Soa Governance

Maturity 56 Service Neutral Level .57 Service Aware Level 57 Service Capable Level 57 Business Aligned Level 58 Business Driven Level 58 Service Ineffectual Level 58 Service Aggressive Level 59 4.3 SOA Funding Models 60 Platform (Service Inventory) Funding 60 Project Funding Model (Platform) 61 Central Funding Model (Platform) 64 Usage Based Funding Model (Platform) 66 Service Funding 69 Project Funding Model (Service) 69 Central Funding Model (Service) 71 Hybrid Funding Model (Service) 72 Usage Based Funding Model (Service) 74 CHAPTER 5: SOA Project Fundamentals 79 5.1 Project and Lifecycle Stages 81 SOA Adoption Planning 82 Service Inventory Analysis 82 Service-Oriented Analysis (Service Modeling) 84 Service-Oriented Design (Service Contract) 85 Service Logic Design 87 Service Development 87 Service Testing 88 Service Deployment and Maintenance 89 Service Usage and Monitoring 90 Service Discovery 90 Service Versioning and Retirement 91 5.2 Organizational Roles 92 Service Analyst 96 Service Architect 96 Service Developer 97 Service Custodian 98 Cloud Service Owner 98 Service Administrator 100 Cloud Resource Administrator 100 Schema Custodian 102 Policy Custodian 104 Service Registry Custodian 105 Technical Communications Specialist 105 Enterprise Architect 106 Enterprise Design Standards Custodian (and Auditor) 107 SOA Quality Assurance Specialist 109 SOA Security Specialist 110 SOA Governance Specialist 111 Other Roles 112 Educator 112 Business Analyst 113 Data Architect 113 Technology Architect 113 Cloud Technology Professional 114 Cloud Architect 114 Cloud Security Specialist 114 Cloud Governance Specialist 114 IT Manager 115 5.3 Service Profiles 115 Service-Level Profile Structure 117 Capability Profile Structure 118 Additional Considerations 119 Customizing Service Profiles 119 Service Profiles and Service Registries 119 Service Profiles and Service Catalogs 119 Service Profiles and Service Architecture 120 CHAPTER 6: Understanding SOA Governance 121 6.1 Governance 101 122 The Scope of Governance 123 Governance and Methodology 124 Governance and Management 124 Methodology and Management 125 Comparisons 125 The Building Blocks of a Governance System 127 Precepts 128 People (Roles) 128 Processes 129 Metrics 129 Governance and SOA 130 6.2 The SOA Governance Program Office (SGPO) 131 6.3 SGPO Jurisdiction Models 133 Centralized Enterprise SGPO 133 Centralized Domain SGPO 134 Federated Domain SGPOs 135 Independent Domain SGPOs 136 6.4 The SOA Governance Program 137 Step 1: Assessing the Enterprise (or Domain) 137 Current Governance Practices and Management Styles 138 SOA Initiative Maturity 138 Current Organizational Model 139 Current and Planned Balance of On-Premise and Cloud-based IT Resources 139 Step 2: Planning and Building the SOA Governance Program 139 SOA Governance Precepts 139 SOA Governance Processes 141 SOA Governance Roles 143 Additional Components 146 Step 3: Running the SOA Governance Program (Best Practices and Common Pitfalls) 146 Collect the Right Metrics and Have the Right People Use Them 146 Provide Transparency and Foster Collaboration 147 Ensure Consistency and Reliability 147 Compliance and Incentives 147 Education and Communication 148 Common Pitfalls 148 PART II: PROJECT GOVERNANCE CHAPTER 7: Governing SOA Projects 153 7.1 Overview 155 Precepts, Processes, and People (Roles) Sections 156 7.2 General Governance Controls 157 Precepts 157 Service Profile Standards 157 Service Information Precepts 158 Service Policy Precepts 158 Logical Domain Precepts 159 Security Control Precepts 160 SOA Governance Technology Standards 163 Metrics 164 Cost Metrics 164 Standards-related Precept Metrics 165 Threshold Metrics 165 Vitality Metrics 166 Case Study Example 167 7.3 Governing SOA Adoption Planning 169 Precepts 169 Preferred Adoption Scope Definition 169 Organizational Maturity Criteria Definition 171 Standardized Funding Model 172 Processes 173 Organizational Governance Maturity Assessment 173 Adoption Impact Analysis 176 Adoption Risk Assessment 178 People (Roles) 179 