The 10 SOPs Every Licensed Facility Gets Wrong: Test Yours Against This List

Executive Summary

Standard operating procedures are the most inspected documents in any licensed facility, and they are also the most commonly deficient. The most frequently cited observation in FDA drug inspections, year after year, is that quality unit procedures are not in writing or not fully followed (21 CFR 211.22(d), cited 243 times in the 2025 fiscal year alone). Health Canada expects the same discipline: section 80 of the Cannabis Regulations requires that cannabis be produced, packaged, labelled, stored, sampled and tested under standard operating procedures, and Part C, Division 2 of the Food and Drug Regulations builds written procedures into nearly every GMP requirement for drugs.

The pattern behind those citations is consistent. SOPs fail for three reasons: language so complicated that operators cannot follow it, no standard structure across the document set, and training programs that never catch up to document revisions. This article walks through the 10 SOPs that inspectors probe hardest, shows a weak clause and a defensible clause for each, and gives you a simple way to test your own procedures against the list.

Introduction

Every licensed facility has SOPs. Very few have SOPs that hold up when an inspector reads them next to the records and asks one question: did you do what your procedure says you do?

That question is where most findings are born. Not because staff are careless, but because the procedure itself was never written to be followed. It says regularly instead of a frequency. It says management instead of a named role. It says as appropriate instead of a criterion. When the document is vague, every operator fills the gap differently, and the inspector reads that variation as a facility that does not control its own operations.

This article is a self-test. For each of the 10 SOPs below, compare the weak clause to the defensible clause, then open your own procedure and decide honestly which one it resembles. If you want the deeper method behind writing each procedure, our guide on how to write SOPs that pass a Health Canada inspection pairs directly with this list.

Why Do SOPs Fail Inspections?

Direct answer: SOPs fail inspections for three reasons. First, complicated language: procedures written like legal documents that operators cannot follow at the bench. Second, lack of standardization: every SOP in the set has a different structure, so nobody can find anything and gaps hide easily. Third, training lag: documents are revised but training never catches up, so staff follow the old version while the inspector reads the new one.

Regulators do not grade SOPs on elegance. They grade them on whether the written procedure, the observed practice, and the completed record all match. Health Canada's Good production practices guide for cannabis and the drug GMP guide GUI-0001 both frame SOPs as the mechanism that turns regulatory requirements into consistent daily behaviour. ICH Q10 goes further and treats procedures as an output of the pharmaceutical quality system, meaning a weak SOP is evidence of a weak system.

The three failure modes compound each other. A procedure written in complicated language gets ignored on the floor. An SOP set with no standard template makes revisions slow and inconsistent. Slow revisions mean training materials drift out of date. By the time an inspector arrives, the facility is running on tribal knowledge and the documents describe a facility that does not exist.

How to Test Your SOPs Against This List

Direct answer: For each of the 10 SOPs, read the weak clause and the defensible clause, then find the equivalent clause in your own procedure. Score it 0 if it resembles the weak clause, 1 if it sits in between, and 2 if it matches the defensible pattern: a named role, a specific action, a measurable criterion, a timeframe, and a record. A set scoring below 14 out of 20 needs remediation before your next inspection.

The difference between the weak and defensible versions is never wordiness. In most cases the defensible clause is barely longer. The difference is that it answers five questions the weak clause leaves open: who acts, what exactly they do, against what criterion, by when, and on which record. Keep those five elements in mind as you read the list.

The 10 SOPs Every Licensed Facility Gets Wrong

1. Document Control and Records Management

The SOP that governs every other SOP, and the first one inspectors pull. The classic failure is obsolete versions still posted at workstations while the master list shows a newer revision.

Weak clause: "All documents must be kept up to date and approved by management before use."

Defensible clause: "The QA Manager approves each controlled document before its effective date. Superseded copies are removed from all points of use within one business day of the effective date, stamped Obsolete, and archived per the retention schedule in Appendix A. The master document list is reconciled quarterly and the reconciliation is recorded on Form DC-03."

The weak clause names no role, no timeline, and no record. The defensible clause can be verified in five minutes from the master list, the stamped archive, and Form DC-03.

