What Is an SOP? Standard Operating Procedures Guide

At my first company, we had a 12-step process for setting up new employees. Nobody had written it down. Three people knew some of the steps. Nobody knew all of them. Every time we hired someone, we missed at least two steps. Once we missed filing a state new hire report and found out when we got a letter from the agency. Another time we forgot to set up a new hire's email before their start date, so they sat at a desk for two hours with nothing to do.

The fix was not complicated. We wrote down every step, in order, with clear ownership for each one. That document became our first SOP. Within a month, onboarding went from chaotic improvisation to a repeatable process that any team member could execute without asking questions. The time investment was maybe three hours of writing. The return has been years of consistent execution.

This guide covers everything about SOPs for small businesses: what an SOP is, what it stands for, how it differs from policies and checklists, the four types, the eight sections every SOP needs, how to create one from scratch, specific SOPs every business needs for employee onboarding, examples, common mistakes, and how to manage SOPs as your company grows. I built training and document management features into FirstHR specifically because SOPs are the backbone of repeatable onboarding, and most small businesses have zero documented procedures when they hire their first employees.

What Does SOP Stand For?

SOP stands for Standard Operating Procedure. Each word matters. "Standard" means the procedure is the official, approved way of doing something. Not one person's preference, not a suggestion, not a rough outline. The standard. "Operating" means it covers how work gets done: the practical, hands-on execution of a task. "Procedure" means it is a defined sequence of steps, not a general guideline or a set of principles.

The term originated in military and manufacturing contexts where procedural consistency is literally a matter of safety. In the military, an SOP ensures that every unit follows the same protocol for equipment maintenance, communications, and field operations. In manufacturing, SOPs ensure that every product meets the same quality standard regardless of which shift produced it. In business, the principle is identical: SOPs ensure that critical work gets done the same way every time, whether the person performing it is a 10-year veteran or a Day 1 hire.

You will sometimes see "SOP" used interchangeably with "standard operating practice," "standard operation procedure," or simply "standard procedure." These all refer to the same concept. In this guide, SOP means Standard Operating Procedure as defined above.

What Is an SOP? The Full Definition

An SOP is a written document that captures the step-by-step instructions for performing a specific process within your business. It answers five questions simultaneously: what is this process, why does it exist, who is responsible for each step, how is each step performed, and what does a successful outcome look like.

The defining characteristic of an SOP is specificity. A policy says "all new hires must complete required paperwork within their first three business days." An SOP says "Step 1: Send the I-9 form link to the new hire via email on their start date. Step 2: The new hire completes Section 1 of the I-9 by end of Day 1. Step 3: The manager reviews and completes Section 2 by end of Day 3 using acceptable identification documents from List A, or one document each from List B and List C." The policy states the rule. The SOP explains exactly how to follow it.

At a large company, SOPs are maintained by dedicated quality assurance teams, operations managers, or compliance officers. At a small business with 5 to 50 employees, the person who does the work is usually the person who writes the SOP. That is actually an advantage: the people closest to the process write the most accurate documentation. The company policy guide covers the policies that SOPs support.

What an SOP Is Not

An SOP is not a training manual. A training manual teaches concepts, context, and skills. An SOP provides step-by-step instructions for executing a specific process. The training manual explains why your company handles refunds in a particular way. The SOP tells the employee exactly how to process a refund, step by step.

An SOP is not a job description. A job description defines the responsibilities and expectations of a role. SOPs define how specific tasks within that role are performed. The job description says "manages employee onboarding." The SOP says "here is exactly how to set up a new hire in the system on Day 1."

An SOP is not a policy. Policies are rules. SOPs are instructions for following rules. Understanding this distinction prevents the common mistake of writing SOPs that read like policy statements: vague, high-level, and impossible to follow without additional context. The HR rules and regulations guide covers the federal requirements that often drive the need for SOPs.

SOP vs Policy vs Work Instruction vs Checklist

Small businesses frequently confuse SOPs with other types of business documents. The confusion matters because writing the wrong type of document for the situation produces documentation that either gives too little detail (a policy when you needed an SOP) or too much detail (a work instruction when you needed a checklist). Here is how each document type differs.

In practice, these documents form a hierarchy. At the top, a policy sets the rule: "All employees must receive anti-harassment training within 30 days of hire." Below that, an SOP defines the process: "Step 1: Assign the online anti-harassment module in the training system within 3 days of the employee's start date. Step 2: The employee completes the module and passes the assessment with 80% or higher." Below that, a work instruction might explain exactly how to navigate the training system interface to assign a module. And a checklist confirms completion: "Anti-harassment training assigned? Completed? Score recorded?"

