<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd"
	xmlns:media="http://search.yahoo.com/mrss/"
	>
<channel>
	<title>Comments on: Say NO to RFPs!</title>
	<atom:link href="http://ddos.arbornetworks.com/2006/07/say-no-to-rfps/feed/" rel="self" type="application/rss+xml" />
	<link>http://ddos.arbornetworks.com/2006/07/say-no-to-rfps/</link>
	<description>A weblog dedicated to educating the community on security threats that matter</description>
	<lastBuildDate>Sun, 29 Jan 2012 02:23:23 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
	<item>
		<title>By: RFPs and Marketing Agencies</title>
		<link>http://ddos.arbornetworks.com/2006/07/say-no-to-rfps/comment-page-1/#comment-155692</link>
		<dc:creator>RFPs and Marketing Agencies</dc:creator>
		<pubDate>Thu, 28 Aug 2008 18:00:36 +0000</pubDate>
		<guid isPermaLink="false">http://asert.arbornetworks.com/2006/07/say-no-to-rfps/#comment-155692</guid>
		<description>Very nice.  We created a post today about RFP&#039;s.  Though our angle is slightly different from this post, I think we are all responsibly looking at this practice and hopefully can shed some light on the topic for both the creator and recpient of any RFP.</description>
		<content:encoded><![CDATA[<p>Very nice.  We created a post today about RFP&#8217;s.  Though our angle is slightly different from this post, I think we are all responsibly looking at this practice and hopefully can shed some light on the topic for both the creator and recpient of any RFP.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Adam Mansour</title>
		<link>http://ddos.arbornetworks.com/2006/07/say-no-to-rfps/comment-page-1/#comment-10665</link>
		<dc:creator>Adam Mansour</dc:creator>
		<pubDate>Fri, 30 Mar 2007 15:57:01 +0000</pubDate>
		<guid isPermaLink="false">http://asert.arbornetworks.com/2006/07/say-no-to-rfps/#comment-10665</guid>
		<description>I have seen a bunch of RFPs come and go with this company.  Most of which were large 100-page legal documents holding your company overly accountable and the customer off the hook whenever they see fit.  Most of the document has nothing to do with the tech requirements and take way too long for them to make a decision.  We have dealt with some Financial companies that trial equipment after the RFP for about 4 months and even then it&#039;s still competitive.  It is never worth the time of the people involved and ends up costing the customer 5 times the price of the equipment to go this route.  I think I hate RFPs more.</description>
		<content:encoded><![CDATA[<p>I have seen a bunch of RFPs come and go with this company.  Most of which were large 100-page legal documents holding your company overly accountable and the customer off the hook whenever they see fit.  Most of the document has nothing to do with the tech requirements and take way too long for them to make a decision.  We have dealt with some Financial companies that trial equipment after the RFP for about 4 months and even then it&#8217;s still competitive.  It is never worth the time of the people involved and ends up costing the customer 5 times the price of the equipment to go this route.  I think I hate RFPs more.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Carlos Morales</title>
		<link>http://ddos.arbornetworks.com/2006/07/say-no-to-rfps/comment-page-1/#comment-377</link>
		<dc:creator>Carlos Morales</dc:creator>
		<pubDate>Fri, 14 Jul 2006 01:27:00 +0000</pubDate>
		<guid isPermaLink="false">http://asert.arbornetworks.com/2006/07/say-no-to-rfps/#comment-377</guid>
		<description>I&#039;d like at this point to clarify that my opinions don&#039;t necessary reflect those of Arbor or its affiliates... Arbor absolutely (as Tom well knows) wants your RFPs.

Despite the title of my original post, my point is that I feel that RFPs are more often than not a waste of time for everyone involved because they usually exhibit the bad traits that we&#039;ve already been over. My opinion would certainly come around if I ran across a few that were more legitimate tell me what I should use and why documents.

I think that too much of our discussion has been directed on the fact that vendors don&#039;t like RFPs. That&#039;s definitely true and yes, my original question about who dislikes them more has definitely been addressed.

