Skip to main content

How to write an RFP for broadband

Requirements, questions, and evaluation criteria specific to broadband procurement

7 min read

Broadband procurement has evolved from a simple utility to a strategic imperative. RFPs are essential to navigate complex technology choices, ensure business continuity, and optimize total cost of ownership in this critical infrastructure category.

What makes broadband RFPs different

Broadband RFPs differ significantly from other software procurements due to the unique blend of physical infrastructure, service level agreements, and rapidly evolving technologies. Unlike software-only solutions, broadband involves physical installation, network architecture considerations, and reliance on external providers for uptime and performance.

Additionally, the diverse range of broadband options, from dedicated fiber to wireless and satellite solutions, requires careful evaluation of specific business needs and geographic constraints.nnRegulatory compliance and security are also paramount. Organizations must ensure their broadband provider adheres to relevant data protection standards and implements robust security measures to safeguard sensitive information.

Furthermore, the increasing reliance on cloud-based applications and real-time communication tools necessitates stringent performance guarantees and low-latency connections.nnFinally, the long-term nature of broadband contracts and the potential for significant construction or build-out costs make thorough due diligence and detailed RFPs essential to avoid costly surprises and ensure a reliable, scalable, and secure network infrastructure.

  • Assess your current and future bandwidth needs, considering cloud adoption, remote work policies, and data-intensive applications.
  • Define clear service level agreements (SLAs) with specific performance metrics, including uptime, latency, jitter, and packet loss.
  • Evaluate the provider's physical infrastructure and network architecture, including on-net/off-net status and redundancy measures.
  • Verify compliance with relevant industry regulations and security standards, such as SOC 2, HIPAA, or GDPR.

RFP vs RFI vs RFQ

Here's when to use each document type when procuring broadband software.

RFI

Request for Information

Use early in your search to understand what vendors offer and narrow your list. Gather general capabilities, company background, and high-level pricing ranges.

RFP

Request for Proposal

Use when you know your requirements and want detailed vendor solutions and pricing. This is your main evaluation document for shortlisted vendors.

RFQ

Request for Quote

Use when requirements are fixed and you just need final pricing. Often used after RFP when you're ready to negotiate with finalists.

For broadband procurement, an RFI is useful for initial market research to understand available technologies and vendor capabilities. An RFP is crucial for detailed technical and commercial evaluation to select the best-fit provider, while an RFQ is less common due to the complexity of broadband solutions and the need for customized services.

Technical requirements checklist

Use this checklist when defining your RFP scope.

Connectivity Requirements

  • Dedicated Internet Access (DIA) with guaranteed bandwidth
  • Symmetrical upload and download speeds
  • Low latency and minimal jitter
  • Redundant connections for failover
  • Static IP addresses (if required)

Security Requirements

  • Firewall protection and intrusion detection
  • Data encryption in transit and at rest
  • Compliance with relevant security standards (e.g., SOC 2, ISO 27001)
  • DDoS protection
  • VPN support

Service Level Agreement (SLA)

  • Uptime guarantee (e.g., 99.999%)
  • Mean Time to Repair (MTTR)
  • Latency and jitter thresholds
  • Packet loss limits
  • Service credits for SLA violations

Integration Requirements

  • SD-WAN compatibility
  • WLAN integration
  • Unified Communications (UCaaS) compatibility
  • Cloud platform integration (e.g., AWS, Azure, Google Cloud)
  • Network monitoring and management tools

Scalability Requirements

  • Ability to scale bandwidth on demand
  • Support for future technology upgrades (e.g., Wi-Fi 7, 5G Advanced)
  • Flexible contract terms
  • Options for adding new locations or users
  • Support for emerging technologies (e.g., edge computing)

Questions to include in your RFP

Network Architecture & Infrastructure

  • Describe your network architecture and infrastructure, including redundancy and failover mechanisms.
    Understanding the underlying infrastructure ensures reliability and minimizes downtime.
  • What is the on-net/off-net status of our building, and what are the associated installation costs?
    On-net connections are typically cheaper and faster to deploy.
  • What is your plan for managing network congestion and ensuring consistent performance during peak hours?
    Ensures consistent performance for critical applications.
  • Can you provide a network diagram showing the proposed connectivity solution for our organization?
    Visual representation aids in understanding the proposed solution.

Service Level Agreement (SLA)

  • What are your guaranteed uptime percentages, and what service credits are offered for outages?
    Quantifies the provider's commitment to reliability.
  • What are your typical latency and jitter figures, and what guarantees do you provide for these metrics?
    Low latency is critical for real-time applications like video conferencing.
  • What is your Mean Time to Repair (MTTR), and what are your escalation procedures for resolving network issues?
    Minimizes the impact of potential outages.
  • How do you proactively monitor your network to identify and resolve potential issues before they impact service?
    Proactive monitoring helps prevent outages.

