Actively verifying and documenting that due care is actually working. Training attendance records, audit results, sign-off logs.
Want to actually apply concepts like this instead of just reading definitions?