I hate responding to RFP's and do my best to avoid them altogether. I completely agree with the article below. Although he doesn't mention RFP's directly, the cost of various corporate policies are the same.
Paul Graham - Artists Ship
These checks have started popping up in security reviews as well. We recently had one prospect suggest that the owner of the company should not publish code that he wrote directly to the production servers out of fear he might introduce malicious code. Really?