© 2006 ibm corporation ibm software group soa governance

© 2006 IBM Corporation

IBM Software Group

SOA Governance

© 2006 IBM Corporation 2

Agenda● Why SOA Governance ?

● IBM Products and Solution


Service Oriented Architecture (SOA) is a business-centric IT architectural approach that supports integrating your business as linked, repeatable business tasks, or services. SOA helps users build composite applications, which are applications that draw upon functionality from multiple sources within and beyond the enterprise to support horizontal business processes

IBM’s definition of SOA – it’s about the business

A more complete discussion of these definitions and related concepts is found IBM SOA Foundation: An Architectural Introduction and Overviewhttp://www-128.ibm.com/developerworks/webservices/library/ws-soa-whitepaper/


Service-Oriented EnterpriseBUSINESS DOMAIN

Business Service #1

Business Service #2 Business

Service #4

Business Service

#5

IT DOMAIN

Business Service #4

Business Service #3

Business Service

#6 Business Service

#5

Business Process #2

Business Service #3

Business Service

#4 Business Service

#5

Business Service #3

Business Service #7

Business Process #1

Re-usable Business Services

IT Service #1

IT Service #2

IT Service #3

Business Service #3

IT Service #2

IT Service #4

IT Service #3

Business Service #5

IT Service #2

IT Service #3

Re-usable IT Services


3. LoB’s increase use of service / quality

suffers

A scenario on the importance of SOA governance

1. Provide acurrency service

that fills a specific LoB need

CurrencyConversion

Service

AccountingDept.

App. 1 App. 2

5. Fix works temporarily but problem

reappears

1. Provide acurrency service

that fills a specific LoB need

CurrencyConversion

Service

AccountingDept.

App. 1 App. 2

2. Other LoB’s start using the

service

Sales

Order Fulfillment Purchasing

Legal

4. Service is fixed at

provider’s expense

x

x

x

x

xx

6. Maintenance costs soar /

providerends service

X

X

X

X

XX

* Scenario from “Introduction to SOA Governance” by Bobby Woolf


The Journey to SOA is filled with potholes

● Most organizations are implementing SOI not SOA

● SOA is largely an IT effort, LoB is not in

● Without Senior IT endorsement, many SOA efforts are focused on product selection, i.e., Shelf ware

● Funding to support Enterprise SOA is scarce or non-existent

● With no oversight comes no reuse and no relevance

● Oversight mechanisms lack teeth; projects evade the processes

● Inconsistent standards, drive inconsistent methodology, competing tools, and a lack of skilled resources

● Organizations are replacing silo’d applications with silo’d SOA


Currency Service

A scenario on the importance of SOA governance

Finance

LegalSales

PurchasingOrder

Fulfillment

1. All groups plana re-usable

currency service

2. Service defined that meets

everyone’s needs

3. Service enabledto be available

to all LOBs

4. Success metrics defined, monitored to confirm service

scalability


14 Critical Processes That Constitute an Effective SOA Governance Model Implementation

Service PlanningService

PlanningService

ModelingService

ModelingService

ImplementationService

ImplementationService

ManagementService

Management

Define Service Focus Process

Assemble Services Process

Deploy Services Process

Test Services Process

Design Services Process

Manage Service Levels Process

Manage Service Security Process

Manage Service Change Process

Manage Quality of Service Process

Specify Services Process

Realize ServicesProcess

Identify Services Process

Define Service Funding Process

Identify Service Owners Process

By effectively establishing governance mechanisms in these 14 areas, clients can address these common challenges:

Establishing decision rights

Defining high value business services

Managing the lifecycle of assets

Measuring effectiveness


Different Aspects of Governance

There are different aspects of Governance, There are different aspects of Governance, based on the process governedbased on the process governed

SOA GovernanceSOA Governance is an extension is an extensionof IT Governanceof IT Governance

SOA Governance

IT Governance

Corporate Governance

● service funding

● service ownership

● service creation

● service reuse

● composite application design

SOA Governance:SOA Governance:examples of governed processesexamples of governed processes

● requirements management

● portfolio management

● change management

● data design

● architectural design

● release management

IT Governance:IT Governance:example of governed processesexample of governed processes


Empowering development teamsto deliver the “A” in SOA

Solution Overview: Service Lifecycle Management

SOA Governance Method

Infrastructure& Management

in Support of SOA

Service Development & Delivery

Management

Process design & implementation expertise based on the market’s leading solutions delivery platform


Service Lifecycle Management is essential in the realization of SOA Governance

SOA Lifecycle

Infrastructure and Management

In Support of SOA

Monitor and control operational policies

Service Development and Delivery Management

Enforce, execute, automate process and policies

SOA Governance Method

Establish Process and Policies

SOA Governance

Service Lifecycle Management


IBM SOA Governance Method

Establish the Governance Need• Document and validate business strategy for SOA and IT• Assess current IT and SOA capabilities• Define/Refine SOA vision and strategy• Review current Governance capabilities and arrangements• Layout Governance plan

