Standard Operating Procedure (SOPs)

The amount of quality assurance detail included in Standard Operating Procedures (SOP) may help a company stay QA compliant, says Susan J. Schniepp, Distinguished Fellow at Regulatory Compliance Associates, Inc.


Q. I am responsible for updating my company’s standard operating procedures (SOPs). My company has been cited several times in audits for not following them, and this situation has worsened since the onset of the pandemic. What advice do you have for me to make sure the SOPs are being followed for now and in the future?


A. You are not alone. Not following or having adequate procedures in writing continues to be one of the top SOP observations for the industry in 2021. Companies usually use their SOP to show that they have control over manufacturing processes, thereby demonstrating compliance with regulatory expectations. Both QA testing and QA engineering have even more stringent expectations in SaMD (software as a medical device) products. 


The problem you are having with your SOPs seems to be an ongoing issue not necessarily related to the pandemic. It would seem this situation is exacerbated by the pandemic but not caused by the pandemic. My advice to you would be to take a holistic look at how you create, implement, and modify your SOPs.


SOP Compliance


There are four simple concepts to keep in mind for having compliant SOPs: Say what you do, do what you say, prove it, improve it. The ‘say what you do’ phrase equates to the written SOP that defines the steps to achieve compliance to a regulatory requirement.


‘Do what you say’ equates to following the SOP. ‘Prove it’ means that you need to collect and be able to present data that indicate you have followed the instructions in your SOP and have investigated any incidents where you have deviated from those instructions.


SOP Process Improvements


Once you have mastered these concepts, you can begin to work on the ‘improve it’ concept by revising and updating your SOPs to reflect current practice and process improvements. These concepts are simple enough to follow, so the being cited by regulators for not following SOPs is disappointing.


Previously in this column, we have discussed the elements of Standard Operating Procedures. The problem you are having seems to be related to the SOP content.


SOP Writing


To address this particular problem, you need to be aware of some of the pitfalls companies encounter when writing SOPs. Writing an SOP with the correct amount of information in it—neither too restrictive nor too ambiguous—is not an easy task. It takes time and effort to create an SOP with the right balance of information.


SOP Pitfalls


The three most common pitfalls when writing an SOP are providing too much information, providing too little information, and providing unneeded specific information. Quality assurance is always built upon a foundation of clear and concise data. Quality control engineering necessitates that a quality assurance inspection would fail without it. 


Providing too much information in Standard Operating Procedures results in a restrictive process with deviations. An example of too much information in an SOP would be listing the serial number for a piece of equipment. Should the piece of equipment need to be changed for any reason, the result is a deviation and an SOP that can’t be followed.


Equipment SOP 


When listing equipment requirements in an SOP, a Quality Analyst should be able to describe the piece of equipment but not necessarily to the serial number. It would be best to provide a list of the equipment needed with a general description of its function and capability. Additionally, the QA Manager should have a deeper level of knowledge about the QA process and be able to speak to the equipment validation.


FDA inspection SOPWhen an SOP provides too little information, it results in an out-of-control operating process that generates deviations. When there is lack of clarity, it allows for interpretation by the operator.


SOP Operators


There is the potential for each individual executing the process to interpret the instructions in their own unique way resulting in deviations that need to be investigated and the potential for the regulatory citation of insufficient SOPs.


An example of a quality assurance program with too little information for operators includes not specifying the order reagents need to be added to generate a reaction. If it is critical to add the reagents in a certain order, that information needs to be specified in the Standard Operating Procedures.


SOP Information


Quality control plans with SOPs that provide unneeded specific information are also problematic. An example of unneeded specific information might be how dates are recorded in a document. A company needs to be consistent in the way the date is recorded. The order of the day, month, and year can be flexible regarding the information being separated by hyphens or slashes. There is no difference between DD/MM/YY and DD-MM-YY. Specifying hyphens versus slashes sets you up for deviations that waste time and resources.


Other potential pitfalls for QA teams to avoid are providing ambiguous information. Similarly, restricting access to SOPs or allowing access to obsolete SOPs can lead to data integrity issues. Finally, having unnecessary SOPs or not providing clear instructions for recording data inhibits the culture of quality.


Effective SOP


Writing effective Standard Operating Procedures and keeping it current is not an easy task. It requires time, effort, and cooperation with the users to achieve the correct balance. Both quality control and quality assurance take time to develop and improve toward the end state. 


Employees must use a process that is easily followed, specifies the correct data, records the current operations, and can be improved. Taking a critical look at the level and detail provided in your SOPs involves right sizing the information. For example, accurately reflecting your operations will help in eliminating an audit observation. Above all, not following SOPs or having insufficient SOPs must be addressed to help improve your compliance position.


Article Details

Pharmaceutical Technology
Volume 44, Number 10
Pages: 74, 73


About RCA’s Pharmaceutical Consulting Services 


Regulatory Compliance Associates (RCA) has helped thousands of pharmaceutical companies meet regulatory, compliance, quality assurance, and remediation challenges. With more than 20 years of experience with FDA, Health Canada, EU and global regulatory agencies worldwide, Regulatory Compliance Associates® offers leading pharmaceutical consultants. We’re one of the few pharma consulting companies that can help you navigate the challenges associated with industry regulations.


Our pharmaceutical consulting firm includes over 500 seasoned FDA, Health Canada & EU compliance consultants and regulatory affairs experts who understand industry complexities. It’s a pharma consultancy founded by regulatory compliance executives from the pharmaceutical industry. Every pharmaceutical industry consultant on the Regulatory Compliance Associates team knows the unique inner workings of the regulatory process. 


