Title
What is SOA Governance?

Date
2008-04-22

Summary
I have been asked a few times what SOA Governance means. SOA concepts have been around for quite a long time in the IT industry and is a significant step forward in aligning information technology with business goals.

When to use SOA:
  • If integration between diverse environments or dynamically changing environments is required.
  • If reusability is important.

    When not to use SOA:
  • Not cost effective if you have a small number of applications.
  • If high performance is the deciding factor.

    What is SOA governance?
    SOA governance refers to the processes used to oversee and control the adoption and implementation of service-oriented architecture (SOA) in accordance with recognized practices, principles and government regulations.

    What is the function of SOA governance?
  • Decision rights for the development, deployment, and management of new services.
  • Monitoring and reporting processes for capturing and communicating governance results. Because SOA applications are intrinsically fragmented, they introduce new governance challenges.

    Why is governance needed?
  • To measure the effectiveness of SOA.
  • Enterprise IT needs to be flexible, extensible, responsible, resilient, and dynamically reconfigurable. This type of IT management and execution requires very efficient governance.
  • Investors put more faith behind companies that maintain a high standard of governance.

    What does SOA governance consist of?
    SOA governance consists of three major components: a registry, a policy and a testing procedure:
  • SOA registry is an evolving catalog of information about the available services in the SOA implementation. The registry allows businesses to efficiently discover and communicate with each other.
  • SOA policy is a set of behavioral restrictions intended to ensure that services remain consistent and do not conflict with each other. These constraints also ensure that good engineering practices, common-sense customer relations principles and government laws are followed. A specific person may be designated to grant occasional policy exceptions.
  • SOA testing is a comprehensive schedule of audits and performance-monitoring procedures intended to ensure that the entire SOA solution is efficient, cost-effective, secure and up-to-date.

    What is needed?
  • A repository to store, catalog, and flexibly organize individual services.
  • Ability to report on key metrics.
  • Solution that integrates with existing SOA design.

    How is compliance ensured?
  • It is the responsibility of the enterprise architects to see that new applications follow the enterprise IT architecture.
  • Establishing a center of excellence (CoE) for enterprise IT and SOA governance that would enable a shared resource and capability center to function as a resource pool as new business application needs arise.

    Examples of governance:
  • Compliance to regulatory standards.
  • Compliance to standards that are industry-specific.
  • Service identification and categorization.
  • Service monitoring and tracking.

  • References
    http://www.ibm.com/developerworks/webservices/library/ws-soa-govern/
    http://www-306.ibm.com/software/solutions/soa/gov/
    Ahmed Aboulnaga

    .com .com