6
IBM SOA Architect Summit
SOA Governance
A Presentation for the
Enterprise Architect
© 2006 IBM Corporation
IBM SOA Architect Summit
Agenda
 SOA Governance – the Enterprise
Architecture Perspective
 SOA Governance Lifecycle
 SOA Governance Challenges and
Capabilities to Address Challenges
3
SOA on your terms and our expertise
IBM SOA Architect Summit
What is …
IT Governance?
Establishing decision making rights
associated with IT
Establishing mechanisms and policies
used to measure and control the
way IT decisions are made and
carried out
SOA Governance?
Extension of IT Governance focused
on the lifecycle of services to
ensure the business value of SOA
4
SOA on your terms and our expertise
SOA Governance is a
catalyst for
improving overall IT
Governance
IBM SOA Architect Summit
Why SOA Governance Matters
 Realize business benefits of SOA
– Business process flexibility
– Improved time to market
 Mitigate business risk and regain
control
– Maintaining quality of service
– Ensuring consistency of service
 Improved team effectiveness
– Measuring the right things
– Communicating clearly
between business and IT
5
SOA on your terms and our expertise
IBM SOA Architect Summit
Enterprise Architecture and SOA Governance
Strategy
Enterprise wide focus
Business
Opportunity
Information
Technology
Strategy
Business
Strategy
Enterprise Architecture
Planning
Business
Architecture
IT
Architecture
Processes
Information
People
Locations
Applications
Data
Technology
Project focus
Transition Plan
Design and
Delivery
Business Operating Environment
and IT Infrastructure
IT Solutions
6
Technology
Availability
SOA on your terms and our expertise
Ensures Vitality
IBM SOA Architect Summit
SOA Governance Considerations
Processes, Roles and Organization
Business & IT Strategies
Business Directions
IT Strategies
Key Requirements
Service Model
Organization
Vitality
External Effects
Definition
Communication
Roles
Architectural
Compliance,
Relevance & Value
Technology Changes
Compliance
New Requirements &
Options
IT Investments
Compliance
Assessment & Impacts
Architecture Stakeholders
7
SOA on your terms and our expertise
Business Value
Principles
Models
Standards
Plans
IBM SOA Architect Summit
SOA Governance Lifecycle
Define the Governance Approach
Plan the Governance Need
 Document and validate business strategy
for SOA and IT
 Assess current IT and SOA capabilities
 Define/Refine SOA vision and strategy
 Review current Governance
capabilities and arrangements
 Layout governance plan
Monitor and Manage
the Governance Processes
 Monitor compliance with policies
 Monitor compliance with governance arrangements
 Monitor IT effectiveness metrics
8
SOA on your terms and our expertise
 Define/modify governance processes
 Design policies and enforcement mechanisms
 Identify success factors, metrics
 Identify owners and funding model
 Charter/refine SOA Center of Excellence
 Design governance IT infrastructure
Enable the Governance
Model Incrementally
 Deploy governance mechanisms
 Deploy governance IT infrastructure
 Educate and deploy on expected behaviors
and practices
 Deploy policies
IBM SOA Architect Summit
SOA Governance Lifecycle
Plan the Governance Need
 Document and validate business strategy
for SOA and IT
 Assess current IT and SOA capabilities
 Define/Refine SOA vision and strategy
 Review current Governance
capabilities and arrangements
 Layout governance plan
Monitor and Manage
the Governance Processes
 Monitor compliance with policies
 Monitor compliance with governance arrangements
 Monitor IT effectiveness metrics
9
SOA on your terms and our expertise
Define the Governance Approach
 Define/modify governance processes
 Design policies and enforcement mechanisms
 Identify success factors, metrics
 Identify owners and funding model
 Charter/refine SOA Center of Excellence
 Design governance IT infrastructure
Enable the Governance
Model Incrementally
 Deploy governance mechanisms
 Deploy governance IT infrastructure
 Educate and deploy on expected behaviors
and practices
 Deploy policies
IBM SOA Architect Summit
SOA Governance Lifecycle
Define the Governance Approach
Plan the Governance Need
 Document and validate business strategy
for SOA and IT
 Assess current IT and SOA capabilities
 Define/Refine SOA vision and strategy
