Quality & Improvement

Policy vs Procedure

Also known as: policies and procedures, policy and procedure

A policy is a rule or position that sets the what and the why. A procedure is the how: the ordered steps people follow to comply with that policy.

Read this article summarized with

A policy states an organization's intent and direction on a subject, so it answers what the rule is and why it exists. [3] [4] A procedure is the specified way to carry out an activity or a process, so it answers how the work gets done. [1] Policies live at the strategic level and are usually owned and approved by senior leadership, while procedures are operational and owned by the people closest to the work. [3] Standard operating procedures and work instructions are types of procedures, sitting at increasing levels of detail under the policy they support. [2]

Key characteristics

  • A policy sets a rule or position: the what and the why. A procedure sets the method: the how. [3] [4]
  • Policies are technology and tool independent. Procedures name specific tools, settings, and acceptance criteria. [3]
  • Policies are centrally owned and approved by leadership. Procedures are decentralized and owned by process experts. [3]
  • A policy changes rarely, when the organization's position changes. A procedure changes often, when the way the work is done changes. [3]
  • SOPs and work instructions are procedures, ordered from process-level down to task-level detail. [1] [2]
  • One policy is usually supported by many procedures. A single procedure rarely needs its own policy. [4]

Example

Allergen control on a food production line

A food plant's allergen control policy is one paragraph: the site will prevent cross-contact between allergen-containing and allergen-free products, and no product ships without a documented allergen changeover. That is the rule and the reason. It does not tell anyone how to clean a line. The procedure that sits under it, the allergen changeover SOP, is where the how lives: sequence the run to put allergen products last, break down the filler, wash down with the validated detergent at the right concentration, swab the contact surfaces, record the ATP reading, and hold the line until QA releases it. Below that, a work instruction card at the wash station shows exactly how to dose the detergent and where to swab. The policy never mentions detergent concentration. The procedure never restates why allergens matter. Together they cover the position and the practice.

Comparison

Policy vs procedure

Aspect Policy Procedure
Question it answers What is the rule, and why How to do the work, step by step
Level Strategic and organization-wide Operational and task-specific
Owner Senior leadership or a governing body Department heads and subject-matter experts
Detail High level, tool independent Concrete steps, tools, and acceptance criteria
How often it changes Rarely, when the position changes Often, when the method or tooling changes
Examples Quality policy, safety policy, data retention policy SOPs and work instructions

How SOPX handles this

Procedures are the layer SOPX builds. A supervisor records the process on a phone or uploads an existing PDF, and AI turns it into a structured procedure: ordered steps, a trimmed video clip per step, titles, and descriptions, published in under 10 minutes. That is the how. Policies stay human-authored on top, because a rule or position is a judgment call for leadership, not something to generate from a recording. SOPX keeps every procedure versioned, searchable, and translatable into 50+ languages, so when a policy says a documented changeover is required, the procedure that proves it is one QR scan away. For a fuller breakdown, see the policy vs procedure guide.

Related use case: Process Standardization →

Frequently asked questions

What is the simplest way to tell a policy and a procedure apart?
Ask what question the document answers. If it states a rule or a position, the what and the why, it is a policy. If it lays out the steps someone follows to comply, the how, it is a procedure. [3] [4] A policy might say 'all lifting over 25 kg requires mechanical assistance.' The procedure is the step list for using the pallet jack or hoist that makes that rule real.
Are SOPs and work instructions policies or procedures?
Both are procedures. A standard operating procedure describes how a process is carried out end to end, and a work instruction describes how to perform a single task within that process in more detail. [1] [2] They differ in scope, not in kind. Neither one is a policy, because they describe method rather than set a rule.
Do I need a policy for every procedure?
No. Procedures far outnumber policies. One policy usually governs many procedures. [4] You write a policy when you need a stated position that many procedures must respect, for example a food safety policy or a lockout/tagout policy. You write a procedure whenever there is a task that should be done the same way every time, whether or not a formal policy names it.
Who should own each document?
Policies are typically owned and approved by senior leadership or a governing body, because they express organizational intent and risk appetite. [3] Procedures are best owned by the people closest to the work, such as a line supervisor or a subject-matter expert, because they are the ones who know the real steps and will keep them current as tools and settings change.
Why do procedures change more often than policies?
A policy reflects a position that stays stable, so it changes rarely. A procedure reflects how the work is actually done, and that shifts whenever tooling, machine settings, or acceptance criteria change, which is why procedures are treated as living documents. [3] Keeping them separate means updating a step does not force a rewrite of the parent policy.

Sources

Statements above draw on the references below. Numbers in the text link to the matching entry.

  1. [1]
    ISO 9000 Terminology: What exactly are procedures and processes?
    Advisera 9001Academy · Accessed 2026-07-08
  2. [2]
  3. [3]
    Policies vs Standards vs Controls vs Procedures
    ComplianceForge · Accessed 2026-07-08

Tags

documentation compliance iso governance quality

Last reviewed: 2026-07-08

Stop writing SOPs. Start recording them.

Film any process on your phone. SOPX turns it into a structured, editable SOP in under 10 minutes. No writing required.