Most small businesses need policies (what the rules are) and SOPs (how to follow them). Work instructions are necessary only for complex technical processes. Checklists complement SOPs by providing a quick verification tool for the steps the SOP describes. The onboarding checklist is a good example: it works alongside onboarding SOPs to verify that every step was completed.

Why SOPs Matter for Small Business

Small businesses often resist creating SOPs. The objection is always some variation of "we are too small for that" or "we are flexible, we do not need rigid processes." This is exactly backwards. SOPs matter more for small businesses than for large ones, for the same reason that insurance matters more when you have fewer resources to absorb a loss.

Consistency When the Owner Is Not in the Room

At a small business, the owner typically sets the standard for how work gets done. When the owner is present, things get done the owner's way. When the owner is traveling, sick, or focused on a crisis, quality drops because nobody else knows exactly how the owner wants things done. SOPs transfer the owner's knowledge to the team. The process gets done the same way whether the owner is standing over someone's shoulder or on the other side of the country.

Faster, More Consistent Onboarding

Without SOPs, onboarding a new hire depends on whoever happens to be available to train them. If your best employee trains the new hire, they learn the process well. If your most distracted employee trains them, they learn shortcuts, bad habits, and incomplete versions of the process. SOPs standardize training so every new hire learns the same version of every process. Research from the Work Institute shows that 20% of employee turnover happens within the first 45 days. Much of this early turnover traces directly to confusion, unclear expectations, and inadequate training: all problems that SOPs address. The training new employees guide covers how to structure training around documented procedures.

Compliance Risk Reduction

Employment law does not care whether you have 5 employees or 500. An I-9 must be completed by end of business day 3 regardless of company size. State new hire reporting has the same deadline whether you hire 2 people per year or 200. SOPs for compliance tasks ensure that legal requirements are met consistently, even when the person responsible is having a bad week. The compliance onboarding guide covers the specific legal requirements that should be embedded in onboarding SOPs.

Business Continuity When People Leave

At a 20-person company, every employee holds a disproportionate share of institutional knowledge. When one person leaves, they take with them the knowledge of how to process payroll, how to handle a specific customer's requirements, or how to configure the manufacturing equipment. SOPs capture this knowledge in written form. The person can leave; the knowledge stays. This is especially critical for the employee lifecycle transitions that every business experiences.

Delegation Without Micromanagement

Founders struggle with delegation because they worry that nobody else will do the work correctly. SOPs solve this problem. When the process is documented with clear steps, clear ownership, and clear success criteria, the founder can delegate with confidence. The SOP becomes the authority, not the founder's constant supervision. This shift is what makes it possible for a founder to stop doing everything themselves and start managing a team. The people management guide covers how to build delegation into your management approach.

4 Types of SOPs

SOPs come in four formats. The right format depends on the complexity of the process, how many decision points it has, and who will be using the SOP. Most small businesses use step-by-step checklists for the majority of their SOPs, adding hierarchical or flowchart formats only for complex processes.

Which Format to Use When

Do not over-engineer the format. A simple numbered list in a Google Doc is a perfectly valid SOP for most small business processes. The goal is clarity and accessibility, not visual sophistication. If you spend more time formatting the SOP than writing the steps, you have chosen the wrong format.

The 8 Sections Every SOP Needs

Regardless of format, every SOP should include these eight sections. Some will be longer than others depending on the complexity of the process. For simple SOPs, several sections might be a single sentence. The point is that each section forces you to think about an aspect of the procedure that you might otherwise skip, and each section answers a question that a new employee will have when they encounter the SOP for the first time.

The most commonly skipped section is Revision History, and it is the one that causes the most long-term problems. Without revision tracking, you have no way to know whether the SOP a new hire is following reflects the current process or the process as it existed 18 months ago. At minimum, include the version number and the date of the last update. The HR document management guide covers version control in more detail.

SOPs for Employee Onboarding: The 6 Procedures Every Small Business Needs

Employee onboarding is where SOPs have the highest impact at a small business. The reason is straightforward: onboarding involves compliance deadlines, multiple stakeholders, and a new person who has zero context about how your company works. Without SOPs, each onboarding experience depends on whoever happens to be running it. With SOPs, every new hire gets the same quality experience regardless of how busy the team is that week.