However, I submit that while vendors probably feel stronger about it, most customers, or at least most people involved in them within those customers, don&#039;t like them much either.

I&#039;ve personally been in conversations with engineers who&#039;ve said things like &quot;I know what I want and I know whom I want to buy it from but I still have to go through this RFP process.” I&#039;ve also been on the buying end of technology where I had to choose between multiple competitive solutions. I did my research, I justified my choice and I lived with the consequences of my choice. I can truthfully say that I would have been very annoyed if had been made to do an RFP for that situation. It may even have brought another solution to the table that I hadn&#039;t considered but I don&#039;t think it would have been worth a month of my time to find out.

This is just a discussion about a topic most people I know have an opinion about. I hold no illusions that RFPs will ever go away. I wouldn&#039;t mind though if they got a whole lot shorter though.</description>
		<content:encoded><![CDATA[<p>I&#8217;d like at this point to clarify that my opinions don&#8217;t necessary reflect those of Arbor or its affiliates&#8230; Arbor absolutely (as Tom well knows) wants your RFPs.</p>
<p>Despite the title of my original post, my point is that I feel that RFPs are more often than not a waste of time for everyone involved because they usually exhibit the bad traits that we&#8217;ve already been over. My opinion would certainly come around if I ran across a few that were more legitimate tell me what I should use and why documents.</p>
<p>I think that too much of our discussion has been directed on the fact that vendors don&#8217;t like RFPs. That&#8217;s definitely true and yes, my original question about who dislikes them more has definitely been addressed.</p>
<p>However, I submit that while vendors probably feel stronger about it, most customers, or at least most people involved in them within those customers, don&#8217;t like them much either.</p>
<p>I&#8217;ve personally been in conversations with engineers who&#8217;ve said things like &#8220;I know what I want and I know whom I want to buy it from but I still have to go through this RFP process.” I&#8217;ve also been on the buying end of technology where I had to choose between multiple competitive solutions. I did my research, I justified my choice and I lived with the consequences of my choice. I can truthfully say that I would have been very annoyed if had been made to do an RFP for that situation. It may even have brought another solution to the table that I hadn&#8217;t considered but I don&#8217;t think it would have been worth a month of my time to find out.</p>
<p>This is just a discussion about a topic most people I know have an opinion about. I hold no illusions that RFPs will ever go away. I wouldn&#8217;t mind though if they got a whole lot shorter though.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tom Ptacek</title>
		<link>http://ddos.arbornetworks.com/2006/07/say-no-to-rfps/comment-page-1/#comment-368</link>
		<dc:creator>Tom Ptacek</dc:creator>
		<pubDate>Thu, 13 Jul 2006 05:41:24 +0000</pubDate>
		<guid isPermaLink="false">http://asert.arbornetworks.com/2006/07/say-no-to-rfps/#comment-368</guid>
		<description>From Matasano Security&#039;s July 13 &lt;a href=&quot;http://www.matasano.com/log/367/biased-rigged-rfps-considered-just-fine-with-matasano&quot;&gt;blog posting&lt;/a&gt;:

[...] Rothman replies to Carlos on RFPs: &#8220;They&#8217;re all about covering someone&#8217;s ass&#8221;. Rothman also has an ebook on selecting products which I&#8217;d like to read. [...]</description>
		<content:encoded><![CDATA[<p>From Matasano Security&#8217;s July 13 <a href="http://www.matasano.com/log/367/biased-rigged-rfps-considered-just-fine-with-matasano">blog posting</a>:</p>
<p>[...] Rothman replies to Carlos on RFPs: &#8220;They&#8217;re all about covering someone&#8217;s ass&#8221;. Rothman also has an ebook on selecting products which I&#8217;d like to read. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Carlos Morales</title>
		<link>http://ddos.arbornetworks.com/2006/07/say-no-to-rfps/comment-page-1/#comment-351</link>
		<dc:creator>Carlos Morales</dc:creator>
		<pubDate>Tue, 11 Jul 2006 19:26:52 +0000</pubDate>
		<guid isPermaLink="false">http://asert.arbornetworks.com/2006/07/say-no-to-rfps/#comment-351</guid>
		<description>Thanks for the comments Tom. I can&#039;t say that I&#039;ve read any books on the subject but I have spent a lot of time over the last few years answering RFP questions. Ironically enough, a few days after I wrote the post, I was handed an 87-page goliath RFP that&#039;s going to consume most of my next week. You&#039;re right, vendors hate them more.