Enterprise Architect 179 SOA Governance Specialist 181 Case Study Example 182 CHAPTER 8: Governing Service Analysis Stages 187 8.1 Governing Service Inventory Analysis 192 Precepts 193 Service Inventory Scope Definition 193 Processes 195 Business Requirements Prioritization 195 People (Roles) 197 Service Analyst 197 Enterprise Design Standards Custodian 198 Enterprise Architect 199 SOA Governance Specialist 200 Case Study Example 201 8.2 Governing Service-Oriented Analysis (Service Modeling) 206 Precepts 206 Service and Capability Candidate Naming Standards 206 Service Normalization 207 Service Candidate Versioning Standards 209 Processes 210 Service Candidate Review 210 People (Roles) 212 Service Analyst 212 Service Architect 213 Enterprise Design Standards Custodian 214 Enterprise Architect 215 SOA Governance Specialist 216 Case Study Example 217 CHAPTER 9: Governing Service Design and Development Stages 221 9.1 Governing Service-Oriented Design (Service Contract) 223 Precepts 223 Schema Design Standards 223 Service Contract Design Standards 225 Service-Orientation Contract Design Standards 228 SLA Template 229 Processes 231 Service Contract Design Review 231 Service Contract Registration 234 People (Roles) 236 Service Architect 236 Schema Custodian 237 Policy Custodian 238 Technical Communications Specialist 239 Enterprise Design Standards Custodian 241 Enterprise Architect 242 SOA Security Specialist 243 SOA Governance Specialist 245 Case Study Example 246 9.2 Governing Service Logic Design 249 Precepts 249 Service Logic Design Standards 249 Service-Orientation Architecture Design Standards 252 Processes 253 Service Access Control 253 Service Logic Design Review 255 Legal Data Audit 257 People (Roles) 259 Service Architect 259 Enterprise Design Standards Custodian 260 Enterprise Architect 261 SOA Security Specialist 262 SOA Governance Specialist 263 Case Study Example 265 9.3 Governing Service Development 267 Precepts 267 Service Logic Programming Standards 267 Custom Development Technology Standards 268 Processes 270 Service Logic Code Review 270 People (Roles) 272 Service Developer 272 Enterprise Design Standards Custodian 273 Enterprise Architect 274 SOA Governance Specialist 275 Case Study Example 276 CHAPTER 10: Governing Service Testing and Deployment Stages 277 10.1 Governing Service Testing 278 Precepts 279 Testing Tool Standards 279 Testing Parameter Standards 280 Service Testing Standards 281 Cloud Integration Testing Standards 283 Test Data Usage Guidelines 285 Processes 286 Service Test Results Review 286 People (Roles) 287 Service Administrator 287 Cloud Resource Administrator 288 Enterprise Architect 289 SOA Quality Assurance Specialist 290 SOA Security Specialist 291 SOA Governance Specialist 292 Case Study Example 294 10.2 Governing Service Deployment and Maintenance 298 Precepts 298 Production Deployment and Maintenance Standards 298 Processes 301 Service Certification Review 301 Service Maintenance Review 303 People (Roles) 304 Service Administrator 304 Cloud Resource Administrator 305 Service Custodian 307 Enterprise Architect 308 SOA Quality Assurance Specialist 309 SOA Security Specialist 310 SOA Governance Specialist 311 Case Study Example 312 Chapter 11: Governing Service Usage, Discovery, and Versioning Stages 315 11.1 Governing Service Usage and Monitoring 317 Precepts 317 Runtime Service Usage Thresholds 317 Service Vitality Triggers 320 Processes 323 Service Vitality Review 323 People (Roles) 325 Enterprise Architect 325 Service Architect 326 Service Administrator 327 Cloud Resource Administrator 328 Service Custodian 329 SOA Security Specialist 331 SOA Governance Specialist 332 Case Study Example 333 11.2 Governing Service Discovery 335 Precepts 335 Centralized Service Registry 335 Processes 337 Service Registry Access Control 337 Service Registry Record Review 339 Service Discovery 340 Shared Service Usage Request 342 Shared Service Modification Request 343 People (Roles) 345 Service Custodian 345 Service Registry Custodian 346 Technical Communications Specialist 348 SOA Governance