Answer
Control who can use it, use a password manager or equivalent secure process, keep an internal access log, and record who submitted or changed each regulatory item.
Explanation
A weak external system does not prevent the operator from adding internal traceability.