An organization should manage its suppliers and external resources by evaluating and documenting relevant suppliers, as required by ISO 9001:2015. This involves controlling externally provided processes, products, and services, which are typically subcontracted or outsourced. The organization should establish criteria to evaluate suppliers, such as price, quality, and delivery time, and may choose to assess or audit suppliers based on a risk-based approach. Certified suppliers, who undergo regular audits by accredited bodies, may reduce the need for additional audits. The organization should also ensure that resources obtained from external providers are suitable for establishing, implementing, maintaining, and continually improving the Quality Management System (QMS).