Specialist 348 Case Study Example 350 11.3 Governing Service Versioning and Retirement 352 Precepts 352 Service Versioning Strategy 352 SLA Versioning Rules 354 Service Retirement Notification 356 Processes 357 Service Versioning 357 Service Retirement 359 People (Roles) 360 Enterprise Design Standards Custodian 60 Service Administrator 362 Cloud Resource Administrator 363 Schema Custodian 364 Policy Custodian 364 SOA Governance Specialist 365 PART III: STRATEGIC GOVERNANCE CHAPTER 12: Service Information and Service Policy Governance 369 12.1 Overview 371 Service Data vs. Service Information 371 Policies 101 373 12.2 Governance Controls 375 Precepts 375 Enterprise Business Dictionary/Domain Business Dictionary 375 Service Metadata Standards 377 Enterprise Ontology/Domain Ontology 380 Business Policy Standards 382 Operational Policy Standards 384 Policy Centralization 386 Processes 389 Data Quality Review 389 Communications Quality Review 391 Information Alignment Audit 393 Policy Conflict Audit 395 People (Roles) 397 Business Analyst 397 Data Architect 399 Schema Custodian 399 Policy Custodian 401 Service Registry Custodian 402 Technical Communications Specialist 403 SOA Quality Assurance Specialist 405 SOA Governance Specialist 406 12.3 Guidelines for Establishing Enterprise Business Models 408 Establish a Service Information Governance Council 408 Assign Business Information Custodians 408 Assign Value to Business Information 409 Relate Service Information Governance to Master Data Management 409 CHAPTER 13: SOA Governance Vitality 411 13.1 Vitality Fundamentals 412 13.2 Vitality Triggers 414 Business vs. Technology Changes 415 Types of Vitality Triggers 416 Strategic Adjustments 416 Strategic Business Adjustment 416 Strategic IT Adjustment 417 Industry Shifts 417 Business Shift 417 Technology Shift 418 Metrics 418 Performance Metrics 419 Compliance Metrics 419 Organizational Shifts 419 Periodic 420 Milestone 420 Time 420 13.3 SOA Governance Vitality Process 421 Identify Activity 421 Assess Activity 422 Refresh Activity 422 Approve Activity 423 Communicate Activity 423 CHAPTER 14: SOA Governance Technology 425 14.1 Understanding SOA Governance Technology 426 SOA Governance Task Types 427 Manual Governance 427 Automated Governance 427 Design-time Governance 428 Runtime Governance 428 On-Premise Governance 428 Cloud Governance 428 Passive Governance 428 Active Governance 429 SOA Governance Technology Types 429 Administrative 429 Monitoring 429 Reporting 430 Enforcement 430 14.2 Common SOA Governance Technology Products 431 Service Registries 431 Task Types 432 Technology Types 432 SOA Project Stages 433 Repositories 433 Task Types 434 Technology Types 434 SOA Project Stages 435 Service Agents 435 Task Types 436 Technology Types 437 SOA Project Stages 437 Policy Systems 437 Task Types 438 Technology Types 438 SOA Project Stages 439 Quality Assurance Tools 439 Task Types 440 Technology Types 440 SOA Project Stages 441 SOA Management Suites 441 Other Tools and Products 442 Technical Editors and Graphic Tools 442 Content Sharing and Publishing Tools 442 Configuration Management Tools 443 Custom SOA Governance Solutions 443 14.3 Guidelines for Acquiring SOA Governance Technology 444 Acquisition Strategies 444 Single Vendor 444 Multiple Vendors 445 Open Source 446 Leased from Cloud Vendor 447 Best Practices 448 Establish Criteria Based on Your Specific Requirements 448 Investigate Customizability 448 Investigate APIs 448 Understand Both Initial and Long-Term Costs 448 Understand Actual Governance Support 449 Take the Time to Create a Quality RFP 449 PART IV: APPENDICES APPENDIX A: Case Study Conclusion 453 APPENDIX B: Master Reference Diagrams for Organizational Roles 457 Service Analyst 458 Service Architect 459 Service Developer 460 Service Custodian 460 Service Administrator 461 Cloud Resource Administrator 462 Schema Custodian 463 Policy Custodian 464 Service Registry Custodian 465 Technical Communications Specialist 466 Enterprise Architect 467 Enterprise Design Standards Custodian (and Auditor) 468 SOA