2. Personnel Training and Qualification

This is where the training-lag problem lives. Section 88.1 of the Cannabis Regulations requires personnel to have the competencies and qualifications for their activities, and FDA and Health Canada both expect training to be tied to the current document revision, not to the version that existed when the employee was hired.

Weak clause: "Employees will be trained on relevant SOPs as required."

Defensible clause: "When a revised SOP is approved, the department supervisor assigns training before the effective date. An employee may not perform a task governed by a revised SOP until training on the current revision is documented on Form TR-01. QA verifies training completion against the effective-date log monthly."

The defensible version closes the gap that produces the most common training finding: a signed record for revision 3 while the floor is running revision 5.

3. Sanitation and Cleaning

Sanitation is a licence-level obligation. Section 87 of the Cannabis Regulations requires an effective sanitation program, and the drug GMP provisions in Part C, Division 2 of the Food and Drug Regulations expect written sanitation procedures for premises and equipment.

Weak clause: "Production areas shall be cleaned regularly using appropriate cleaning agents."

Defensible clause: "The production operator cleans Room 101 contact surfaces after each lot using Agent X at the concentration in Appendix B, records completion on the room sanitation log, and applies the Cleaned status tag. QA verifies cleaning effectiveness weekly against the acceptance criterion (visually clean and within the established microbial limits) and records the check on Form SN-02."

Regularly and appropriate are the two most dangerous words in any sanitation SOP. Replace them with a frequency, an agent, a concentration, and an acceptance criterion.

4. Deviation and Nonconformance Management

Inspectors read deviation files to learn how a facility behaves when something goes wrong. A vague reporting clause produces late, undocumented, or quietly closed deviations.

Weak clause: "Any deviations should be reported to Quality Assurance in a timely manner."

Defensible clause: "The person who discovers a deviation records it on Form DEV-01 before the end of the shift and notifies QA within 24 hours. QA classifies the deviation as minor, major, or critical within two business days, documents the rationale, and confirms lot disposition impact before any affected lot is released."

Timely is not a timeframe. A number is a timeframe.

5. Corrective and Preventive Action (CAPA)

The CAPA SOP is where weak language turns into repeat findings, because a procedure that does not force a real root cause guarantees the same deviation next quarter. We covered the investigation discipline in depth in why CAPA keeps failing.

Weak clause: "Corrective actions will be taken when problems occur."

Defensible clause: "QA opens a CAPA for every critical deviation, every confirmed complaint, and any minor deviation that recurs within 12 months. Each CAPA documents a root cause established with a defined method (5 Whys or fishbone), actions with a named owner and due date, and an effectiveness check performed at a defined interval after closure."

6. Change Control

Undocumented change is one of the most common root causes inspectors find behind other findings. The weak version makes significant a matter of opinion.

Weak clause: "Significant changes must be approved before implementation."

Defensible clause: "Any change to equipment, materials, suppliers, methods, premises, or controlled documents listed in Appendix A requires a change request approved by QA before implementation. Each request records an impact assessment covering validation status, licence and regulatory filings, and training, and the change is not closed until all impacted documents and training records are updated."

7. Supplier Qualification and Incoming Materials

Your product quality starts with someone else's process. Regulators across cannabis, drugs, NHPs (GUI-0158), and food (the preventive control requirements under the Safe Food for Canadians Regulations) all expect incoming materials to be controlled against specifications, not just purchased in good faith.

Weak clause: "Materials shall be purchased from approved suppliers where possible."

Defensible clause: "Materials are purchased only from suppliers on the Approved Supplier List maintained by QA. Each incoming lot is quarantined on receipt and is not released to production until identity is confirmed and the certificate of analysis is reviewed and approved by QA against the material specification. Discrepancies are handled as deviations under SOP-QA-004."

Where possible is an escape hatch. Inspectors read it as we buy from anyone when it is convenient.

8. Equipment Maintenance and Calibration

The finding here is rarely a missed calibration. It is the absence of any procedure for what happens after an instrument is found out of tolerance.

Weak clause: "Equipment should be maintained in good working order and calibrated periodically."

Defensible clause: "Instruments listed in Appendix B are calibrated at the interval defined in the calibration schedule by qualified personnel or an approved contractor. An out-of-tolerance result triggers a deviation that assesses all product tested or produced since the last successful calibration, and the instrument is tagged out of service until recalibrated."

