A list of all subcontractors should be kept that includes; the name and contact information for the subcontractor, the work they do for the organization, and what projects or what data that they have access to. This list simplifies the process of managing data and data access permissions.
It is important to organizations to know who has access to their information and where the data is being stored. The organization may have certain requirements about where data is stored and who can access it.
They will want to know that you have a list of all your subcontractors which includes the name and contact information for the subcontractor, the work they do for the organization, and what projects or what data that they have access to. In certain cases, they may ask for a subset of those contractors who will be accessing or storing their data.