Skip to main content
Writing RFP Requirements
Procurement & RFP Design

Requirements That Get
Scoreable Answers

Eight before/after rewrites you can copy
The four properties of a scoreable requirement
How over-specifying quietly excludes better solutions
BidGenie Procurement Desk
12 min read

When six proposals come back and none of them can be meaningfully compared, the cause is almost never the vendors. It is the wording of the requirements. Ask a question that can be answered with a confident yes, and every vendor will answer yes.

The good news is that this is the most fixable part of procurement. Rewriting requirements is a few hours of work, it requires no new process or system, and it changes what lands in your inbox more than any other single intervention.

What makes a requirement scoreable

Four properties. A requirement missing any of them will produce answers you cannot rank.

Falsifiable

It is possible to answer it badly. If every vendor can truthfully say yes, the requirement carries no information and wastes a scoring row.

Specific about your context

Names your actual systems, versions, volumes, and user counts. “Integrates with our CRM” and “integrates with Salesforce Sales Cloud, 400 users, ~2M records” produce completely different answers.

Bounded in format

States how much and in what shape — three references, a completed template, a figure in hours. Unbounded questions produce answers of wildly differing length that cannot be laid side by side.

Tied to a criterion

You know which evaluation criterion it feeds and what a 5 looks like versus a 2. If you cannot say, the requirement should not be in the document.

The first property does most of the work. Before writing any requirement, ask: could a weak vendor answer this in a way that sounds fine? If yes, you have written a formality rather than a question.

Eight rewrites

These are drawn from patterns that recur across most RFPs. Each shows the version that usually gets written, the version that produces comparable answers, and why the change works.

01

Ask for a number, get a number

Usually written

The system must be highly available.

Rewritten

State your contracted uptime percentage measured monthly, your measured uptime for the last 12 months, how uptime is calculated, what is excluded (e.g. planned maintenance), and the service credits payable on breach.

Why the change works: “Highly available” is unfalsifiable — every vendor says yes and you learn nothing. The rewrite asks for a contracted figure, an actual figure, the measurement method, and the consequence. Four scoreable data points, directly comparable across bids.

02

Separate the capability from the effort

Usually written

The solution must integrate with our finance system.

Rewritten

Describe how your solution integrates with SAP S/4HANA (on-premise, version 2022). State whether this is a pre-built connector, a supported API pattern, or custom development; name any customers currently running this integration; and state the implementation effort in days and whether it is included in your quoted price.

Why the change works: Everything “integrates” given enough money. The rewrite names the actual system and version, and separates “possible” from “pre-built” from “included in the price” — which is where the real cost difference between vendors lives.

03

Ask what happens when it fails

Usually written

Describe your data backup approach.

Rewritten

State your Recovery Point Objective and Recovery Time Objective, backup frequency and retention period, where backups are stored geographically, and the date of your most recent tested restore, including how long that restore took.

Why the change works: Everyone has backups. Not everyone has tested a restore. The tested-restore date is the question that separates a real capability from a configuration, and almost no RFP asks it.

04

Ask for the named individuals

Usually written

The vendor must have an experienced implementation team.

Rewritten

Provide CVs for the named individuals proposed for this engagement, their allocated percentage of time, and their current commitments through the proposed implementation period. State your policy and notice period for substituting named staff.

Why the change works: Sales teams present senior people; delivery sometimes staffs juniors. Asking for names, allocation, and a substitution policy makes the commitment concrete and gives you a contractual hook later.

05

Constrain the format so answers compare

Usually written

Provide details of relevant past experience.

Rewritten

Provide three references from organisations of similar size and sector, delivered within the last four years. For each: client name, contract value, scope, delivery dates, whether delivered on time and to budget, and a contactable referee. Where a project ran over, state by how much and why.

Why the change works: Free-format experience sections are unscoreable — one vendor sends two pages, another sends thirty. Fixing the count and the fields gives you a comparison table, and the overrun question invites the honesty that distinguishes serious bidders.

06

Ask about the boundary, not just the feature

Usually written

The system must support role-based access control.

Rewritten

Describe your access control model. State the maximum number of distinct roles supported, whether permissions can be scoped to individual records or only to object types, whether roles can be defined by customer administrators without vendor involvement, and how access changes are logged and reviewed.

Why the change works: Every product “supports RBAC”. The differences that matter operationally are granularity, self-service, and auditability — and those only surface when you ask about the limits rather than the label.

07

Ask for evidence, not intent

Usually written

The vendor must take security seriously and follow industry best practice.

Rewritten

List your current security certifications with certificate numbers and expiry dates. State the date and scope of your most recent independent penetration test and confirm whether all critical and high findings have been remediated. Provide your incident notification commitment in hours.