 Review current Governance
capabilities and arrangements
 Layout governance plan
Monitor and Manage
the Governance Processes
 Monitor compliance with policies
 Monitor compliance with governance arrangements
 Monitor IT effectiveness metrics
10
SOA on your terms and our expertise
 Define/modify governance processes
 Design policies and enforcement mechanisms
 Identify success factors, metrics
 Identify owners and funding model
 Charter/refine SOA Center of Excellence
 Design governance IT infrastructure
Enable the Governance
Model Incrementally
 Deploy governance mechanisms
 Deploy governance IT infrastructure
 Educate and deploy on expected behaviors
and practices
 Deploy policies
IBM SOA Architect Summit
SOA Governance Lifecycle
Define the Governance Approach
Plan the Governance Need
 Document and validate business strategy
for SOA and IT
 Assess current IT and SOA capabilities
 Define/Refine SOA vision and strategy
 Review current Governance
capabilities and arrangements
 Layout governance plan
Monitor and Manage
the Governance Processes
 Monitor compliance with policies
 Monitor compliance with governance arrangements
 Monitor IT effectiveness metrics
11
SOA on your terms and our expertise
 Define/modify governance processes
 Design policies and enforcement mechanisms
 Identify success factors, metrics
 Identify owners and funding model
 Charter/refine SOA Center of Excellence
 Design governance IT infrastructure
Enable the Governance
Model Incrementally
 Deploy governance mechanisms
 Deploy governance IT infrastructure
 Educate and deploy on expected
behaviors and practices
 Deploy policies
IBM SOA Architect Summit
SOA Governance Lifecycle
Define the Governance Approach
Plan the Governance Need
 Document and validate business strategy
for SOA and IT
 Assess current IT and SOA capabilities
 Define/Refine SOA vision and strategy
 Review current Governance
capabilities and arrangements
 Layout governance plan
Monitor and Manage
the Governance Processes
 Monitor compliance with policies
 Monitor compliance with governance arrangements
 Monitor IT effectiveness metrics
12
SOA on your terms and our expertise
 Define/modify governance processes
 Design policies and enforcement mechanisms
 Identify success factors, metrics
 Identify owners and funding model
 Charter/refine SOA Center of Excellence
 Design governance IT infrastructure
Enable the Governance
Model Incrementally
 Deploy governance mechanisms
 Deploy governance IT infrastructure
 Educate and deploy on expected behaviors
and practices
 Deploy policies
IBM SOA Architect Summit
SOA Governance & Management Method
Plan
Define
Enable
Measure
Determine the
Governance Focus
Define the SOA
Governance Model
Implement the SOA
Governance Model
Refine the SOA
Governance Model
Define and
refine governance
processes
Implement the
transition plan
Measure
effectiveness
governance
processes
Understand current
governance
structures
Create IT
governance
baseline
Define scope of
governance
Conduct change
readiness survey
Define
organizational
change
Define IT changes
in SOA
development
Initiate SOA
organizational
changes
Launch the SOA
Center of Excellence
Implement
infrastructure for
SOA
Measure
effectiveness of
organization
change
Review and refine
operational
environment
Continuous SOA Governance Process Measurement & Improvement
13
SOA on your terms and our expertise
IBM SOA Architect Summit
SOA Governance Challenges
 Establishing decision rights
 Defining high value business services
 Managing the lifecycle of assets
 Measuring effectiveness
14
SOA on your terms and our expertise
IBM SOA Architect Summit
Challenge: Establishing Decision Rights
Everyone is responsible and no one is responsible
15
LOB
IT
IT
Decides to deliver
consistent
customer
experience across
LOBs
Uses SOA to build
a unified view of
customer across
LOBs
Starts SOA projects
to integrate
services from every
LOB
IT
IT
LOB
Deals with issues
around funding,
ownership, roles &
responsibilities and
control
Cannot deliver
results because
project stalls
Realizes the need
for SOA
governance
SOA on your terms and our expertise
IBM SOA Architect Summit
Challenge: Establishing Decision Rights
Everyone is responsible and no one is responsible
16
LOB
IT
IT
How do Itoexecute
Decides
deliver
quickly?
