TL;DR: This article defines the 7 core HR processes every UK business with 50–500 employees should have in place — and gives you a practical self-assessment checklist to spot where your people operations have gaps before they become problems.
Introduction: Does Your HR Function Have the Right Foundations?
Picture this: an HR Director at a 150-person professional services firm discovers, during a data breach investigation, that a former employee who left three months ago still has active access to the company's CRM and client files. Nobody revoked it. There was no offboarding checklist. The process existed informally — whoever happened to remember would send an email to IT — but it was never documented, never consistently followed, and never owned. The result? A potential GDPR breach, a very uncomfortable conversation with the ICO, and a frantic weekend of damage limitation.
This isn't a cautionary tale about one careless company. It's a pattern that plays out regularly in businesses between 50 and 500 employees, where HR teams are lean, reactive, and perpetually firefighting. You're doing HR — but do you have HR processes?
This article is a self-assessment tool. By the end of it, you'll have a clear picture of which of the 7 core HR processes your business has in place, which are documented, and which are consistently applied. That last part matters more than most HR Directors realise — especially when UK employment law is involved.
Why a Process Audit Matters More Than You Think
There's an important distinction between doing HR and having HR processes. Most lean HR teams do plenty of HR — they hire people, run appraisals, handle grievances, process leavers. But much of it operates on tribal knowledge: the way things have always been done, held in the heads of two or three people, and never written down.
The problem is that tribal knowledge doesn't hold up under scrutiny. Under the Employment Rights Act 1996 and ACAS Codes of Practice, employers are expected to apply their policies consistently and fairly. When an employment tribunal examines a dismissal or a discrimination claim, one of the first things they look at is whether the employer followed its own documented procedures. If those procedures don't exist — or exist only informally — you're already on the back foot.
According to CIPD research, HR professionals in UK SMEs spend a disproportionate amount of time on administrative tasks and reactive people issues, leaving little capacity to build the process foundations that would reduce those issues in the first place. It's a cycle that's hard to break without stepping back and auditing what you actually have.
For each of the 7 processes below, ask yourself three questions: Do we have it? Is it documented? Is it consistently applied? Score honestly. The gaps you find are the gaps that will cost you.
The 7 Core HR Processes (And How to Audit Each One)
These are the operational foundations of any effective HR function. They're not a rigid universal standard — frameworks vary, and the right level of formality will depend on your size and sector. But as a practical working model for UK businesses with 50 to 500 employees, these seven processes cover the full employee lifecycle and carry specific legal obligations under UK employment law.
1. Recruitment & Selection
Recruitment is the end-to-end process from job brief to signed offer — encompassing job design, sourcing, shortlisting, interviewing, and offer management. It sounds straightforward, but in practice it's one of the most legally exposed processes an employer runs.
Under the Equality Act 2010, employers must be able to demonstrate that selection decisions were based on consistent, documented criteria. Structured interviews with scored competency frameworks aren't just good practice — they're your defence if a rejected candidate claims discrimination. ACAS recommends structured interviews precisely because they create an auditable record of why one candidate was selected over another.
The most common gap here isn't a lack of hiring — it's a lack of central oversight. Hiring managers run their own informal processes, use their own questions, and make decisions based on gut feel rather than documented criteria. Ask yourself: do you have a documented hiring process that every hiring manager follows? Are interview scoring criteria consistent across the business? Do you track time-to-hire and source of hire? If the answer to any of these is "not really," your recruitment process is a liability as much as an asset.
2. Onboarding & Induction
Onboarding covers everything from offer acceptance to the end of probation — contracts, right-to-work checks, equipment provisioning, induction schedules, and buddy systems. It's also one of the most legally specific processes on this list.
Right to Work checks are a legal obligation, not a nice-to-have. Employers who fail to conduct them correctly face civil penalties of up to £60,000 per illegal worker (Home Office, 2024). Separately, since April 2020, employers have been legally required to provide a written statement of employment particulars from day one of employment — not within two months, as was previously acceptable, but on the first day (Employment Rights Act 1996, as amended by the Good Work Plan). Many businesses are still operating on the old timeline.
