An organization should manage its suppliers and external resources by evaluating and documenting them, as required by ISO 9001:2015. This involves establishing criteria to assess suppliers, such as price, quality, and delivery time, and considering a risk-based approach to prioritize audits and assessments. Certified suppliers may require less direct auditing due to regular audits by accredited bodies, while non-certified suppliers might need more attention. The organization should also ensure that necessary resources are determined and provided for the effective implementation and continual improvement of the QMS, considering both internal and external resources.