Organizations should ensure that externally provided processes, products, and services meet requirements.
In the following situations, the organization should determine the control over the implementation of externally provided processes, products, and services:
a) The products and services of external suppliers will form a part of the organization's own products and services;
b) External suppliers represent organizations that directly provide products and services to customers;
c) The organization decides to have external suppliers provide the process or part of the process.
Organizations should determine and implement criteria for the evaluation, selection, performance monitoring, and re evaluation of external suppliers based on their ability to provide processes, products, and services as required. For these activities and any necessary measures triggered by evaluations, the organization should retain documented information.
Organizations should develop criteria for evaluating the quality of products or services provided by these external suppliers, selecting them, and evaluating their performance (i.e. standards and processes, preferably reflected in procedural documents). Performance evaluation results may lead to changes in the list of external suppliers, and individual external suppliers may be eliminated or forced to rectify to meet predetermined requirements, otherwise they may be eliminated.
The corresponding program files can include "Supplier Evaluation, Selection, and Performance Evaluation Management Procedure", "Contractor Evaluation, Selection, and Performance Evaluation Management Procedure", and "Service Provider Evaluation, Selection, and Performance Evaluation Management Procedure"