Choose accountable sources
Maintain references from approved, current sources and record who is responsible for reviewing updates and access permissions.
Control versions
Label revision dates, replace superseded material and make it clear which reference staff should use during an active inspection.
Test availability
Periodically confirm that authorized staff can reach the reference at the point of use and know what to do when it is unavailable.
Create an inventory and owner
List each reference set, the jurisdictions and document editions it covers, its source, last review date and responsible owner. Distinguish official or approved sources from general training examples. An inventory makes gaps visible and helps prevent a convenient but outdated image from circulating as the current standard after the underlying document or policy changes.
Publish updates deliberately
Review new material before release, document what changed and notify affected staff. Replace printed copies and cached local files where practical, not just the central version. If an update changes the inspection sequence or acceptance rule, coordinate procedure and training revisions. A reference update should not quietly create a new operational policy without the appropriate review.
Protect access and integrity
Limit editing rights, preserve source attribution and use version history or checksums where appropriate. Ensure authorized reviewers can access material during normal work and approved outage procedures. Periodically test links and permissions. Reference security matters because altered, incomplete or unavailable information can produce inconsistent decisions even when staff believe they are following the current process.
Reference maintenance checklist
Keep an owned inventory with scope, source and review date; approve and version updates; replace active copies; test access; and coordinate changes with training and procedure owners. Restrict editing while keeping material available to authorized reviewers. Record unresolved coverage gaps so staff can escalate them instead of substituting an unverified image or outdated example. Include backup access for approved operational outages.

