Comment by TobySKT

Just do audits. There are ISO standards for practically everything and you should run internal audits (and external ones if you can afford it for important stuff)