Write Standard Operating Procedure

Write Standard Operating Procedure

Create GxP-compliant Standard Operating Procedure providing clear, auditable instructions for regulated activities.

When Use

• New validated system needs operational procedures
• Existing procedures need formalisation into SOP format
• Audit finding cites missing or inadequate procedures
• Change control triggers SOP updates
• Periodic review identifies outdated procedural content

Inputs

• Required: Process or system SOP covers
• Required: Regulatory context (GMP, GLP, GCP, 21 CFR Part 11, EU Annex 11)
• Required: Target audience (roles that will follow this SOP)
• Optional: Existing informal procedures, work instructions, or training materials
• Optional: Related SOPs that interface with this procedure
• Optional: Audit findings or regulatory observations driving SOP creation

Steps

Step 1: Assign Document Control Metadata

# Standard Operating Procedure
## Document ID: SOP-[DEPT]-[NNN]
## Title: [Descriptive Title of the Procedure]

| Field | Value |
|-------|-------|
| Document ID | SOP-[DEPT]-[NNN] |
| Version | 1.0 |
| Effective Date | [YYYY-MM-DD] |
| Review Date | [YYYY-MM-DD + review period] |
| Department | [Department name] |
| Author | [Name, Title] |
| Reviewer | [Name, Title] |
| Approver | [Name, Title] |
| Classification | [GxP-Critical / GxP-Supporting] |
| Supersedes | [Previous SOP ID or "N/A — New"] |

Got: Every SOP has unique ID following organisation's document numbering convention. If err: No numbering convention exists? Establish one before proceeding: [TYPE]-[DEPT]-[3-digit sequential].

Step 2: Write Purpose and Scope

### 1. Purpose
This SOP defines the procedure for [specific activity] to ensure [regulatory objective].

### 2. Scope
**In scope:**
- [System, process, or activity covered]
- [Applicable departments or roles]
- [Specific regulatory requirements addressed]

**Out of scope:**
- [Related activities covered by other SOPs — reference them]
- [Systems or departments not covered]

Got: Purpose one to two sentences. Scope clearly defines boundaries. If err: Scope overlaps with existing SOP? Either reference existing SOP for overlapping section or revise both SOPs to eliminate overlap.

Step 3: Define Terms and Abbreviations

### 3. Definitions and Abbreviations

| Term | Definition |
|------|-----------|
| ALCOA+ | Attributable, Legible, Contemporaneous, Original, Accurate + Complete, Consistent, Enduring, Available |
| CCB | Change Control Board |
| GxP | Good [Manufacturing/Laboratory/Clinical] Practice — umbrella for all regulated quality standards |
| SOP | Standard Operating Procedure |
| [Add terms specific to this SOP] | [Definition] |

Got: Every abbreviation and technical term used in SOP defined. If err: Term ambiguous or domain-specific? Consult organisation's glossary or relevant regulatory guidance for authoritative definition.

Step 4: Assign Responsibilities

### 4. Responsibilities

| Role | Responsibilities |
|------|-----------------|
| System Owner | Ensure SOP compliance, approve changes, conduct periodic review |
| System Administrator | Execute daily operations per this SOP, report deviations |
| Quality Assurance | Review SOP for regulatory compliance, approve new versions |
| End Users | Follow procedures as written, report issues to system administrator |
| Training Coordinator | Ensure all affected personnel are trained before SOP effective date |

Got: Every action in Procedure section can be traced to responsible role. If err: Procedural step has no assigned role? Orphaned responsibility. Assign owner before SOP approved.

Step 5: Write Procedure Section

Core of SOP. Write step-by-step instructions:

### 5. Procedure

#### 5.1 [First Major Activity]
1. [Action verb] [specific instruction]. Reference: [form, system screen, tool].
2. [Action verb] [specific instruction].
   - If [condition], then [action].
   - If [alternative condition], then [alternative action].
3. [Action verb] [specific instruction].
4. Record the result in [form/system/log].