9. Complaints and Recall

Recall procedures are tested, not just read. Health Canada expects licence holders to be able to execute a recall effectively, and a mock recall that cannot reconcile distributed product is a serious signal.

Weak clause: "Customer complaints will be investigated and recalls will be initiated if necessary."

Defensible clause: "QA logs each complaint on Form CP-01 within one business day of receipt, assesses whether it indicates a quality defect or a reportable event, and completes the investigation within 30 calendar days. A mock recall is performed at least annually and must reconcile the distribution of the selected lot within the timeframe defined in Appendix C; failure to meet the criterion triggers a CAPA."

10. Batch Record Review and Product Release

The last gate, and the one with the least room for vagueness. Under section 88 of the Cannabis Regulations, the quality assurance person must approve every lot before sale. Drug GMP places the same duty on the quality control department.

Weak clause: "Finished products are released after review by Quality Assurance."

Defensible clause: "The QAP releases a lot only after verifying that the batch record is complete, all deviations affecting the lot are closed or dispositioned, all test results meet specification, and label reconciliation is within limits. Release is documented by the QAP's dated signature on Form RL-01. No product is shipped without a documented release."

The Pattern: What Makes a Clause Defensible

Direct answer: A defensible SOP clause contains five elements: a named role (who), a specific action (what), a measurable criterion (against what standard), a timeframe (by when), and a record (where it is documented). If any of the five is missing, the clause cannot be verified, and a clause that cannot be verified cannot protect you in an inspection.

Run the five-element test against the weak clauses above and each one fails at least three elements. Run it against the defensible versions and all five are present. This is also why defensible SOPs are usually easier to follow, not harder: specificity removes the interpretation burden from the operator. Plain language at a Grade 8 to 10 reading level, one action per sentence, and a consistent template across the whole SOP set do more for compliance than any amount of regulatory citation inside the document.

Standardization matters as much as wording. When every SOP shares one structure (purpose, scope, responsibilities, definitions, procedure, records, references, revision history), staff find information faster, revisions get easier, and gaps become visible. If your documents also feed electronic systems, pair this with our analysis of audit trail review and data integrity, because the same verifiability logic applies to electronic records.

SOP Self-Audit Summary Table

SOP Compliance Checklist

Use this checklist against your full SOP set, not just the 10 above.

• Every SOP names specific roles, never staff or management
• Every frequency is a number, never regularly or periodically
• Every acceptance criterion is measurable, never appropriate or adequate
• Every required action produces a named record or form
• All SOPs follow one standard template and numbering system
• The master document list matches what is posted at points of use
• Reading level is Grade 8 to 10 and sentences carry one action each
• Training is gated on the current revision, with a verification loop
• Each SOP has a review date and an owner accountable for it
• The set maps to your licence type: GPP for cannabis, Division 2 GMP for drugs, GUI-0158 for NHPs, PCP requirements for food
• Deviations, CAPA, and change control cross-reference each other correctly
• A mock recall in the last 12 months met its reconciliation criterion

Common Mistakes

Writing SOPs for the inspector instead of the operator. Documents stuffed with regulatory citations and legal phrasing impress nobody and get ignored on the floor. Write for the person doing the task; the inspector will judge you on whether the task matches the document.

Copying template SOPs without localizing them. Purchased templates that still reference equipment you do not own or rooms that do not exist are an instant credibility failure in an inspection.

Revising documents without revising training. Every revision needs a training impact decision, recorded, before the effective date. Otherwise your training matrix decays with every document change.

Letting each department write in its own style. Without one template, quality of writing depends on who held the pen. Standardize the skeleton so effort goes into content.

Treating the annual review as a signature exercise. A review that changes nothing year after year, while deviations recur, tells an inspector the review is not real.

Burying critical numbers in prose. Frequencies, limits, and retention periods belong in tables and appendices where they can be found and updated cleanly.

Assuming AI-drafted procedures are compliant procedures. Drafting tools accelerate writing but do not know your facility. Everything still requires the verification discipline we describe in using AI in GMP documentation.