Regarding the remainder of your post, I don&#039;t think that RFPs really do need a replacement. At the risk of saying exactly what you told me not to say:  RFPs really are unnecessary when replaced by straight research and a few pointed inquiries.

With a fair amount of due diligence, an enterprise should be very capable of short-listing solutions to go to trial without having to go through an arduous RFP process. Your arguments about the individual research points have some validity; however collectively, they certainly provide ample reference from which to produce a short list of candidates. From that point, one could set up meetings with the potential vendors and based on the results, short list to 2-3 trial candidates. Why waste the next few months on an RFP?

My biggest problem with RFPs is that they don&#039;t generally do what you stated was their main purpose:  reduce the number of solutions to a manageable number before going to trial. Most RFPs that I&#039;ve run across seem to be put together with a short list of vendors in mind and reflect that in some of the very vendor specific requirements. 

I think that I would come around to your way of thinking if RFPs were much simpler &quot;let the experts solve my problems for me&quot; documents. For instance, I have a pesky DDoS issue that I want to resolve. I have no idea what technologies are out there and who sells them. I put some general network information, problem description and a list of goals in the document - things like &quot;Reduce the response time to DDoS events in my network.” I would then distribute this to different vendors and ask them to come up with a technology proposal including what products, how they would be deployed, how they would solve my problems, how they would be operationalized, how they would be supported and list pricing for everything.     

I do realize that RFPs are not going to go away despite any ground root efforts. They do have a number of ulterior motives for the customers including getting contract concessions, better pricing, and securing promises on some future technologies. I don&#039;t see customer procurement groups giving these up regardless of the opinion of the technical personnel.</description>
		<content:encoded><![CDATA[<p>Thanks for the comments Tom. I can&#8217;t say that I&#8217;ve read any books on the subject but I have spent a lot of time over the last few years answering RFP questions. Ironically enough, a few days after I wrote the post, I was handed an 87-page goliath RFP that&#8217;s going to consume most of my next week. You&#8217;re right, vendors hate them more.</p>
<p>Regarding the remainder of your post, I don&#8217;t think that RFPs really do need a replacement. At the risk of saying exactly what you told me not to say:  RFPs really are unnecessary when replaced by straight research and a few pointed inquiries.</p>
<p>With a fair amount of due diligence, an enterprise should be very capable of short-listing solutions to go to trial without having to go through an arduous RFP process. Your arguments about the individual research points have some validity; however collectively, they certainly provide ample reference from which to produce a short list of candidates. From that point, one could set up meetings with the potential vendors and based on the results, short list to 2-3 trial candidates. Why waste the next few months on an RFP?</p>
<p>My biggest problem with RFPs is that they don&#8217;t generally do what you stated was their main purpose:  reduce the number of solutions to a manageable number before going to trial. Most RFPs that I&#8217;ve run across seem to be put together with a short list of vendors in mind and reflect that in some of the very vendor specific requirements. </p>
<p>I think that I would come around to your way of thinking if RFPs were much simpler &#8220;let the experts solve my problems for me&#8221; documents. For instance, I have a pesky DDoS issue that I want to resolve. I have no idea what technologies are out there and who sells them. I put some general network information, problem description and a list of goals in the document &#8211; things like &#8220;Reduce the response time to DDoS events in my network.” I would then distribute this to different vendors and ask them to come up with a technology proposal including what products, how they would be deployed, how they would solve my problems, how they would be operationalized, how they would be supported and list pricing for everything.     </p>
<p>I do realize that RFPs are not going to go away despite any ground root efforts. They do have a number of ulterior motives for the customers including getting contract concessions, better pricing, and securing promises on some future technologies. I don&#8217;t see customer procurement groups giving these up regardless of the opinion of the technical personnel.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