Why the change works: Intent is not evidence. Certificates have numbers and expiry dates; pen tests have dates and findings; notification has an hour count. All three are verifiable, which is what makes them scoreable.

08

Price the whole term, not the first invoice

Usually written

Provide pricing for the proposed solution.

Rewritten

Complete the attached pricing template in full. Include: one-off implementation cost; annual licence or subscription cost for years 1–5; annual support cost; assumed annual uplift percentage; cost per additional user beyond the stated volume; and any charge for the exit assistance described in requirement 7.4. State every assumption on which your pricing depends.

Why the change works: Free-format pricing is the single largest cause of incomparable bids. A mandated template with a five-year horizon exposes the low-year-one, high-year-three shape that otherwise only appears after signature.

The opposite failure: over-specifying

Everything above pushes toward specificity, and it is possible to overshoot. The over-specified requirement describes an implementation rather than a need, and it excludes better solutions without anyone noticing.

"The system must provide a nightly batch export in CSV format to an SFTP endpoint" is a description of how your current system works. A vendor offering a real-time API — better for you in every respect — is now non-compliant, and either withdraws or proposes a batch job that throws away their advantage.

The distinction is between the need and the mechanism. Specify the need precisely; leave the mechanism open unless it is genuinely constrained.

Over-specified (excludes better options)

“The system must provide a nightly batch export in CSV format to an SFTP endpoint.”

Need-specified (open to better options)

“Transaction data must be available to our data warehouse with a maximum latency of 24 hours. Describe your mechanism, the latency it achieves, and the format provided. Our warehouse is Snowflake; we can consume batch files or streaming APIs.”

Note that the second version is longer and more specific about the constraint that actually matters — 24-hour latency, Snowflake — while leaving the mechanism open. That is the shape to aim for. Precision about outcomes, flexibility about implementation.

When a mechanism genuinely is constrained — a regulator requires a specific format, a legacy system cannot be changed — say so and say why. Vendors respond well to constraints with reasons and badly to constraints that look arbitrary, because arbitrary constraints are the signature of an RFP written around an incumbent.

The hard case: requirements from stakeholders who disagree

Requirements rarely come from one person. Operations wants one thing, IT another, finance a third, and the requirements document becomes a treaty in which every faction's wording survives intact. The result contradicts itself, and vendors either ask a dozen clarification questions or quietly pick an interpretation.

The tell is two requirements that cannot both be maximised — "the system must be highly configurable by business users" alongside "all configuration changes must follow formal change control with IT approval". Both are reasonable. Together, without a stated priority, they ask vendors to guess which one you meant.

Two mechanisms help, and both need to happen before publication.

Run a contradiction pass. Read the requirement set looking specifically for pairs in tension. For each pair, state the priority explicitly in the document — "business users may configure X, Y, and Z without approval; all other configuration follows change control". Vendors can design to a stated trade-off; they cannot design to an unstated one.

Make the mandatory/desirable split the negotiation. Rather than arguing over whether a requirement is included, agree that everything can be included but only a defined number can be mandatory — say, thirty. That forces a real prioritisation conversation and produces a document that expresses priority instead of listing everything at maximum volume.

Testing before you publish

One exercise is worth more than a full review cycle. Take your ten most important requirements and write the worst honest answer a weak vendor could give — the answer that is technically true but reveals nothing.

If that answer would score acceptably, the requirement is broken. Rewrite it until the weak answer visibly fails. You will usually find you can break three or four of the ten this way, and those are precisely the requirements that would have produced an unrankable field.

This takes about an hour and is the highest-return hour in the whole process. It is also the one most often skipped, because by the time the requirements are drafted everyone is ready to publish.

Why this matters more than it seems

Requirements are the interface between what you need and what you get told. Everything downstream — the comparison matrix, the evaluation debate, the shortlist, the contract — inherits their quality. A well-written requirement set makes evaluation almost mechanical. A poor one makes evaluation a matter of opinion, and opinion is where politics enters procurement.

The vendors on the other side are working from your wording too. The better your requirements, the less they have to guess about what you want — and the more of their effort goes into demonstrating genuine capability rather than covering every possible interpretation.

Answering RFPs as well as writing them?

BidGenie extracts every requirement from an incoming RFP, surfaces the answers you have already approved, and keeps compliance visible to submission.

Get Started for Free

Next step

Move from reading to evaluation

This post is tagged as tofu. Use the next step that matches your stage: evaluate the product, compare tools, or use a practical workflow resource.

Go to the recommended page

Procurement Insights by BidGenie