An organization should manage its suppliers and external resources by evaluating and documenting relevant suppliers, as required by ISO 9001:2015. This involves establishing criteria to evaluate suppliers, such as price, quality, and delivery time. The organization should also consider a risk-based approach to prioritize audits and assessments of suppliers, focusing more on those without ISO 9001:2015 certification. Additionally, the organization should ensure that suppliers are capable of providing up-to-date components and engage proactively to manage lifecycle risks. This approach helps maintain conformity with the QMS requirements of ISO 9001:2015.