The organization shall establish and maintain procedures for the identification, maintenance and disposition of OH&S records, as well as of audits and reviews.