#### 5.2 [Second Major Activity]
1. [Action verb] [specific instruction].
2. Verify [specific criterion].
3. If verification fails, initiate [deviation procedure — reference SOP-XXX].

#### 5.3 Deviation Handling
1. If any step cannot be performed as written, STOP and document the deviation.
2. Notify [role] within [timeframe].
3. Complete Deviation Form [form reference].
4. Do not proceed until [role] provides disposition.

Writing rules for GxP SOPs:

• Start each step with action verb (verify, record, enter, approve, notify)
• Be specific enough to be followed by trained operator without interpretation
• Include decision points with clear criteria for each path
• Reference exact form names, system screens, tool identifiers
• Include hold points where work must stop pending approval or verification

Got: Trained person unfamiliar with specific process could follow these steps correct. If err: Subject matter experts say procedure ambiguous? Add detail or break step into sub-steps. Ambiguity in SOPs recurring audit finding.

Step 6: Add References, Attachments, Revision History

### 6. References
| Document ID | Title |
|-------------|-------|
| SOP-QA-001 | Document Control |
| SOP-IT-015 | User Access Management |
| [Regulation reference] | [e.g., 21 CFR Part 11] |

### 7. Attachments
| Attachment | Description |
|-----------|-------------|
| Form-001 | [Form name and purpose] |
| Template-001 | [Template name and purpose] |

### 8. Revision History
| Version | Date | Author | Change Description |
|---------|------|--------|--------------------|
| 1.0 | [Date] | [Name] | Initial release |

Got: All referenced documents accessible to users. Revision history starts from version 1.0. If err: Referenced documents don't exist yet? Either create or remove reference. Note gap in SOP review.

Step 7: Route for Review and Approval

### Approval Signatures

| Role | Name | Signature | Date |
|------|------|-----------|------|
| Author | [Name] | | |
| Technical Reviewer | [Name] | | |
| QA Reviewer | [Name] | | |
| Approver (Department Head) | [Name] | | |

### Training Requirement
All personnel listed in Section 4 must complete training on this SOP before the effective date. Training must be documented in the training management system.

### Periodic Review
This SOP must be reviewed at least every [2 years / annually] or when triggered by:
- Change control affecting the covered process or system
- Audit finding related to the covered process
- Regulatory guidance update affecting the covered requirements

Got: SOP reviewed by subject matter expert and approved by quality before becoming effective. If err: Approval workflow delayed? Effective date must be pushed back. SOP cannot be effective without completed approvals.

Check

• Document ID follows organisation's numbering convention
• Purpose specific and concise (1-2 sentences)
• Scope clearly defines in-scope and out-of-scope boundaries
• All abbreviations and technical terms defined
• Every role in Responsibilities section maps to procedure steps
• Procedure steps start with action verbs, specific enough to follow without interpretation
• Decision points have clear criteria for each path
• Deviation handling defined
• All referenced documents exist and accessible
• Revision history complete from version 1.0
• Approval signatures include author, reviewer, approver
• Periodic review schedule defined

Pitfalls

• Too vague: "Ensure data quality" not procedural step. "Verify that all 15 fields in Form-001 are populated and within range per Appendix A" is.
• Too detailed: Including troubleshooting for every possible error makes SOP unreadable. Reference separate work instruction for complex troubleshooting.
• No deviation handling: Every SOP must define what to do when procedure cannot be followed as written. Silence on deviations implies no deviations possible.
• Effective before training: SOP effective before all users trained creates immediate compliance gap.
• Orphaned SOPs: SOPs never reviewed become outdated and unreliable. Set review dates. Track them in document control system.

See Also

• design-compliance-architecture — identifies which systems and processes need SOPs
• manage-change-control — triggers SOP updates when processes change
• design-training-program — ensures users trained on new and updated SOPs
• conduct-gxp-audit — audits assess SOP adequacy and adherence
• write-validation-documentation — SOPs and validation docs share approval workflows