Internal audits, management reviews, and risk/opportunity management.
The PDF details specific methodologies: