I'm curious as to how other organizations meet this requirement. My organization meets it in a few different ways: logging continuous improvements, having consistent management/staff meetings, reviewing policies/procedures on a consistent basis, to name a few. However, it often confuses auditors based on the fact that it's not in one neat and tidy ‘package’ that I can point to directly.