How much due diligence are you performing on subcontractors of your critical vendors? Do you require anything pertaining to subcontractors be included in the contract with the vendor? Do you have any sort of written procedures or checklist for subcontractors and, if so, would you be willing to share it with me?

I would treat a subcontractor just like a vendor. Is the vendor disclosing the subcontractor to you?