is expected to be published in late 2026 with a multi-year transition period, and the published draft retains the documented information requirements described here.

Health and social care

Providers registered with the Care Quality Commission must meet Regulation 17 of the 2014 Regulations, which requires that systems or processes are established and operated effectively, and that accurate, complete and contemporaneous records are maintained for each service user.

SOPs are how providers evidence this in areas such as medication management, infection prevention and control, safeguarding referrals and incident reporting. Inspectors compare what the documents say with what staff actually do.

Food businesses

Every food business must have a food safety management system, and that system must meet HACCP principles. In practice this means documented procedures for food handling, storage temperatures, cleaning schedules, allergen management and supplier checks, together with the records that prove they are followed.

Manufacturing and pharmaceuticals

Good manufacturing practice (GMP) is the minimum standard a medicines manufacturer must meet in its production processes, and the MHRA inspects licensed sites against it, reviewing documents as well as facilities. Written procedures covering production, testing and quality control sit at the centre of those inspections, and comparable expectations apply to wholesale dealers under good distribution practice.

Health and safety

The Management of Health and Safety at Work Regulations 1999 require employers to assess workplace risks, and HSE guidance states that employers with five or more employees must record their significant findings. SOPs, often called safe systems of work in this context, are the standard mechanism for turning risk assessment findings into practical working instructions for hazardous tasks.

Franchising and multi-site operations

A franchise depends on customers getting the same product and experience at every location, which is only achievable when core processes are written down. An operations manual is essentially a bound set of SOPs, and franchisors typically require franchisees to follow it as a condition of the agreement.

Does Your Business Need SOPs?

If you operate in any of the sectors above, the question is already settled: you need SOPs and you will be asked to produce them. Outside regulated sectors, several signals suggest a business has reached the point where SOPs pay for themselves:

• The same task is done differently depending on who does it, and the differences cause errors, complaints or rework.
• Training new starters relies on shadowing one experienced person rather than written instructions.
• One or two employees hold process knowledge that exists nowhere on paper.
• You are bidding for contracts or tenders that ask for evidence of documented processes or quality management.
• You plan to grow, open a second site or franchise the business.

A small business does not need an SOP for everything. Start with the processes where an error would be costly or dangerous, where regulators or customers expect documentation, or where one person's absence would stop work.

What a Good SOP Contains

An effective SOP follows a consistent structure, so staff know where to find information and auditors can verify control. The core elements are:

1. Title and reference number for version control and cross-referencing.
2. Purpose: why the SOP exists and what it achieves.
3. Scope: the departments, roles and sites the SOP applies to, plus any exclusions.
4. Responsibilities: who performs each step, who supervises, and who can approve deviations.
5. Definitions of technical terms and abbreviations.
6. Equipment and materials needed to complete the process.
7. Step-by-step instructions: a numbered sequence of actions in clear, imperative language.
8. Records: what must be completed and retained as evidence the process was followed.
9. Review and approval details: who approved the document, when it was last reviewed, and when the next review is due.
10. Related documents: cross-references to policies, procedures, risk assessments and forms.

The step-by-step section carries the weight. Each step should be a single action, specific enough to be followed correctly by a competent person doing the task for the first time.

Common SOP Failures Found in Audits

Having SOPs is necessary but not sufficient, because they must also be accurate, current and actually followed. These are the failures that most often appear in ISO, CQC and MHRA audit findings:

• Outdated content: documents not reviewed after changes to legislation, equipment or working practice. Auditors check review dates and flag anything overdue.
• No version control: multiple versions in circulation with no document register. Clause 7.5.3 of ISO 9001:2015 specifically requires control of the distribution of and access to documented information.
• The wrong level of detail: SOPs too vague to guide action, or so detailed that nobody follows them.
• Describing an ideal process rather than the real one: auditors compare documents against observed practice and record discrepancies as non-conformances.
• Missing records: the SOP requires records that cannot be produced on request.
• No training evidence: staff have not been trained on the SOP, or no record exists to show that they were.

How Often Should SOPs Be Reviewed?

Review each SOP at least annually and record the outcome even when nothing changes. Certain events should trigger an immediate review: a change in legislation or guidance, an incident or near miss, new equipment or software, an audit finding, or feedback from the staff who use the document.

Approval should follow a defined route. Typically the person who performs the process drafts or contributes to the SOP, a line manager or subject expert checks it for accuracy, and a senior manager or quality lead gives final approval.

Standard Operating Procedure Writers

Policy Pros provides SOP writing and SOP review services for UK organisations of every size, from sole traders and start-ups to NHS trusts, local authorities and FTSE-listed companies. SOPs are produced by experienced policy professionals through our policy and procedure writing services, and we do not use generic templates or AI-generated content.

The writing service runs from first contact to final delivery. It includes:

• A scoping consultation to identify the processes that need documenting and the regulatory or certification requirements that apply.
• A review of your existing policies, risk assessments and informal process notes, so the SOPs align with your wider documentation.
• Drafting in clear, numbered, step-by-step language matched to the competence level of the staff who will use each document.
• Built-in version control tables, approval fields and review dates that satisfy certification bodies and inspectors.
• Delivery in editable Microsoft Word format, with free amendments within 14 working days of receipt.

If you already hold SOPs, our policy document reviewing service checks them against current legislation, applicable standards and your actual working practice, then updates them where they fall short. This is the usual starting point for businesses preparing for certification, inspection or a tender submission.

Pricing is by written quote. Send us the list of SOPs you need, or copies of the documents you want reviewed, and we will quote a fixed price and agree a delivery date before any work begins.

SOPs work best when commissioned alongside the quality policies and procedures they support, because shared language and cross-referencing make the whole suite easier to audit. Contact Policy Pros for a quote on SOP writing or review.