Plainwork Operations
Process Design

How to Write a Small Business SOP

How to Write a Small Business SOP
AbstractTo write a small-business SOP, define one process, its trigger, intended outcome, owner, prerequisites, and boundaries. Observe the work, then write numbered steps using specific verbs, naming the tool, input, decision point, and expected result. Add exceptions, escalation contacts, records, and a version owner. Test the draft with a trained person who did not write it, correct gaps, approve it through your business's process, and schedule review after changes.

Document one bounded process

A standard operating procedure works best when it covers one repeatable process with a recognizable beginning and end. “Handle customers” is too broad. “Open a new customer record after a signed agreement” is bounded enough to describe, test, and maintain.

This is general management guidance. Procedures involving employment, safety, privacy, taxes, contracts, accessibility, regulated products, or other legal duties need review by qualified professionals for the relevant jurisdiction and industry.

Define the frame before the steps

Start the document with:

Do not include passwords, secret keys, payment-card data, or other sensitive credentials in a general SOP. Link to the approved access system and describe the role required.

Observe the real work

Watch a knowledgeable person perform the process and narrate decisions. Capture workarounds and exceptions instead of writing the idealized path from memory. Ask what arrives incomplete, where mistakes are discovered, which handoffs wait, and what condition requires escalation.

Separate a process defect from a documentation gap. If a step depends on one person's private spreadsheet or undocumented approval, simply recording that dependency does not make it resilient.

Write steps with visible results

Use numbered instructions beginning with specific verbs. Name the system, screen, field, input, and expected result when those details remain stable.

Instead of “process the request,” write:

  1. Confirm the request contains the three required inputs listed in the intake form.
  2. If an input is missing, assign the request the “Needs information” status and use the approved reply template.
  3. If complete, create the record in the designated system and copy its identifier to the request.
  4. Verify that the record shows the assigned owner and required review date.

Use a decision table when several conditions branch. Screenshots can help orientation, but text must still name the field and result because interfaces change and images can become inaccessible or stale.

Add controls and exceptions

State who may approve, edit, reverse, or override consequential steps. Name required evidence and where it is retained under the business's record policy. For an exception, tell the reader when to stop, what not to do, whom to contact, and what information to provide.

Avoid vague directions such as “ask management” when several managers exist. Use a role or maintained escalation channel. Do not put an individual's personal contact details in a widely shared procedure unless policy requires and protects them.

Test with a trained reader

Ask an appropriately trained person who did not draft the SOP to execute it in a safe test environment. The observer should not silently rescue each confusing step. Record missing permissions, ambiguous words, hidden prerequisites, incorrect sequences, and results that cannot be verified.

Revise, retest, and obtain approval through the business's process before release. A test of documentation is not authorization to perform regulated or destructive actions in production.

Use a short checklist only after the full procedure is understood. The SOP explains context and exceptions; the checklist supports repeat execution.

Keep one controlled version

Publish the approved SOP in one known location with an owner and change history. Archive or clearly mark obsolete copies so workers do not follow conflicting instructions. Trigger review when tools, roles, inputs, policies, laws, suppliers, or downstream requirements change, plus whatever periodic review fits the process risk.

Recurring procedural confusion may surface in a weekly team meeting, but the correction belongs in the controlled document, not only in meeting notes. Explore more maintainable systems in Process Design.

FAQ

What should a simple SOP include?

Include a title, purpose, scope, trigger, accountable process owner, required access or materials, numbered steps, decision points, expected output, exception and escalation path, records created, version, approver, and review trigger. Regulated work may require additional controls and qualified legal, safety, privacy, or compliance review.

How detailed should an SOP be?

Detailed enough that an appropriately trained reader can complete the defined task and recognize when to stop or escalate, but not so broad that it tries to teach an entire job. Name exact fields and outputs where useful. Link stable reference material instead of copying large sections that will drift independently.

Who should write a standard operating procedure?

The person who performs or closely observes the work should contribute the real sequence and exceptions. The process owner remains accountable for accuracy and approval, while a new or less familiar user is valuable for testing clarity. Consequential or regulated steps also need review by the relevant qualified professional.

What is the difference between an SOP and a checklist?

An SOP explains the process, context, decisions, responsibilities, and exceptions. A checklist is a short execution or verification aid, often used after the procedure is understood. A checklist can accompany an SOP, but replacing all explanation with boxes may leave a new worker unable to handle an unexpected condition safely.

How often should an SOP be reviewed?

Use event-based review whenever a tool, role, policy, supplier, regulation, input, or downstream requirement changes, and set a periodic review cadence appropriate to the process risk. There is no one interval for every business. The document should name who monitors changes and who can approve revisions.

How do I know whether an SOP works?

Have an appropriately trained person who did not draft it perform the process in a safe test setting while noting ambiguities, missing access, hidden assumptions, and unusable decision points. Compare the result with the defined output. Correct the document and process; do not blame the tester for exposing undocumented knowledge.