Why should an establishment keep records such as incident reports and server certification status?

An establishment should keep records — such as incident reports, server certification status, training logs, and refusal-of-service notes — to demonstrate compliance and responsible practices. These records can protect the business during inspections, complaints, or legal disputes by showing that it followed the law and took reasonable steps to serve responsibly. They also help management monitor staff compliance and identify issues. Good recordkeeping is a practical risk-management tool, and managers are typically responsible for maintaining and reviewing these records as part of compliance.