consistent
How
much
customer
will it cost?
experience
across
LOBs
Who has the best
Uses
SOA to
build
customer
data?
a unified view of
customer across
LOBs
Who should
Startslead
SOAthis
projects
to
integrate
cross-LOB
services
from every
initiative?
LOB
IT
IT
LOB
Who
fund
Dealsshould
with issues
this shared
around
funding,
service? Who’s
ownership,
roles &
responsible to fix
responsibilities
and
it if itcontrol
breaks?
How do we
move
forward
to
Cannot
deliver
deliver
results
because
application?
project
stalls
How do we govern
this? Who
Realizes
theneeds
need
to be
forinvolved?
SOA
governance
SOA on your terms and our expertise
IBM SOA Architect Summit
Challenge: Establishing Decision Rights
SOA Governance Challenges
 Funding & ownership
of shared services
 Executive commitment
to governance
 Organizational design
17
SOA on your terms and our expertise
Capabilities Needed
 Service portfolio planning
 Organizational design
 Governance process for SOA
IBM SOA Architect Summit
SOA Center of Excellence (COE)
A Proven Organizational Model for Governance and Management
Helps
Socialize
Architecture
Provides
Architecture
Vitality & Thought
Leadership
Conducts
Architecture
Reviews
18
SOA on your terms and our expertise
Provides
Project
Support
Center
of
Excellence
Provides
Production
Support
Provides Skills
Transfer & Early
Proof of Concepts
Promotes
Asset
Adoption
Provides Best
Practice Policy &
Procedures
IBM SOA Architect Summit
Challenge: Defining High Value Business Services
Instantiating policy and metrics
Business Exec
CIO
IT Council
Announces
expansion into Asia
Recognizes that IT
is not flexible
enough to support
expansion
Determines that
Hong Kong &
Thailand need
customer service
system
Development Exec
Bus. Analyst & Arch.
Decides to use
SOA to implement
services than can
be localized
19
SOA on your terms and our expertise
Creates business
process and
service models
Bus. Analyst & Arch.
Models process
and services that
maximize
commonality but
are configurable for
each country
IBM SOA Architect Summit
Challenge: Defining High Value Business Services
Instantiating policy and metrics
20
Business Exec
CIO
IT Council
What’s the
revenue
Announces
opportunity? How
expansion
Asia
much will itinto
cost
to
get into Asia?
How do I support
Recognizes
that IT
the expansion
is not
flexible
and
provide
clear
enough
to
support
investment
expansion
value?
What are the
Determines
that
policies
and
Hong Kong &
standards
that
Thailand need
must be defined
customer
service
andsystem
enforced?
Development Exec
Bus. Analyst & Arch.
Bus. Analyst & Arch.
What business
Decides
use
servicestoare
SOA
to implement
needed?
What is
services
than
can
common between
be
localized
countries?
What is the current
and desired
Creates
businessbusiness
process?
process
and
Who needs to
agree
service
models
on the service
model?
Models
process
Which
services
can
and
services
that
be shared? Who
maximize
makes
decisions
commonality
but
about sharing
are configurable
forI
services?
What do
each
country
need
to measure?
