An organization should manage its suppliers and external resources by evaluating and documenting relevant suppliers, as required by ISO 9001:2015. This involves assessing suppliers based on criteria such as price, quality, and delivery time. The organization should also consider a risk-based approach to prioritize audits and evaluations, focusing more on suppliers that pose higher risks to operations. Certified suppliers, who undergo regular audits by accredited bodies, may require less direct auditing. Additionally, organizations should ensure that suppliers can provide up-to-date components and engage proactively to manage lifecycle risks. This approach helps maintain conformity with the QMS requirements of ISO 9001:2015.