How I’d Fix the RFP Process for Buying Software

The other day Ron Schmeltzer tweeted how bro­ken the RFP process is for buy­ing soft­ware and his opin­ion of the process (he dis­likes it). [Cor­rec­tion: Ron was talk­ing about con­sult­ing RFP’s, so the post below doesn’t really mat­ter. But, it did get me off my bum to write the post below, some­thing I’ve had in my head for quite some time.] I quickly responded, ask­ing him how he’d do it dif­fer­ently if he were a buyer. I have some thoughts on this, but was curi­ous what he thought. Brett Miller responded with a blog post he wrote back in July as to the pros and cons of the RFP process.

In gen­eral, my opin­ion about Brett’s points are that the cons out­weigh the pros in most every case, and that there are alter­na­tive ways to achieve the pros with­out invok­ing the cons.

I feel quite strongly that the RFP process for soft­ware pur­chas­ing is totally bro­ken, and have an idea to replace it based on the work that some early founders of WebLay­ers did when I was sell­ing Actional to them at Credit Suisse.

First let me explain why I think it’s bro­ken. Then I’ll share my rec­om­mended fix.

1. RFP’s are biased. Typ­i­cally, RFP’s are issued by com­pa­nies after they’ve done some due dili­gence. That due dili­gence is “biased” based on who they spoke to, that bias finds its way into the form and func­tion of the RFP. If all ven­dors have been involved prior to the RFP issue, that’s fine. But, if not… then the RFP is weighted towards those who have par­tic­i­pated. And, that’s not always good for the consumer.

2. RPF’s only pro­vide a par­tial view into what’s impor­tant. RFP’s often have hun­dreds of ques­tions, some requir­ing com­plex answers. They’re meant to (1) get a com­plete com­par­i­son of rel­e­vant infor­ma­tion, and (2) stan­dard­ize the answers. Well, by the time a pur­chase is made and an imple­men­ta­tion hap­pens, the state of the var­i­ous fea­tures will change, so know­ing the cur­rent state isn’t nec­es­sar­ily help­ful. I real­ize it pro­vides a base­line, but that assumes that none of the ven­dors stretches the truth. Also, a sim­ple ques­tion like “Do you sup­port WS-Security” doesn’t have a sim­ple answer, like “yes”. Usu­ally, the answer is some­thing between “no” and “sort of”… there are inter­op­er­abil­ity issues, min­i­mum plat­form issues, which pieces of the stan­dard are sup­ported, and how the sup­port is imple­mented. Sec­ond, stan­dard­ized answers are not use­ful for a large por­tion of the ques­tions… and in my opin­ion those are the impor­tant ques­tions. What RPF writ­ers really should want to under­stand are what makes each ven­dor unique, and how their phi­los­o­phy around the solu­tion aligns with the needs of the orga­ni­za­tion.

3. RPF responses are dif­fi­cult to write, and even more dif­fi­cult to eval­u­ate. Finally, com­pa­nies usu­ally have a very short time to respond to an RFP mak­ing the responses less than the qual­ity doc­u­ments any­one would really like. I know it’s sur­pris­ing to buy­ers, but the prod­uct infor­ma­tion you would expect to be cut-and-paste is not often avail­able. Even a prior RFP response that’s 3 months ear­lier is prob­a­bly out of date. And, even the best “cut-and-paster” out there (I think I’m up there) is hard pressed to weave mul­ti­ple cut-and-paste sources back together into a pro­fes­sional look­ing and con­sis­tent doc­u­ment. What about the review process? It’s time con­sum­ing and sim­i­larly biased. A grad­ing sys­tem would cer­tainly be unable to eval­u­ate things like strate­gic align­ment and uniques… and any­thing less is sub­ject to the pref­er­ences of the reader… and what they hap­pen to pick up when read­ing the responses. Try this. After all the responses have been read, put a sim­ple 10 ques­tion list of features/capabilities in front of the read­ers… and ask them to match them to the ven­dors that wrote the answers. Do you think they’d remem­ber which ven­dor wrote which answer?

One final point. The time/effort it takes for the teams to write the responses and the team to eval­u­ate them all… isn’t there a bet­ter way to spend our col­lec­tive time to get bet­ter tech­nol­ogy out there faster and solve prob­lems sooner?

So, what do I recommend?

Keep in mind that I’ve been almost exclu­sively at vendors/integrators in my career so admit­tedly I’m prob­a­bly leav­ing some administrative/purchasing require­ments out. How­ever, I think the fol­low­ing makes for a great place to start.

1. Use ana­lysts only to get a view of the land­scape and make sure you know all the rel­e­vant ven­dors out there. Ana­lysts don’t have the time to do much hands-on eval­u­a­tion to val­i­date what the ven­dors tell them. And, ana­lysts have their own biases which may or may not align with your own. Save the ana­lysts for when you have spe­cific ques­tions about rel­a­tive ven­dor com­par­isons and mar­ket trends.

2. Along with a non-subjective check­list of stan­dards and IT require­ments (such as inter­op­er­abil­ity with exist­ing systems/platforms, sup­port in par­tic­u­lar coun­tries, num­ber of SI’s trained in a prod­uct suite, etc.) deliver a set of use cases for how the prod­uct would be used. The use cases should include some long-term (and there­fore less spe­cific items) and some short term cases. The short term ones should really address the dri­ving need for the eval­u­a­tion. At least one use case should test per­for­mance and scal­a­bil­ity in order to prove out the scal­ing model and help drive to a final con­fig­u­ra­tion (and there­fore a final project cost). Other use cases should include inter­op­er­abil­ity test­ing for inte­gra­tion to exist­ing sys­tems, and how the prod­uct gets migrated between devel­op­ment and production.

Slight aside. By check­list I mean there should be nowhere on this list to explain any­thing. Answers should be unam­bigu­ous lists, yes/no, dates, num­bers, etc. This keeps it black-and-white. If it needs an expla­na­tion, it best to have the ven­dor answer in the con­text of the use case.

3. Ask ven­dor par­tic­i­pants to fill in the check­list, give “essay” answers to the use cases, and then pro­vide 10 items that they believe you should eval­u­ate as part of the eval­u­a­tion. These 10 items will be all you need to under­stand how each believes they com­pete with the other ven­dors, the ven­dors’ philo­soph­i­cal align­ment to the prob­lem space, and their unique value propo­si­tions. By the way, these 10 items should include use cases on how to test them, and an expla­na­tion of why they are impor­tant to the pro­posed solu­tion. Of course, these 10 items might be non-technical… like they might be about stan­dards sup­port, or SI rela­tion­ships, or what­ever the ven­dor thinks is important.

I believe if we moved in this direc­tion, we’d have a process that got cus­tomers what they need, faster, with higher qual­ity results. And, the efforts used in the deci­sion process (by imple­ment­ing the use cases in a POC) would be directly rel­e­vant to deploy­ing the solu­tion, so once the process is com­plete, you’ve done more than selected a ven­dor, you’ve begun your implementation.