An organization should manage its suppliers and external resources by evaluating relevant suppliers and documenting the evaluation. This involves establishing criteria such as price, quality, and delivery time to assess suppliers. While assessing or auditing all suppliers is not strictly mandatory, it is strategic to prioritize based on a risk-based approach. Certified suppliers, such as those with ISO 9001:2015 certification, undergo regular audits by accredited bodies, which may reduce the need for additional audits. Conversely, suppliers without such certification might require more direct auditing efforts. This selective approach helps maximize the impact of audits while maintaining a balanced use of resources.