Is your onboarding process written down and consistently followed, or does it live in one person's head? When that person goes on maternity leave or hands in their notice, does the process go with them? Do you measure 90-day retention as a proxy for onboarding effectiveness? These are the questions that reveal whether you have a process or just a habit.
3. Performance Management
Performance management encompasses goal-setting, regular one-to-ones, probation reviews, mid-year and annual appraisals, and — critically — the management of underperformance. It's the process that most directly affects your ability to develop your people and, when necessary, exit those who aren't performing.
The UK legal context here is significant. Without a documented performance management process, managing out an underperformer becomes legally treacherous. The ACAS Code of Practice on Disciplinary and Grievance Procedures sets out the steps employers are expected to follow before dismissal — and employment tribunals will assess whether you followed a fair process, not just whether the decision was commercially reasonable.
The most common gap isn't the absence of a performance review system — it's inconsistent application. Some managers conduct meaningful quarterly conversations; others haven't had a documented review conversation with their team in two years. Do all employees have documented objectives? Are line managers trained to conduct meaningful reviews? Do you have a clear, documented process for managing underperformance before it reaches a formal disciplinary stage? If the answer varies by manager, you have a process gap.
4. Learning & Development
Learning and development covers skills gap identification, mandatory compliance training, career development pathways, and learning budgets. It's the process that most directly affects your ability to retain talent and build organisational capability — and it carries its own legal obligations.
Under the Health and Safety at Work Act 1974, employers have a duty of care to provide adequate training for employees to carry out their roles safely. Under GDPR, staff who handle personal data must receive appropriate data protection training — and you need to be able to evidence it. These aren't aspirational standards; they're legal requirements with enforcement consequences.
The most common gap in L&D isn't a lack of training spend — it's a reactive rather than proactive approach. Someone asks for a course, HR approves it, it gets booked. But there's no training needs analysis, no mapping of skills gaps against business objectives, and no individual development plans. Ask yourself: do you have a process for identifying training needs systematically? Is mandatory compliance training tracked and evidenced? Do employees have documented development plans, or is career development a conversation that happens informally — or not at all?
5. Compensation & Benefits Administration
This process covers payroll accuracy, pay review cycles, benefits enrolment, pension auto-enrolment, and pay equity. It's the process employees notice most when it goes wrong — and the one with the most direct regulatory exposure.
Auto-enrolment is a legal requirement for all eligible workers, and The Pensions Regulator actively enforces compliance. National Minimum Wage and National Living Wage compliance is enforced by HMRC, which publicly names employers who fail to pay correctly — a reputational consequence that sits alongside the financial penalty. Pay decisions made informally by individual managers, without a documented framework, create unexplained pay gaps that can become an equal pay liability under the Equality Act 2010.
Is your payroll process documented and auditable? Do you have a formal pay review cycle with clear, transparent criteria — or are pay increases decided ad hoc? Have you conducted a pay equity review in the last two years? If pay decisions are being made in isolation by different managers with no central oversight, you're building a problem that will eventually surface.
6. Employee Relations & Compliance
Employee relations and compliance covers grievance and disciplinary procedures, absence management, wellbeing support, and the ongoing task of keeping your employment practices aligned with current UK law. It's the process area where undocumented or outdated policies carry the most direct financial risk.
The ACAS Code of Practice on Disciplinary and Grievance Procedures is not legally binding — but employment tribunals take it into account when assessing whether a dismissal was fair. Failure to follow the Code can increase any tribunal award by up to 25% (ACAS Code of Practice on Disciplinary and Grievance Procedures). That's a significant uplift on what might already be a costly outcome.
The most common gap here isn't the absence of policies — most businesses have a grievance procedure and a disciplinary procedure somewhere. The gap is currency. Policies written in 2018 may predate the Employment Rights Act amendments, the extension of flexible working rights, the introduction of carer's leave entitlements, and changes to redundancy consultation requirements. Are your grievance and disciplinary procedures up to date and accessible to all employees? Do you have a documented absence management policy? When did you last review your employee handbook against current UK employment law?
7. Offboarding & Exit Management
Offboarding covers resignation handling, notice period management, exit interviews, knowledge transfer, system access revocation, and reference provision. It's the process most likely to be treated as an afterthought — and, as the opening scenario illustrates, the one where that attitude creates the most acute risk.