These six SOPs cover the end-to-end onboarding process. Together, they form the procedural backbone that transforms onboarding from an improvised event into a repeatable system. The onboarding process steps guide covers the broader process these SOPs support.

SOP 1: New Hire Paperwork

The paperwork SOP is the most compliance-critical of the six because it involves federal and state deadlines with real penalties for non-compliance. The I-9 must be completed by end of the employee's third business day (not third calendar day). Failure to have a completed I-9 on file can result in fines from $252 to $2,507 per form for first offenses. State new hire reporting must be completed within 20 days in most states (some require fewer). The W-4 must be filed before the first payroll run.

Your paperwork SOP should include every form, the deadline for each, who is responsible for each step, and where completed forms are stored. The new hire paperwork guide lists every federal and state form with deadlines.

SOP 2: IT and Equipment Setup

IT setup is the SOP that, when it fails, creates the most immediate and visible onboarding problem: a new hire sitting at a desk with no way to do their job. The SOP should cover everything that needs to happen before Day 1 (email provisioning, software licenses, hardware ordering or shipping), everything that happens on Day 1 (password setup, system access verification, tool walkthroughs), and how to handle problems (who to contact if something is not working). For remote hires, the SOP must include hardware shipping with tracking, home network configuration guidance, and VPN setup instructions.

SOP 3: Welcome and Orientation

The orientation SOP covers the human side of onboarding: making the new hire feel welcome and giving them the context they need to understand how the company works. This includes the welcome email sequence (timing, content, who sends it), the first-day schedule (hour by hour), team introductions (who, when, format), office tour or virtual walkthrough, and buddy assignment (who, what the buddy does, how long the assignment lasts). The employee orientation guide covers the full orientation process.

SOP 4: Role-Specific Training

Role-specific training is where SOPs connect directly to job performance. This SOP defines what skills and knowledge the new hire needs to acquire, in what sequence, through what methods (self-study, shadowing, hands-on practice, formal coursework), and how completion is verified (quizzes, demonstrations, certifications). The SOP should include specific milestones: "By end of Week 1, the new hire can navigate the CRM independently. By end of Week 2, the new hire can process a standard customer order without assistance."

SOP 5: Compliance Training

Several states require specific training for new employees within defined timeframes. California, Connecticut, Delaware, Illinois, Maine, and New York require anti-harassment training. OSHA requires safety training for employees in hazardous environments. Industry-specific requirements (HIPAA for healthcare, PCI DSS for payment processing, FERPA for education) add additional layers. The compliance training SOP ensures these requirements are met on time, every time, and that completion is documented. The compliance hub provides state-by-state requirements.

SOP 6: 30-60-90 Day Review

The review SOP standardizes the most important conversations between a manager and a new hire. It defines when each review happens (day 30, 60, 90), what topics are covered, what questions the manager asks, how feedback is documented, and what happens when a new hire is struggling. Without an SOP, reviews get postponed, skipped, or conducted so informally that they produce no actionable outcomes. The 30-60-90 day plan guide covers what each review should include.

SOPs by Department: What Every Function Needs

While onboarding SOPs are the highest priority for most small businesses, every department has critical processes that benefit from standardization. The table below identifies the essential SOPs for the six most common departments at a small business, along with why each set matters specifically for onboarding and training new team members.

A common question: do you need to document every process? No. Start with the processes that meet at least one of these criteria: the process involves compliance requirements, the process is performed by multiple people, the process has caused errors or confusion in the past, or the process would be difficult to reconstruct if the person who does it left the company. For a 20-person company, this typically means 15 to 30 SOPs total across all departments. The HR functions guide covers the core HR processes that most commonly need SOPs.

How to Create Your First SOP (Step by Step)

Creating your first SOP feels intimidating because you are building the skill of process documentation from scratch. This step-by-step guide simplifies the process. Total time investment for a straightforward SOP: 2 to 4 hours from start to tested document.

Step 1: Choose One Process to Document

Do not try to document everything at once. Pick the single process that causes the most problems when it is done inconsistently. For most small businesses, this is new hire onboarding, but it could also be customer complaint handling, invoice processing, or employee offboarding. The "right" first SOP is the one that will save the most time and reduce the most risk immediately.

Step 2: Walk Through the Process as It Actually Happens

This is the most important step and the one most people skip. Do not write the SOP from memory. Do not write how you think the process should work. Either perform the process yourself while taking notes, or watch the person who does it and document every step they take. Include the decisions they make ("if the customer has an account, look up their history; if not, create one"), the tools they use ("open the CRM, navigate to Contacts, click New"), and the things that often go wrong ("the system sometimes times out here; if it does, refresh and try again").