SOA on your terms and our expertise
IBM SOA Architect Summit
Challenge: Defining High Value Business Services
SOA Governance Challenges
 Decision rights and governance
process for shared services
 Communicating and enforcing
standards, platforms and
policies
 Identifying and implementing
shareable services
21
SOA on your terms and our expertise
Capabilities Needed
 Governance process for SOA
 Method for defining business
processes, services and metrics
 Enterprise view of services
& data
 Best practices for identifying
and defining shared services
IBM SOA Architect Summit
Service Identification, Definition and Ownership
 Perform service modeling to identify high value business services
and specify services
 Classify services into logical domains and assign owners to each
domain, to simplify the management and implementation of an SOA
– Business Service Domains – services which provide business value,
e.g., request for information, and contain business logic
– Infrastructure Service Domains – services which provide indirect
business value and do not contain business logic, e.g., authenticate
user
 Domain owners monitor, define, and authorize changes to existing
services and decide when a new service in their domain is required
22
SOA on your terms and our expertise
IBM SOA Architect Summit
Challenge: Managing the Lifecycle of Assets
Managing services as assets
Business Exec.
Development Exec.
Developer
Requires changes
to billing service
across all LOBs to
enforce new policy
Finds it difficult to
determine which
applications and
services are
impacted by this
change
Makes changes to
known applications
and services
Operations
Discovers that
change to the
service has broken
the catalog
application
23
SOA on your terms and our expertise
Bus. & IT Execs
Needs to identify a
more formal
approach for
managing services
IBM SOA Architect Summit
Challenge: Managing the Lifecycle of Assets
Managing services as assets
Business Exec.
Development Exec.
Developer
Why will this change
Requires
changes
cost
so much?
Why
todoes
billing
service
a change
across
all
impact so LOBs
many to
IT
enforce
new
policy
systems?
Finds
difficult
to
Why
willit this
change
determine
which
take so long
to
applicationsHow
anddo
implement?
servicesexactly
are
I identify
impacted
by this
which assets
are
change
impacted?
Am I allowed to
changechanges
this online
Makes
to
billing
service?
known
applications
How
I validate
anddo
services
the change?
Operations
What caused this
Discovers
that
problem?
How
do
change
to
the
I prevent this?
service
has broken
Who’s supposed
catalog
tothe
notify
the
application
users?
24
SOA on your terms and our expertise
Bus. & IT Execs
Who owns
Needs
to identify
services?
What a
more
are
the formal
policies
approach
for
for changing
managing
services
shared services?
IBM SOA Architect Summit
Challenge: Managing the Lifecycle of Assets
SOA Governance Challenges
Capabilities Needed
Eliminate and prevent
unnecessary service
proliferation
Change management for
shared services
 Governance process for SOA
 Change management
 Policies for publishing, using
and retiring services
 Infrastructure to help organize
and discover services assets,
govern access and monitor
service vitality
– Security & authentication
– Decision rights & process
25
SOA on your terms and our expertise
IBM SOA Architect Summit
Tools to Manage Assets and Govern Access
 Publish, Deploy
 Discover, Harvest
Service Development
Lifecycle
Development Asset
Repository
 UDDI Discovery, Retrieve
 Publish
Service Endpoint Registries /
Repositories
Discovery Utilities
and Integration
Service Registry and Repository
Change and Release
Management
Operational Efficiency and
Resilience
Change & Configuration
Management Database
Composite Application /
Service Management
ITSM Processes
 Publish, Deploy
26
SOA on your terms and our expertise
 Retrieve Operational Policies
 Service Descriptions
 Runtime Access:
Search, select,
bind, route, filter,
transform
IBM SOA Architect Summit
Challenge: Measuring Effectiveness
Measuring performance and adjusting
27
Business Exec.
CIO
Development Team
Identifies
opportunity to
improve value to
partners
Mandates use of
SOA to leverage
existing assets
Exposes existing
business
functionality as
services
Operations Team
Bus. Analyst
Realizes that
increased
transaction
volumes impact
response time
Does not have
utilization
information for
service billing and
SLA definition
SOA on your terms and our expertise
IBM SOA Architect Summit
Challenge: Measuring Effectiveness
Measuring performance and adjusting
28
Business Exec.