GDPR requires that departing employees' data is handled correctly — including ensuring that their access to company systems and data is revoked promptly. The ICO has issued fines for data breaches resulting from inadequate access controls, including cases where former employees retained system access after leaving. The risk isn't hypothetical.
Do you have a documented offboarding checklist that is triggered every time someone leaves — regardless of whether they're a senior manager or a junior team member? Is IT access revocation part of a formal, tracked process rather than an informal email? Do you conduct exit interviews, and — more importantly — do you analyse the themes and act on them? If offboarding is currently something that happens reactively, without a checklist or a clear owner, it's worth prioritising.
How to Score Your HR Process Audit
Here's a simple framework to make this audit actionable. For each of the 7 processes, assign a score of 0, 1, or 2:
- 0 — No process exists, or it's entirely ad hoc
- 1 — An informal process exists but is undocumented or inconsistently applied
- 2 — A documented process exists and is consistently applied across the business
Your maximum score is 14. Here's how to interpret your result:
0–6: Significant gaps exist across multiple process areas. Prioritise the areas with the highest compliance or retention risk — typically onboarding (right-to-work, day-one statements), employee relations (grievance and disciplinary procedures), and offboarding (system access, GDPR).
7–10: You have partial foundations in place. The priority is documentation and consistency — getting informal processes written down and ensuring they're applied the same way regardless of which manager or HR team member is involved.
11–14: Strong foundations. The focus here is optimisation — reviewing processes for currency, measuring their effectiveness, and identifying where technology can reduce administrative burden.
A score of 14 is genuinely rare in companies under 500 people. The goal isn't perfection — it's honest assessment and deliberate progress. Involve your line managers in this audit too. They often know exactly where the real gaps are, because they're the ones working around them.
Ready to run this audit with your team? Use the 7 Core HR Processes self-assessment checklist to score each process area and identify your priorities.
Where Technology Fits In (And Where It Doesn't)
When HR teams identify process gaps, the instinct is often to reach for software. A new HRIS, an onboarding tool, a performance management platform. Technology can absolutely support better HR processes — but it can't substitute for them. As the IBM Institute for Business Value has found, 57% of CEOs believe culture change is more important than overcoming technical challenges during a data-driven transformation. The same logic applies to HR process design: the thinking has to come before the tooling.
The right sequence is: document the process first, then consider how technology can support it. Automating an undocumented, inconsistently applied process doesn't fix it — it just makes the inconsistency faster. It's also worth being aware of the shadow AI risk in HR teams — employees and managers using AI tools informally, without governance, in ways that can create compliance and data protection risks.
That said, once your processes are in place, technology genuinely earns its keep in the areas that generate the highest volume of repetitive employee questions. Policy queries, leave entitlements, benefits questions, and "how do I raise a grievance?" conversations don't require HR judgment — they require accurate, consistent information delivered quickly. This is where understanding how AI-powered HR support handles employee policy questions becomes relevant. Think of Aura as the layer that sits between your documented policies and your employees' questions — when someone asks about their parental leave entitlement, pension contributions, or the disciplinary process at 10 PM on a Tuesday, Aura provides an instant, accurate answer grounded in your company policies and UK employment law, without waiting for Monday morning. Your HR team handles the judgment calls; Aura handles the volume.
The distinction matters. Technology amplifies good processes. It doesn't create them.
Conclusion: Build the Foundations, Then Scale
The 7 core HR processes — recruitment and selection, onboarding, performance management, learning and development, compensation and benefits, employee relations, and offboarding — are not bureaucracy for its own sake. They are the infrastructure that protects your business legally, supports your people consistently, and gives your HR team the headroom to do strategic work rather than firefighting.
Use the self-assessment framework in this article honestly. Score each process area, identify your highest-risk gaps, and prioritise accordingly. The businesses that get this right aren't the ones with the biggest HR teams — they're the ones that have built deliberate, documented foundations and applied them consistently.
If you'd like to see how Aura helps HR teams handle the repetitive policy questions that arise across all 7 process areas — freeing your team to focus on the work that genuinely requires human judgment — book a 20-minute demo at aura-hr.tech.