Walk through the process at least twice. The first walkthrough captures the main steps. The second walkthrough catches the edge cases, shortcuts, and decision points you missed the first time. If the process involves multiple people (like onboarding, where HR, IT, and the hiring manager each have steps), walk through each person's part separately.

Step 3: Draft the SOP Using the 8-Section Structure

Use the structure described in the anatomy section above. Start with the Steps section since that is the core content, then add the other sections around it. Write each step as a clear, actionable instruction that starts with a verb: "Send," "Complete," "Verify," "File," "Review." Avoid vague language like "ensure" or "handle appropriately." A new employee should be able to read each step and know exactly what to do without interpretation.

Step 4: Have the Person Who Does the Work Review It

The biggest mistake in SOP creation is having a manager write SOPs for processes they do not personally perform. The person closest to the work knows the actual steps, the common problems, and the workarounds that the official version does not include. Send your draft to the person who performs the process and ask two specific questions: "Is anything missing?" and "Is anything in the wrong order?"

Step 5: Test the SOP With Someone Who Has Never Done the Process

The real test of an SOP is whether someone unfamiliar with the process can follow it independently. Give the SOP to a new hire or someone from a different department and ask them to follow it. Watch where they hesitate, where they ask questions, and where they make mistakes. Each hesitation or question reveals a gap in your SOP. Fix those gaps before publishing.

Step 6: Publish, Train, and Schedule the First Review

Store the SOP in a central, searchable location that everyone can access. Train every employee who needs to follow the procedure. And set a calendar reminder to review the SOP in 6 months. SOPs that are written and forgotten become actively harmful: they describe outdated processes that mislead anyone who follows them.

SOP Examples for Small Business

Below are three abbreviated SOP examples showing the format and level of detail that works for small businesses. Each example follows the 8-section structure adapted for a step-by-step checklist format. In practice, you would expand the Steps section with your company-specific details.

Example 1: New Employee First-Day Setup SOP

Example 2: Employee Offboarding SOP

Example 3: Customer Complaint Handling SOP

Notice the pattern across all three examples: short, action-oriented steps that start with verbs, clear ownership for each step, specific timeframes (not "promptly" but "within 2 business hours"), and references to related documents and tools. This is the level of specificity that makes SOPs actually usable. The offboarding checklist and onboarding documents guide provide additional detail for the HR-specific SOPs above.

SOP Maturity Model: Where Is Your Business?

Most small businesses fall somewhere on a maturity spectrum from "nothing is documented" to "everything is automated." Understanding where you are helps you set realistic goals for where you need to be. You do not need to reach Level 3 for every process. For most small businesses, reaching Level 2 (Standardized) for critical processes and Level 1 (Documented) for everything else is sufficient.

The jump from Level 0 to Level 1 delivers the biggest return on investment. Simply having processes written down, even imperfectly, eliminates the single biggest operational risk at a small business: critical knowledge existing only in one person's head. The jump from Level 2 to Level 3 is where tools like FirstHR come in: turning documented SOPs into automated workflows where tasks are assigned, deadlines are tracked, and compliance is monitored by the system rather than by memory.

SOP Tools and Software

The tool you use to create and store SOPs matters less than you think. What matters is accessibility (everyone can find and read them), editability (they can be updated when processes change), and version control (you know which version is current). Here is how different tools stack up for small business SOP management.

For most small businesses with 5 to 50 employees, the progression is: start with Google Docs (free, no learning curve), move to a knowledge base like Notion when you have more than 20 SOPs (organization becomes critical), and consider embedded SOP management within your HR platform when you want SOPs to connect directly to onboarding workflows and employee training. The HR technology guide covers how SOP tools fit within the broader tech stack.

Managing and Updating SOPs Over Time

Creating SOPs is the easy part. Keeping them accurate as your business evolves is the ongoing challenge. An outdated SOP is worse than no SOP because it actively misleads anyone who follows it. Here is how to manage SOPs effectively over time.

Assign an Owner for Every SOP

Every SOP needs one person who is accountable for keeping it current. This is not the person who wrote it (they may have left the company). It is the person who currently manages the process the SOP describes. The owner reviews the SOP on schedule, updates it when the process changes, and confirms that the current version reflects reality.

