"Creating RFPs for security solutions and processing the responses is
not an easy task. Having responded to a fair number of such RFPs, I
found that many of them are created hastily, and don’t allow the issuer
to benefit from quality responses.
Here's my list of the top 10 mistakes organizations make when crafting a security RFP"
Read more: http://isc.sans.org/diary.html?storyid=5647