Skip to content
Certifyd
Office AdministrationGuide

How to write office policies and SOPs

Writing office policies and SOPs in Malaysia means stating the rule and its purpose in a policy, then writing the step-by-step procedure that puts it into practice. Each document names an owner, its scope and the records it creates, is approved by management, is explained to staff, and is reviewed on a fixed cycle.

An office administrator organising files at a bright reception counter

What is the difference between a policy and an SOP?

A policy says what must happen and why; a standard operating procedure says how to do it, step by step. Keeping them separate lets you update a procedure without re-approving the whole policy.

Some offices also keep short work instructions for single tasks, such as how to raise a purchase request in a system. Use the lightest document that does the job, and link each SOP back to the policy it supports.

Policy, SOP and work instruction
DocumentAnswersApproved by
PolicyWhat the rule is and why it existsSenior management
SOPWho does what, in which order, with which recordsProcess owner or department head
Work instructionHow to do one task in detailProcess owner

What should every policy and SOP contain?

Every document needs the same core parts, so staff always know where to look. Use one template across the office.

  • Title, document number, version and effective date
  • Purpose and scope: who and what it covers
  • Owner and roles, with responsibilities stated plainly
  • The rule (policy) or the steps (SOP), in short numbered lines
  • Records and forms produced
  • Related policies and any law it supports
  • Approval and next review date

Write in plain words, one action per step, using the job title rather than a person's name. The Office Policies & Procedures Development course covers drafting and templates.

How do you draft and approve a new policy?

Start from the problem the policy solves, draft with the people who do the work, then get formal approval. Policies written without the users tend to be ignored.

  1. Define the need: a risk, a repeated error, an audit finding or a legal requirement.
  2. Map how the work is done today.
  3. Draft the policy and SOP together with the process owner and users.
  4. Check any legal points against the current law on Laws of Malaysia, or with HR or legal advisers.
  5. Circulate the draft for comment and revise it.
  6. Get approval at the right level and record the version.

How do you make sure policies are followed?

A policy is only working when staff know it, can find it and follow it. Roll it out with a short briefing, keep the current version in one shared place, and check compliance.

  • Brief affected staff and record who has read it
  • Withdraw old versions so only one is in use
  • Check a sample of records against the SOP from time to time
  • Review each document on its review date, or sooner when the work or the law changes

The Office Policy Implementation & Compliance Monitoring course covers roll-out and monitoring, and the Certified Office Policies Administrator is a Certifyd certification aligned to NOSS competency units. Test your current set with the free policy compliance check.

What are the steps?

  1. Define the need and scope

    State the problem the policy solves, who it covers and who owns it.

  2. Map the current process

    Walk through how the work is done today with the people who do it.

  3. Draft the policy and SOP

    Use the office template: purpose, scope, roles, rule or steps, records and review date.

  4. Consult and check

    Circulate for comment and check legal points against the current law or with advisers.

  5. Approve and publish

    Get approval at the right level, record the version and publish it in one shared place.

  6. Brief, monitor and review

    Brief staff, check compliance with samples and review on the set date.
Courses, checks and reading on the same work.

Frequently asked questions.

Short answers to what people ask first.

How often should office policies be reviewed?

Set a review cycle for each document, often yearly or every two years, and review sooner if the work, the system or the law changes. Record the review even when nothing changes.

Who should own a policy?

The manager responsible for the process should own it, not the person who typed it. The owner keeps it current, answers questions and approves changes to its SOPs.

Should policies be in English or Bahasa Malaysia?

Use the language your staff read most easily, and provide both if your workforce needs it. If you keep two versions, state which one prevails and update them together.

Which sources does this page use?

Updated 20 October 2026. General information from the Certifyd team, not legal, tax or safety advice for your workplace.