An organization should manage its suppliers and external resources by evaluating and documenting the relevant suppliers, as required by ISO 9001:2015. This involves controlling externally provided processes, products, and services, which are subcontracted or outsourced by the organization. The organization should establish criteria to evaluate suppliers, such as price, quality, and delivery time, and assess or audit suppliers based on a risk-based approach. Certified suppliers may reduce the need for additional audits, while suppliers without certification might require more direct auditing efforts. This approach ensures conformity with the Quality Management System (QMS) requirements of ISO 9001:2015.