Define the Governance Approach• Define/modify Governance Processes• Design policies and enforcement mechanisms• Identify success factors, mechanisms• Identify owners and funding model• Charter/refine SOA Center of Excellence• Design Governance IT infrastructure

Deploy the Governance Model Incrementally• Deploy Governance mechanisms• Deploy Governance IT infrastructure• Educate and deploy on expected behaviors and practices• Deploy policies

Monitor and Manage the Governance Processes • Monitor compliance with policies• Monitor compliance with governance arrangements• Monitor IT effectiveness metrics


● Establishing decision rights

● Defining high value business services

● Managing the lifecycle of assets

● Measuring effectiveness

SOA Governance Challenges : Applying the SOA Governance Life Cycle


Getting Started – Establishing decision rights

Determine business strategy that leverages

SOABusinessExecutive

Assess readiness for SOA

IT Executive

Assess current governance approach

SOA Governance and Management

Method

Determine governance plan

Rational Method Composer

SOA Assessment Services

SOA Assessment Services


Getting Started – Defining high value business services

Document standards and policies

Rational RequisitePro

Document business strategy milestones

Workplace Business Strategy Execution

Model key performance indicators across business process

WebSphere Business Modeler

Business / System Analyst

BusinessExecutive

Identify key performance indicators

Identify metrics

IT Executive

Software Architect

Data Architect

Instantiate data standards & enableData Governance

Rational Data Architect

Instantiate standards in application design

Rational Software Architect

Define development process

Rational Unified Process for SOA

Charter Center of Excellence

Center of Excellence Services

Strategy & Planning Services

Strategy & Planning Services

Central Service Registry

WebSphere Service Registry


Getting Started – Managing the lifecycle of assets

Discover service for reuse / publish service

WebSphere Service Registry and Repository

Ensure signoff and create audit trail for

changeRational

ClearQuest

Security Manager

Developer

Deployment Manager

Validate and authenticate user

Tivoli Federated Identity Manager

Instantiate security policy

Tivoli Access Manager

IT ExecutiveEstablish change

management process for development

Rational Unified Process for SOA

Establish change management process

for operations

Tivoli Unified Process

Manage and track build time assets

Rational ClearCase

Record service configuration informationTivoli Change and

Configuration Management Database


Getting Started – Measuring effectiveness

Monitor performance against service level

agreement

Tivoli Service Level Adviser

Measure performance against business

strategy milestones

Workplace Business Strategy Execution

Monitor and measure service performance

Tivoli Composite Application Manager

Operations Manager

BusinessExecutive

Monitor key performance indicators

Measure project costs

IT ExecutiveRational Portfolio

Manager

WebSphere Business Monitor

Central Service Registry

WebSphere Service Registry


The WebSphere Service Registry and Repository provides value throughout the SOA lifecycle


Publish Find Enrich GovernManage

Encourage ReuseFind and reuse services for building blocks for new composite applications.

Encourage ReuseFind and reuse services for building blocks for new composite applications.

Enhance ConnectivityEnable dynamic and efficient interactions between services at runtime.

Enhance ConnectivityEnable dynamic and efficient interactions between services at runtime.

Enable GovernanceGovern services throughout the service lifecycle

Enable GovernanceGovern services throughout the service lifecycle

Publish Find

Enrich

Govern Manage

Help optimizeservice performanceEnable enforcement of policies. Impact analysis

Help optimizeservice performanceEnable enforcement of policies. Impact analysis


WebSphere Service Registry and Repository: Publish and Find

● Encourage Service Reuse Publish and Find Services through all stages of SOA Encourage greater leverage of services

Development Tool

Development Tool

Assembly/AdminTool

Assembly/AdminTool

(7) The assembled service is (re) published using the Service Explorer during deployment.

(7) The assembled service is (re) published using the Service Explorer during deployment.

(1) Search is performed for a service or mediation or policy to (re)use

(2) Development tools are used to create a new service metadata artifact

(3) Service metadata artifact is published to the WSRR

(6) The service is configured/wired and policy relationships are established.

(6) The service is configured/wired and policy relationships are established.

(5) Search is performed for a service or mediation or policy to use

(5) Search is performed for a service or mediation or policy to use

(4) WSRR performs validation and enforces policies

FindPublish

Enrich GovernManagePublish Find



WSRR Eclipse Plug-in

● Generalized Eclipse plug-in Read and/or write access to WSRR Selectively browse for WSRR meta-data Import meta-data into a selected project

“Deep” import available to include nested resources Publish meta-data to WSRR

Uses published Java interface

● Available for any Eclipse based component Rational Application Developer WebSphere Integration Developer Portlet development environment Other eclipse environment

From the Resource Perspective


WSRR Eclipse Plug-in: Retrieve/Import


Service Lookup During Assembly Phase

WSRRWSRR

Meta-Data:

CategoryCost...

Finance0.01...

Finance0.03...

