An organization should manage its suppliers and external resources by evaluating and documenting them, as required by ISO 9001:2015. This involves establishing criteria to assess suppliers, such as price, quality, and delivery time. The organization should also consider a risk-based approach to prioritize audits and assessments, focusing more on suppliers that pose higher risks to operations. Certified suppliers may require less frequent audits due to their regular evaluations by accredited bodies. Additionally, the organization should ensure that the necessary resources for monitoring and measuring are suitable and maintained, and maintain documented information as evidence of conformity with QMS requirements.