Frequently Asked Questions

Which SOPs does a licensed facility legally need?

It depends on the licence. Cannabis licence holders need SOPs covering the good production practices in Part 5 of the Cannabis Regulations (section 80 makes SOPs an explicit obligation). Drug establishments need the written procedures required by Part C, Division 2 of the Food and Drug Regulations as interpreted in GUI-0001. NHP site licence holders follow GUI-0158, and food licence holders build procedures into their preventive control plan under the Safe Food for Canadians Regulations. The 10 SOPs in this article appear in some form in every one of those frameworks.

Why do inspectors focus so heavily on SOPs?

Because SOPs are the bridge between the regulation and the record. An inspector cannot watch a year of operations, so they read the procedure, then pull records to see whether reality matches. The most cited FDA drug observation, 21 CFR 211.22(d), is precisely that procedures were not in writing or not fully followed.

What makes an SOP defensible in an inspection?

A defensible SOP states who does what, against what criterion, by when, and on which record, in language a trained operator can follow without interpretation. If an inspector can verify the clause from the records alone, it is defensible. If they have to ask someone what the clause means, it is not.

How often should SOPs be reviewed?

A defined periodic review, commonly every one to three years depending on risk, plus an event-driven review whenever regulations, equipment, methods, or licences change. The interval matters less than the honesty of the review: recurring deviations against an unchanged SOP mean the review is not working.

How do we keep training aligned with document revisions?

Gate the task, not just the course. The rule that works is: no one performs a task governed by a revised SOP until training on the current revision is documented. Pair that with a monthly QA verification of training records against document effective dates, and the lag problem disappears.

Do these 10 SOPs apply outside cannabis?

Yes. The regulatory hooks differ (GPP for cannabis, GMP for drugs and NHPs, preventive controls for food, QMS requirements for devices), but document control, training, sanitation, deviations, CAPA, change control, supplier control, calibration, recall, and release are the core of every quality system. The weak-versus-defensible test applies identically in all of them.

How MFLRC Can Help

MF License and Regulatory Consultants builds and remediates SOP systems for licensed facilities across cannabis, pharmaceuticals, natural health products, medical devices, and food. Our senior consultants have written, defended, and inspected these documents from both sides of the table.

For SOP and QMS documentation specifically, we provide: a full SOP gap assessment scored against the five-element standard in this article, SOP development and rewriting in plain, defensible language on a standardized template, quality system builds that connect deviations, CAPA, and change control correctly, training program design that gates tasks on current revisions, and mock inspections that test your documents the way a regulator will. These services are delivered through our quality assurance and quality control practice and our regulatory affairs and licensing practice, and they pair naturally with the 25-point inspection readiness self-assessment we published earlier this year.

Scored below 14 on the self-test? Turn your weakest procedures into your strongest evidence.

Conclusion

The 10 SOPs in this list fail for the same reasons in every licensed facility: vague language, inconsistent structure, and training that trails the documents. The fix is equally consistent. Name the role, state the action, set the criterion, fix the timeframe, and point to the record. Do that across these 10 procedures and you have not just cleaner documents; you have an inspection defence, because every claim your team makes can be verified on paper.

Run the self-test this week. Score each of the 10 against the weak and defensible clauses, download the scorecard, and be honest about what you find. It is far cheaper to find a weak clause yourself in July than to have an inspector find it for you in October.

Sources and References

• Cannabis Regulations (SOR/2018-144), Part 5, sections 80, 87, 88 and 88.1.
• Health Canada, Good production practices guide for cannabis.
• Health Canada, Good manufacturing practices guide for drug products (GUI-0001).
• Food and Drug Regulations (C.R.C., c. 870), Part C, Division 2.
• U.S. FDA, Inspection Observations (Form 483 citation data, including 21 CFR 211.22(d)).
• ICH Q10, Pharmaceutical Quality System.
• Health Canada, Good manufacturing practices guide for natural health products (GUI-0158).
• Canadian Food Inspection Agency, Preventive controls and preventive control plan for food businesses.

Regulatory references were verified against Justice Laws, Health Canada, FDA, ICH, and CFIA sources at the time of writing. Always confirm the current version of each regulation and guidance document before making compliance decisions.