Set a Review Schedule

Version Control Basics

At minimum, use a simple version numbering system: v1.0 for the first version, v1.1 for minor updates (correcting a step, updating a link), v2.0 for major revisions (changing the process significantly). Always include the date of the last update in the SOP header. When you update an SOP, archive the previous version rather than deleting it. You may need to reference old versions for compliance or legal reasons. The file organization guide covers the broader document management system that SOPs should live within.

How to Handle SOP Changes

When a process changes, follow this sequence: update the SOP first, then communicate the change to everyone who follows the procedure, then verify that the new version is being used. Skipping the communication step is the most common failure mode. You can update a document, but if nobody knows it was updated, they continue following the old process from memory.

Common Mistakes When Creating SOPs

After helping multiple businesses create SOPs from scratch, the same five mistakes appear in nearly every first attempt. All of them are fixable, and knowing about them in advance saves significant rework.

The meta-mistake behind all five: treating SOPs as a project to complete rather than a system to maintain. SOPs are not a one-time documentation effort. They are a living system that evolves with your business. The businesses that get the most value from SOPs are the ones that build SOP review into their operational cadence, not the ones that create perfect documents and then never touch them again.

Training Employees on SOPs

A written SOP that nobody has been trained on is just a document in a folder. Training is what converts documentation into actual behavior change. Here is how to train employees on SOPs effectively at a small business.

For New Hires: SOPs as Part of Onboarding

New hires should encounter SOPs during their first week as part of structured onboarding, not as a stack of documents to read independently. The most effective approach: the new hire reads the SOP, then performs the procedure with someone watching, then performs it independently while the trainer is available for questions. This read-watch-do sequence ensures comprehension, not just exposure. The onboarding training guide covers how to structure the broader training program.

For each SOP the new hire needs to learn, include it in their 30-60-90 day plan with a specific milestone: "By Day 7, follow the customer complaint SOP independently" or "By Day 14, process a new hire setup using SOP-HR-001 without assistance." Clear milestones turn SOP training from a vague expectation into a measurable goal.

For Existing Employees: When SOPs Change

When an SOP is updated, do not just email the new version and hope people read it. Use a three-step communication process: announce the change (what changed and why), highlight the specific steps that are different (not just "the SOP was updated" but "Step 4 now requires manager approval before processing"), and confirm understanding (a quick reply or checkbox acknowledgment). For significant changes, walk through the updated procedure in a team meeting.

SOP Acknowledgment and Tracking

For compliance-critical SOPs (anti-harassment training, safety procedures, data handling), you need documented evidence that employees have read and understood the procedure. This can be as simple as an email acknowledgment or as formal as a signed acknowledgment form filed in the employee's personnel file. For non-compliance SOPs, a more informal approach works: verbal confirmation during a team meeting or a quick check during a regular 1:1.

SOPs and Compliance: Where Documentation Becomes Legal Protection

SOPs are not just operational tools. They are compliance documentation. When a government agency audits your business, when an employee files a complaint, or when you face a lawsuit, having documented procedures proves that you had a system in place for handling the relevant process. Absence of documentation suggests absence of a system, which suggests negligence.

Compliance Areas Where SOPs Protect You

Several areas of employment law effectively require SOPs even though the law does not use that term. SHRM's onboarding guidance recommends structured, documented processes for every phase of employee integration, which is functionally a recommendation for onboarding SOPs. Title VII, ADA, and ADEA require consistent application of employment practices. Consistency requires documentation. Documentation of how processes are performed is, by definition, an SOP.

Specific compliance areas where SOPs are most valuable include new hire paperwork and I-9 compliance (federal requirement), anti-harassment training delivery (state requirement in CA, CT, DE, IL, ME, NY), workplace safety procedures (OSHA), employee complaint investigation (Title VII), termination and final pay processing (state-specific deadlines), and data privacy and record retention (various federal and state laws). The HR audit guide covers how to assess whether your current documentation meets compliance requirements.

The Audit Defense Value

When regulators audit your business, they look for evidence of systems. An I-9 audit does not just check whether the forms are completed correctly. It assesses whether you have a consistent process for completing them. An SOP that documents your I-9 process, combined with consistently completed forms, demonstrates that compliance is systematic, not accidental. This matters because systematic compliance gets the benefit of the doubt when individual errors occur. Accidental compliance does not.

The same principle applies to employment lawsuits. If an employee claims they were terminated unfairly, your SOP for the termination process demonstrates that you followed a consistent procedure. Without an SOP, the claim becomes "they made it up as they went along," which is much harder to defend. The HR best practices guide covers the specific laws that create the need for documented procedures.

Frequently Asked Questions