Client Solutions


Whether you’re in the product planning, development or pharmaceutical lifecycle management stage or need a remediation strategy for a compliance crisis, Regulatory Compliance Associates will guide you through every pharmaceutical consulting step of the regulatory process and create a customized approach depending on your product and your pharma company’s individual needs. Our regulatory compliance clients include:


  • Companies new to FDA, Health Canada or EU regulations and regulatory compliance
  • Start-up organizations with novel submissions to 510(k) submissions from multi-national corporations
  • Investment firms seeking private equity due diligence for pre-acquisition and post-deal research
  • Law firms seeking pharmaceutical consulting firm expertise in the remediation of warning letters, consent decrees, 483’s or import bans


Regulatory Affairs


Regulatory affairs is Regulatory Compliance Associates backbone. We exceed other pharma consulting companies with industry experts experienced in complexities of the pharmaceutical and biopharmaceutical industries. Our pharma consulting expertise spans all facets and levels of Regulatory Affairs, from Regulatory Support for New Products to Life Cycle Management, to other services like Outsourced Regulatory Affairs, Submissions, Training, and more.


As your partner, we can negotiate the potential assessment minefield of regulatory compliance services with insight, hindsight, and the clear advantage of our breadth and depth of knowledge and regulatory compliance consulting. We offer the following pharma consulting regulatory affairs services for pharmaceutical companies.


  • New Product Support
  • Product Lifecycle
  • Other Regulatory Services
  • Combination Products


Compliance Assurance


The regulations process surrounding pharmaceutical companies can be tricky for even the most experienced industry veteran to understand. Just one misstep could mean significant and lasting consequences for your business. At Regulatory Compliance Associates, we offer the pharma consulting experience and pharma consultants necessary to guide you through the quality compliance process.


  • Assessments
  • Audits
  • Regulatory Agency Response
  • Preparation and Training
  • Inspection Readiness
  • Data Integrity


Quality Assurance


Regulatory Compliance Associates Quality consulting includes assessments, strategy, implementations, staff augmentations, and identification of quality metrics to ensure continuous improvement. Our pharma consultants understand the strategic thinking needed to align your business needs and goals. Regulatory Compliance Associates quality assurance services include quality experts with experience spanning major corporations and start-ups. Our pharmaceutical consulting firm knows firsthand how to achieve, maintain, and improve quality, and we excel in transferring pharma consulting knowledge to your organization.


  • 21 CFR Part 11
  • Data Integrity
  • Manufacturing Support
  • Facility Support
  • Quality Metrics


Remediation Services 


Regulatory Compliance Associates has a proven remediation services approach to managing FDA Warning Letters, Consent Decrees, Remediation and other serious regulatory situations. Our pharma consultants know how to partner with executive, legal, and communication teams. Each RCA pharma consulting Expert will develop a response that will be accepted by the regulatory agency and be realistic to execute.


Regulatory Compliance Associates pharma regulatory consultants will develop a comprehensive proof book of documented evidence demonstrating the corrective action taken to remediate non-compliant issues. In addition, each Regulatory Compliance Associates pharma consulting Expert understands compliance enforcement. We’ll prepare a comprehensive pharma consulting strategy to assist in your remediation efforts, drive continuous improvement, and maintain regulatory compliance with the regulations.


  • Regulatory Action
  • Regulatory Compliance
  • Regulatory Enforcement
  • Warning Letter
  • 483 Observation
  • Oversight Services
  • Risk Management Plan


About Regulatory Compliance Associates


pharmaceutical consultantsRegulatory Compliance Associates® (RCA) provides pharmaceutical consulting to the following industries for resolution of life science challenges:



We understand the complexities of running a life science business and possess areas of expertise that include every facet of R&D, operations, regulatory affairs, quality, and manufacturing. We are used to working on the front lines and thriving in the scrutiny of FDA, Health Canada, MHRA and globally-regulated companies.


As your partners, we can negotiate the potential minefield of regulatory compliance and regulatory due diligence with insight, hindsight, and the clear advantage of our unique expertise and experience.


  • Founded in 2000
  • Headquartered in Wisconsin (USA)
  • Expertise backed by over 500 industry subject matter experts
  • Acquired by Sotera Health in 2021


About Sotera Health


The name Sotera Health was inspired by Soteria, the Greek goddess of safety, and reflects the Company’s unwavering commitment to its mission, Safeguarding Global Health®.


Sotera Health Company, along with its three best-in-class businesses – Sterigenics®Nordion® and Nelson Labs®, is a leading global provider of mission-critical end-to-end sterilization solutions and lab testing and advisory services for the healthcare industry. With a combined tenure across our businesses of nearly 200 years and our industry-recognized scientific and technological expertise, we help to ensure the safety of over 190 million patients and healthcare practitioners around the world every year.


We are a trusted partner to 5,800+ customers in over 50 countries, including 40 of the top 50 medical device companies and 9 of the top 10 pharmaceutical companies.


Commitment to Quality


Our Certificate of Registration demonstrates that our Quality Management System meets the requirements of ISO 9001:2015, an internationally recognized standard of quality.


To begin the Regulatory Compliance Associates scoping process today, please enter your information in the blue form below and click the submit button at the bottom of the webpage. 


Our website uses cookies to give you the best possible experience.

By continuing to use this site, you agree to the use of cookies.