Quality Assurance Specialist 469 SOA Security Specialist 470 SOA Governance Specialist (precepts) 471 SOA Governance Specialist (processes) 472 APPENDIX C: Service-Orientation Principles Reference 473 APPENDIX D: SOA Design Patterns Reference 489 APPENDIX E: The Annotated SOA Manifesto 577 APPENDIX F: Versioning Fundamentals for Web Services and REST Services 591 F.1 Versioning Basics 593 Versioning Web Services 593 Versioning REST Services 594 Fine and Coarse-Grained Constraints 595 F.2 Versioning and Compatibility 596 Backwards Compatibility 596 Backwards Compatibility in Web Services 596 Backwards Compatibility in REST Services 597 Forwards Compatibility 599 Compatible Changes 602 Incompatible Changes 604 F.3 REST Service Compatibility Considerations 605 F.4 Version Identifiers 608 F.5 Versioning Strategies 611 The Strict Strategy (New Change, New Contract) 611 Pros and Cons 612 The Flexible Strategy (Backwards Compatibility) 612 Pros and Cons 613 The Loose Strategy (Backwards and Forwards Compatibility) 613 Pros and Cons 614 Summary Table 614 F.6 REST Service Versioning Considerations 615 APPENDIX G: Mapping Service-Orientation to RUP 617 Compatibility of RUP and SOA 618 Overview of RUP (and MSOAM) 619 The Pillars of Service-Orientation and the RUP Principles 620 Breadth and Depth Roles and Role Mapping 623 Enterprise and Governance Roles 624 Mapping Service Delivery Project Stages to Disciplines 625 Mapping MSOAM Analysis and Design Stages to RUP Disciplines 626 Service-Orientation and RUP: Gaps 628 Related Reading 628 Bibliography 629 APPENDIX H: Additional Resources 631 About the Authors 635 About the Contributors 641 About the Foreword Contributors 643 Index 645

internationally recognized SOA Certified Professional (SOACP) and Cloud Certified Professional (CCP) accreditation programs, which have established a series of formal, vendor-neutral industry certifications. Thomas is the founding member of the SOA Manifesto Working Group and author of the Annotated SOA Manifesto (www.soa-manifesto.com). He is a member of the Cloud Education & Credential Committee, SOA Education Committee, and he further oversees theSOAPatterns.org and CloudPatterns.org initiatives, which are dedicated to the on-going development of master pattern catalogs for service-oriented computing and cloud computing. Thomas has toured over 20 countries as a speaker and instructor for public and private events, and regularly participates in international conferences, including SOA, Cloud + Service Technology Symposium and Gartner events. Over 100 articles and interviews by Thomas have been published in numerous publications, including the Wall Street Journal and CIO Magazine. Robert Laird is the lead architect of the IBM Software Group in areas of SOA governance and SOA policy; he currently leads the automation of the SOA Policy Lifecycle. Prior to that, Robert co-authored the SOA Governance and Management Method (SGMM) for usage of SOA governance capabilities and maturity assessment. Robert has several years of international consulting experience and was responsible for supporting and leading service-oriented architecture (SOA) governance and SOA architecture engagements for worldwide IBM customers. With more than 20 years experience in the telecom industry at MCI and Verizon, Robert has been the MCI chief architect, leading the enterprise architecture group and has worked across the entire order-to-cash suite of applications. He led the development of the SOA based single stack strategy to simplify the multiple network and applications silos; he has driven the strategy, planning, and execution of MCI's product development in the area of contact centers, IP/VPN, VOIP, IMS, and managed services; and, for OSS, he has led successful implementations to automate network provisioning, network restoration, and network management. Prior to joining MCI, Robert worked as a consultant for American Management Systems (AMS) and Ideation, Inc. He has an MS and a BS degree in Computer Science from Purdue University and has been granted two patents