Security

  • Describe your security measures for protecting our data in transit and at rest.
    Ensures data confidentiality and integrity.
  • Are you compliant with relevant security standards, such as SOC 2, HIPAA, or GDPR?
    Demonstrates adherence to industry best practices.
  • What measures do you take to prevent DDoS attacks and other network security threats?
    Protects against service disruptions.
  • Do you offer managed security services, such as firewall protection and intrusion detection?
    Reduces the burden on internal IT teams.

Scalability & Future-Proofing

  • How easily can we scale our bandwidth up or down to meet changing business needs?
    Ensures flexibility and avoids overspending.
  • What is your roadmap for adopting new technologies, such as Wi-Fi 7 and 5G Advanced?
    Future-proofs the investment.
  • Can you support emerging technologies like edge computing?
    Important for low-latency applications.
  • What is the maximum bandwidth that your infrastructure can support at our location?
    Determines the long-term scalability potential.

Pricing & Contract Terms

  • Provide a detailed breakdown of all costs, including installation fees, monthly recurring charges, and any potential overage fees.
    Ensures transparency and avoids hidden costs.
  • What are your contract terms, including the length of the agreement and any early termination fees?
    Understanding the contractual obligations is crucial.
  • Do you offer volume discounts or other incentives for long-term commitments?
    Can reduce the overall cost of ownership.
  • How does your pricing model account for bursting above our committed data rate, and are there pre-determined caps that will trigger significant cost escalations as our data needs scale?
    Prevents bill shock as the organization grows.

Support & Maintenance

  • What are your support hours, and what methods of communication are available (e.g., phone, email, chat)?
    Ensures timely assistance when needed.
  • Do you offer proactive monitoring and management of our network?
    Reduces the burden on internal IT teams and prevents issues.
  • What is your process for handling outages and service disruptions?
    Understanding the response process is crucial.
  • Can you provide customer references from similar organizations?
    Provides insights into the vendor's performance and reliability.

Compliance and security requirements

Depending on your industry, you may need to require proof of these certifications and standards.

SOC 2 Type II

Required if handling sensitive customer data or financial information. If applicable, request a copy of the latest SOC 2 Type II report

HIPAA

Required if handling protected health information (phi). If applicable, request a Business Associate Agreement (BAA) and documentation of HIPAA compliance measures

GDPR

Required if processing personal data of eu citizens. If applicable, request documentation of GDPR compliance measures, including data protection policies and procedures

PCI-DSS

Required if handling payment card data. If applicable, request a copy of the current PCI-DSS compliance certificate and Attestation of Compliance (AOC)

ISO 27001

Required for organizations requiring a high level of information security. If applicable, request a copy of the ISO 27001 certification

Evaluation criteria

Here is the suggested weighting for broadband RFPs.

Service Level Agreement (SLA) Guarantees Uptime, latency, jitter, and packet loss guarantees
25%
Network Performance and Reliability Speed, stability, and redundancy of the network
20%
Security Measures Data encryption, firewall protection, and intrusion detection
15%
Scalability and Future-Proofing Ability to scale bandwidth and adopt new technologies
15%
Total Cost of Ownership (TCO) Installation fees, monthly recurring charges, and potential overage fees
15%
Vendor Reputation and Customer References Customer reviews and industry recognition
10%

Some weights were adjusted based on your priorities.

  • Increase if downtime has significant financial impact
  • Increase if supporting real-time applications
  • Increase if handling sensitive data
  • Increase for rapidly growing organizations

Red flags to watch

  • Vague uptime guarantees

    Lack of specific uptime guarantees signals a potential lack of confidence in network reliability.

  • "Best effort" clauses

    Any wording that allows speeds to fluctuate during peak hours indicates inconsistent performance.

  • Inability to provide customer references

    Lack of references suggests a lack of experience or customer satisfaction issues.

  • High installation costs

    Excessive installation fees may indicate hidden build-out costs or lack of on-net availability.

  • Unrealistic pricing

    Prices significantly lower than the market average often indicate junior staff or hidden buildout fees.

  • Missing insurance certificates

    Vendors unable to show restore bonds or insurance for physical work on the property pose a risk.

Key metrics to request

Ask vendors to provide benchmarks from similar customers.

Average latency to key data centers

Impacts the performance of cloud-based applications.

Mean Time to Repair (MTTR)

Indicates how quickly the provider resolves network issues.

Percentage of on-net vs. off-net connections

Affects installation costs and service reliability.

Customer satisfaction scores

Provides insights into the provider's overall performance.

Implementation timeline for similar customers

Helps set realistic expectations and identify potential delays.