An organization should manage its suppliers and external resources by evaluating and documenting them as part of the "Control of externally provided processes, products, and services" requirement in ISO 9001:2015. This involves selecting relevant suppliers, such as those providing raw materials, transportation, legal support, IT services, and equipment, and establishing criteria to evaluate them based on factors like price, quality, and delivery time. A risk-based approach can be used to prioritize audits and assessments, focusing more on suppliers without ISO 9001:2015 certification. This ensures that the organization maintains conformity with the QMS requirements while optimizing resource use.