SOA Governance: Balancing Process and Agility

By now everybody has heard over and over how governance is critical to the success of any SOA Implementation. Companies implementing SOA must provide the proper level of governance required to achieve reuse and flexibility without negatively impacting their team's ability to innovate and be agile.

By Mike Kavis
Tue, September 23, 2008

CIO — I have seen many companies fall into two different traps when attempting to implement SOA governance. The first trap is not having a robust enough governance model. The second trap is having so much process that it takes forever to get things done. The trick is balancing process and agility.

Not enough process creates chaos

There are a number of reasons why companies do not have a robust enough governance model. Here are a few reasons that I have seen:

Without an effective governance model, your dreams of SOA nirvana can turn into nightmares of down systems, high development costs, unmanageable production environments and unhappy customers. To get the reuse, flexibility, agility, and ease of integration that SOA promises, design time governance must ensure that services are built in a consistent manner that provides business value, meets certain performance and security requirements, is platform neutral, and does not break anything that already is deployed.

Runtime governance is crucial because of the distributed and abstract nature of SOA. A single business service may be made up of a number of components within numerous layers of the architecture. When that service fails, you better have the proper processes and tools in place to quickly identify the issues and to recover before your customers notice first.

Then there is the complexity of managing service versioning, proactively monitoring performance and security, ensuring compliance and enforcing regulatory controls, and much more.

Implementing SOA without a solid governance model is the equivalent to having an airport without a control tower. Sure, there are some very good planes and talented pilots, but without the proper planning and timely information the end results would be disastrous. So make sure you build a control tower and hire some air traffic controllers!

Continue Reading

Twitter search results powered by Topsy
SOA ABCs

Get up to speed on SOA.

Learn More »
Loading...
Most Recent Service-Oriented Architecture (SOA) Stories
IBM Tivoli® Foundations Service Manager is the service desk solution designed and priced specifically for smaller and medium sized organizations. It provides focused service desk capabilities through ITIL®V3.0 aligned service request, incident, and problem management processes.
Enterprises understand the importance of securing web applications to protect critical corporate and customer data. What many don't understand, is how to implement a robust process for integrating security and risk management throughout the web application software development lifecycle.
Batch Application Integration allows you to process critical transactions, such as payment authorizations, in real-time, and cue fulfillment (such as packaging and shipping) or other lower priority actions for batch processing. Learn more about Batch Application Integration, and how BMC CONTROL-M makes it possible.
VMware View is the leading desktop virtualization solution built for delivering desktops as a managed service. F5 BIG-IP devices optimize the user experience and help ensure maximum performance, availability, and security for VMware View implementations.
In many SAP environments, managing change is the central operations challenge. This paper highlights real-world SAP scenarios and offers concrete recommendations based on best practices for problem prevention and process enhancement to mitigate risk and improve ROI in complex mission-critical SAP environments.
Read Now!
Join us for a one-hour Web seminar where members of our security research team will discuss these techniques, highlight how their approaches to vulnerability detection compliment one another and share best practices for embedding application security testing across the software development lifecycle.
Join us for a one-hour Web seminar where members of our security research team will discuss these techniques, highlight how their approaches to vulnerability detection compliment one another and share best practices for embedding application security testing across the software development lifecycle.
Windows 7 Upgrade Best Practices for SMBs
Virtualization is not just for large enterprises. This expert video roundtable explains how to get started with a c...
This audio webcast will feature experts from VMware-SpringSource in a discussion of exclusive research from IDG and VMware on the topic of cloud application development.
The requirements-driven quality ROI calculators enables customers to examine their potential return on investment from implementing one or more of Rational's requirements and quality management solutions.
Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Resource Center