An organization should manage its suppliers and external resources by evaluating and documenting them, as required by ISO 9001:2015. This involves assessing suppliers based on criteria such as price, quality, and delivery time. The organization should also consider a risk-based approach to prioritize audits and evaluations, focusing more on suppliers that pose higher risks to operations. Certified suppliers, who undergo regular audits by accredited bodies, may require less direct auditing. Additionally, the organization should ensure that the necessary resources for monitoring and measuring are suitable and maintained, and maintain documented information as evidence of conformity with QMS requirements.