MetadataRepository

NASDAQWSDL

DowJonesWSDL

Retrieve

Import

Publish


How it works (How it’s used): Operational Monitoring Interactions



Message

1) During service invocation a message is received by the ESB

1) During service invocation a message is received by the ESB

Me

ssa

ge

2) The ESB routes the message to an intermediate logging mediation or agent

2) The ESB routes the message to an intermediate logging mediation or agent

Service Management Repositories

3) Retrieve monitoring policy for the message from the WSRR

3) Retrieve monitoring policy for the message from the WSRR

Mediation

4) Mediation records the operational data about the running service

4) Mediation records the operational data about the running service

Service

Message

Me

ssag

e

Performance and health alerts are generated based on operational data and recorded in the WSRR

Performance and health alerts are generated based on operational data and recorded in the WSRR

5) The ESB then continues with the invocation of the service.

Operatio

nal data

Performance data

Policies


WebSphere Service Registry & Repository Governance

ActionsActions

State State

Classification

Versioning

Promotion

Approval

Validation / Compliance

Impact Analysis

SocializationSocialization

State

State

Process

Notification

Collaboration

Communication

Governed EntityGoverned Entity

GE

GEE

Concepts

Documents

Collections

Access ControlAccess Control

Organization

Role

Action

Governed Entity

Lifecycle State

Life Cycle ModelLife Cycle Model

Procured Approved

PublishedOperational

Specified

Development IT Governance

DeploymentNew Version

IT Management

States

Transitions

Guards

ActionsAudit

Audit

What was changed ?

What was done to it ?

Who changed it ?

When did they change it ?

Audit History Trail


Browser based console

● User role based browser perspectives

● Standards based service metadata documents support

● “Shredding” documents into meaningful and optimized organization

● Query Canned and user wizard based search

● Classification Helps Manage service metadata (more on this

later under the Manage capability)


WebSphere Service Registry & Repository Integration with IBM SOA Products



Process Server

Process Server

RAMRAM

Synchronize withBuildTime

Enterprise Service Bus

Enterprise Service Bus

Mediations based on WSRR Lookup

RSA, RAD, WID

RSA, RAD, WID

Publish and Find

Generic ClientUsing SOAP

Generic ClientUsing SOAP

Publish and Find

ITCAM for SOA

ITCAM for SOA

Service Health information

Tivoli CCMDB

Tivoli CCMDB

Extends toITIL Change Mgmt

Mediations based on WSRR Lookup


Rational Asset Manager - RAM● Asset Consumption

Asset Search via Web client and Eclipse

Asset Subscriptions via Web client

Asset download via Web client and Eclipse

● Asset Creation Asset packaging via Web client and Eclipse

Asset submission for review and approval

● Asset Usage and Reporting Asset comments, discussions, ratings and user tagging

Asset Repository metrics by download, state, type, teamspace and history

● Asset Governance Operations Define review boards

Review state notification

● Adminstration Operations


RAM – Integrations● ClearQuest – submit a change request from an asset details

● ClearCase – store and download versioned assets in ClearCase

● WebSphere Service Registry and Repository: Federated search of deployed WSRR Services from RAM search Retrieve service artifacts for usage as artifact in RAM service asset. Exchange Categorizations between RAM and WSRR Ensure consistent Access Controls for RAM and WSR Link Asset ID and version with WSRR deployed Service ID and version

● Rational Method Composer: Customize out of the box RAM process

● Eclipse Based clients Search, Download and extract assets into Eclipse Workspaces


“Half of all companies and 77% of large enterprises reported that they are or will be using SOA by the end of 2005. Why? Evidence is mounting that SOA provides real benefits for

business integration and flexibility.” Real-World SOA: SOA Platform Case Studies, Forrester Research, Inc., September 2005

What the Analysts Are Saying

With the widespread adoption of SOA, the challenges associated with SOA projects are emerging. SOA governance isn't optional — it's imperative.

Without it, return on investment will be low and every SOA project out of pilot phase will be at risk.

Service-Oriented Architecture Craves Governance, Gartner, Inc., Paolo Malinverno, January 20, 2006

CIOs continue to struggle to align business and IT in meaningful,

measurable ways. More effective IT governance processes and tools are

becoming top priorities among business-savvy CIOs.

Five Ways the Rise of IT Governance Will Change How Enterprises Buy IT, Summit Strategies, December 2005

In 2006, lack of working governance mechanisms in midsize-to-large

(greater than 50 services) post-pilot SOA projects will be the most common reason for

project failure (0.8 probability).Management Update: Predicts 2006: The Strategic Impact of SOA

Broadens, Gartner, Inc., Jess Thompson, Yefim V. Natis, Massimo Pezzini, Paolo Malinverno,

November 23, 2005


Governance is not just about compliance – it is an enabler of business value

● With the right focus, support and funding, it can be an enabler by

Facilitating reuse

Prioritizing spending

Reducing costs

Setting the technology direction

Subsidizing enterprise-value efforts like Service-Oriented Architecture

© 2006 ibm corporation ibm software group soa governance

Documents

soa soa

service scalability

service x x x x x x

use of service quality

reusable currency service

enterprise soa

ibm soa foundation

providers expense x