CIO
Development Team
What Identifies
is the business
opportunity?
opportunity How
to
can I quickly
improve
valueand
to
profitably
get this
partners
offering to market?
How do I bill those
Mandates
useHow
of
third
parties?
SOA
to leverage
do
I plan
resources
assets of
toexisting
ensure quality
service?
How do I instrument
Exposes
the
serviceexisting
in order
business
to enable
functionality
measurementas
of
services
performance?
Operations Team
Bus. Analyst
What is the
Realizes
that
service
increased
utilization
rate?
transaction
Who
is using
it?
volumes
impact
response time
How do I get the
Doesinformation
not have
right
utilization
to
assess
information
for
whether I’m
service
and
meetingbilling
my SLA
SLA
definition
obligations?
SOA on your terms and our expertise
IBM SOA Architect Summit
Challenge: Measuring Effectiveness
SOA Governance Challenges
 Measuring service utilization
and cost
 Measuring project cost
 Measuring business benefit
 Access and visibility to
information
 Decision rights and governance
process
29
SOA on your terms and our expertise
Capabilities Needed
 Governance process for SOA
 Visibility to usage and project
information
 Business and IT dashboards
IBM SOA Architect Summit
Execution of Business Strategy Related to IT Goals
 Link IT objectives with concrete business
objectives
 Manage interactions, metrics, and
dependencies in real time
 Rapidly resolve existing and projected
gaps in plans
 Quickly push, reach agreement, and
implement modified objectives through a
dynamic change management system
 Correct objective shortfalls through
collaborative services
 Provide consolidated views for each role
30
SOA on your terms and our expertise
IBM SOA Architect Summit
Guidelines in Making SOA Decisions
Strategic
 Business agility for competitive advantage is the fundamental business
requirement – and is enabled by SOA
 The most important and far-reaching SOA Governance best practice is for
the CIO to report to the CEO
 Successful enterprises consistently demonstrate a willingness to sacrifice
function to sustain architectural integrity
 Behaviors, not strategies, create value
 Without an IT investment approval process within an enterprise-wide IT
governance plan, IT investments invariably build toward localized rather than
enterprise goals
 If a peer relationship between IT and the business units cannot be forged,
SOA will not be successful
31
SOA on your terms and our expertise
IBM SOA Architect Summit
Guidelines in Making SOA Decisions
Tactical
 Governance is not management. Governance determines who makes the
decisions. Management is the process of making and implementing the decisions
 Within a business process, each interaction with an IT asset is a potential service
 A service that mirrors (and executes) a business process, can be used to allocate
IT costs and provide IT justification by correlating costs with business process
results
 A company’s SOA gives IT a definitive way to prove business value through
business results measurements
 Competitive business agility is achieved when a change in business process no
longer requires a change to application programming logic
 In an agile business, incremental business services – mirroring business process
steps – become IT’s core deliverable
 Business-savvy IT architects are the bridge between IT and the company’s
business units
32
SOA on your terms and our expertise
IBM SOA Architect Summit
How IBM Enables SOA Governance
 Methods, process, tools and technology
for:
- Defining/refining governance approach
- Identifying high value business services
and instantiating policy and standards
- Managing the lifecycle of services and
other assets
- Gaining visibility to performance against
goals
 Services and expertise to assist across
the entire service lifecycle
33
SOA on your terms and our expertise
IBM SOA Architect Summit
Thai
Hindi
Traditional Chinese
Gracias
Spanish
Russian
Obrigado
Thank You
Brazilian Portuguese
Arabic
Grazie
Danke
German
Italian
Merci
French
Tamil
Simplified Chinese
Korean
Japanese
34
SOA on your terms and our expertise
6