subcontractor selection process risks and assessment