in the area of telephony, with three patents pending in the area of computing. As well as speaking at various industry forums, Robert has written for The SOA Magazine, been quoted in CIO Insight, Telecommunications, Infoworld, and Computerworld, and has co-authored two books including SOA Governance (IBM Press 2008) and Executing SOA (IBM Press 2008). Anne Thomas Manes is the Vice President and Research Director for Burton Group Application Platform Strategies. Her expertise includes SOA, web services, XML, governance, Java, application servers, super platforms, and application security. Prior to joining Burton Group, Anne was the Chief Technology Officer at Systinet, an SOA governance vendor (now part of HP) and Director of Market Innovation in Sun Microsystems's software group. With 28 years of experience, Anne was named one of the 50 most powerful people in networking 2002 by Network World and among the "Power 100 IT Leaders," by Enterprise Systems Journal. Anne has authored Web Services: A Manager's Guide (Addison-Wesley, 2003) and contributed the foreword for the new book Next Generation SOA (Prentice Hall, 2011). Anne has also participated in Web services standards development efforts at the W3C, OASIS, WS-I, and JCP. Robert Schneider is a Partner at WiseClouds, LLC. WiseClouds offers vendor-neutral, unbiased consulting and training services that help customers understand and manage cloud computing business concerns, select the right mixture of enabling technologies, and identify and deploy the ideal configuration required. Robert has provided database optimization, distributed computing, and other technical expertise to a wide variety of enterprises in the financial, technology, and public sectors. Clients have included Amazon, JP Morgan Chase & Co, VISA, HP, S.W.I.F.T., and numerous governments such as the United States, Brazil, Malaysia, Mexico, Australia, and the United Kingdom. Robert has written six books and numerous articles on database technology and other complex topics such as cloud computing, and SOA. Robert is a frequent organizer and presenter at technology industry events, worldwide. Leo Shuster is a seasoned IT professional. He has directed Enterprise Architecture and SOA strategy and execution for a number of organizations including Nationwide Insurance, National City Corporation, Ohio Savings Bank, and Progressive Insurance. Leo holds an MS in Computer Science and Engineering from Case Western Reserve University and an MBA from Cleveland State University. Thus far, in his 15 year IT career, Leo has held a variety of roles including Director, Manager, Team Lead, Project Manager, Architect, and Developer. Leo has presented on Enterprise Architecture, SOA, and related topics for groups of all sizes at a variety of industry events and conferences. He is passionate about technology and regularly blogs about advanced software architecture issues at leoshuster.blogspot.com. Andre Tost works as a Senior Technical Staff Member in the IBM Software Group where he assists IBM's customers in establishing service-oriented architectures. His special focus is on Web services, Enterprise Service Bus technology, and SOA governance. Before his current assignment, Andre spent ten years in various partner enablement, development, and architectural roles in IBM software development. Andre has spoken at industry conferences worldwide on topics related to SOA and is a frequent publisher of articles and papers. He is also a co-author of several books on Web services and related technologies including Web Service Contract Design and Versioning for SOA (Prentice Hall 2008). Originally from Germany, he now lives and works in Rochester, Minnesota. Chris Venable is an architect and member of the SOA Center of Competency at Wal-Mart Stores, Inc. He has 16 years of experience in the IT industry with the past nine focused on SOA, data integration, and other modern software engineering practices. Current areas of interest include business architecture, event processing, variation analysis, and conceptual modeling.