SOA Governance & Lifecycle Management

Transcription

1 SOA Governance & Lifecycle Management Phil Fritz Program Director, SOA Management & DataCenter Transformation

2 Agenda What Is SOA Governance? SOA Governance Lifecycle and Model Services & Software that Enable SOA Governance SOA Governance Direction

3 Frick P01- Employee Co Masterfile Mainframe apps - Blue PC/NT apps - Green Unix apps - Yellow 3rd party Mainframe interface apps - Orange - Blue Vendor Setup Lines: PC/NT Colors apps have no - Green special meaning. Vendor They are Unix to help apps make - the Yellow diagram easier to Process Servers read. Budget Maintenance 3rd party interface - Orange Vendor Setup (Imaging) For More Information: See the database Analysis Tool Printer containing Lines: information Colors about have each no special meaning. S20-Sales Maintenance Vendor application: They are Application to help make V4.mdb the diagram easier to Process Servers Polling read. Budget Maintenance (Imaging) For More Information: See the database Analysis Tool Printer PO Insertions AIS Printer containing Reports information about each Orders S20-Sales AIS Calendar Maintenance application: Application V4.mdb Polling Due Dates Print Costing General Printer PO Invoice Insertions App Stores AIS & Mrkts Reports Broadcast Maintenance Orders E13 Filter AIS Calendar E3 Interface Smart Due PlusDates Print Costing General Invoice App Smart Plus Stores & Mrkts Broadcast M03 - Millennuim Maintenance 3.0 E13 Launcher Filter E3 Interface Smart Plus S07 - Cell P16 - Tally Sheet Phones Smart Plus M02 M03 - Millennium - Millennuim 3.0 D01 Post Load Launcher Billing Equifax S07 - Cell Stock Options P16 - Tally Sheet Phones M02 - Millennium D01 Post Load P15 EES Employee Billing L02-Resource Change Notice Scheduling A04 - Equifax Cust Stock Options Refund Chks (Campbell) P15 EES Employee P14 On-line L02-Resource Change New Notice Hire Entry Scheduling A04 - Cust AAS Resumix Refund Chks (Campbell) P01- Employee Cobra Resumix ACH CobraProdigy CTS Banks - ACH and Pos to ACHPay Prodigy Plan Administrators (401K, Banks PCS, Life, - ACH and Pos to Unicare, SolomonPay Smith Barney) Plan Administrators (401K, PCS, Life, Intercept E02-Employee Purchase Unicare, Solomon Smith Barney) Scorecard E02-Employee - HR Purchase P09 Bonus/HR Texlon 3.5 U16-Texlon Scorecard - HR P09 Bonus/HR ASIS Store Monitor ASIS Store Texlon Monitor 3.5 CTS U16-Texlon Merch Mngr Approval Batch Forcasting Ad Measurement AIMS Admin Merch Mngr Approval Batch Forcasting Ad Measurement AIMS AdAdmin Launcher Ad Launcher ELT PowerSuite Data Warehouse (Interfaces to and from the Data Warehouse are not displayed on this diagram) Data Warehouse (Interfaces to and from the Data Warehouse are not displayed on this diagram) Intercept V03- Mkt Reactions I35 - CEI RebateI35 - CEI Transfer P14 On-line New Hire Entry P09 - P17 Cyborg V03- Mkt Reactions Rebate Transfer ELT Sign PowerSuite System CopyWriter's Workspace Sign System CopyWriter's Workspace AIMS PSP AIMS AIMS Reporting In-Home PSP Repair Warranty In-Home BillingRepair System Warranty Billing System P09 - P17 Cyborg AIMS Reporting POS S08 - Vertex Sales Tax POS S08 - Vertex Sales Tax S03-Polling Star Repair S03-Polling Star Repair V04-Sign System Spec Source SKU Tracking NPD, Spec Source SoundScan SKU Tracking Spec Source NPD, SoundScan V01-Price Management System I18 SKU Rep G02 - General Ledger G02 - General Ledger C02 - Capital Projects F06 - Fixed Assets F06 - Fixed Assets Frick Co Spec V01-Price Management Source System C02 - Capital Projects Masterfile V04-Sign System I18 SKU Rep A05 - AP A05 - AP Optika SiteSeer Optika AAS SiteSeer US Bank Recon File Mesa Data Mesa Data CTO2.Bestbuy. com U18 CTO2.Bestbuy. - com U18 - CTO B01 - Stock Status B01 - Stock Status I05 Inventory Info B02 Merchandise Analysis I05 Inventory Info B02 Merchandise Analysis I12 Entertainment Software S01 - Sales Corrections I12 Entertainment Software Connect 3 US Bank Recon File Connect 3 Connect 3 PDF Transfe Connect Reports 3 NEW Soundscan NPD Group AIG Warranty Guard NEW Soundscan NPD Group S01 - Sales AIG Warranty Guard Corrections Connect Cash 3 Over/ Connect 3 PDF Transfe Short Reports Cash Over/ Short I04 Home Deliveries I04 Home Deliveries I09 Cycle Counts S05 - House Charges I09 Cycle Counts I55 SKU Information I55 SKU Information Roadshow S05 - House Charges ICMS Credit I06 - Customer Roadshow Order ICMS Credit I06 - Customer Order S04 - Sales Posting S04 - Sales Posting NARM NARM EDI Coordinator E01-EDI EDI Coordinator Cellular Rollover Cellular Rollover Sterling VAN Mailbox (Value) Sterling VAN Mailbox (Value) E01-EDI K02 Customer Repair Tracking K02 Customer Repair Tracking Cash Receipts/Credit Cash Receipts/Credit I03 Return to Vendor I10 Cycle Physical Inventory S02 - Layaways I03 Return to Vendor I10 Cycle Physical Inventory S02 - Layaways I14 Count Corrections I14 Count Corrections I13- Auto Replenishment 1 I13- Auto Replenishment OTHER APPS - PC AP - Collections/Credit TM - Credit Card DB 1 I11 Price Testing S09 - Digital Satellite System S11 - ISP Tracking L60 MDF Coop I11 Price Testing OTHER APPS - PC AP - Collections/Credit TM - Credit Card DB S09 - Digital Satellite System S11 - ISP Tracking L60 MDF Coop I07 Purchase Order I07 Purchase Order Misc Accounting/Finance Apps - PC/NT COBA (Corp office Budget Assistant) PCBS(Profit Center Budget System) Merchandising Budget Misc Accounting/Finance Apps - PC/NT COBA (Corp office Budget Assistant) PCBS(Profit Center Budget System) Merchandising Budget Fringe PO Depository UAR - Universal Account Banks Reconcilliation Fringe PO UAR - Universal Account Reconcilliation S06 - Credit App I01 PO Receiving S06 - Credit App I01 PO Receiving INVENTORY In HomeCONTROL APPS - PC Junkouts Code Alarm Merchandise Debit Withdrawl Receivings Promo Credits Devo Sales RTV Accrual Display Inventory Shrink In Home AP Research - Junkouts Inv Cntrl AP Research-Addl Merchandise Rpts Withdrawl Book to Perpetual Promo Inventory Credits Close Out Reporting RTV Accrual Computer Intelligence Shrink Data Count AP Corrections Research - Inv Cntrl Cross Ref AP for Research-Addl VCB Dnlds Rpts Damage Book to Write Perpetual Off Inventory Debit Receivings Close Out Reporting DFI Vendor Computer Database Intelligence Data Display Inventory Count Reconcil Corrections Display Inventory Cross Ref Reporting for VCB Dnlds Damage Write Off Debit Receivings DFI Vendor Database Display Inventory Reconcil V02-Price L01-Promo Marketing Analysis Support Display Inventory Reporting V02-Price Marketing Support I02 - Transfers Supplier Compliance I35 Early Warning System Valley Media INVENTORY CONTROL APPS - PC INVENTORY CONTROL APPS - PC Code Alarm Journal Entry Tool Kit DPI/CPI Debit Receivings IC Batching Devo Sales Display Inventory Depository Banks L01-Promo Analysis I02 - Transfers Supplier Compliance I35 Early Warning System Valley Media Journal Entry Tool Kit Page 1 of 2 I17 Customer Perceived In-Stock Inventory Adj/Count Correct Inventory Control Reports INVENTORY Inventory Levels CONTROL APPS - PC Inventory Roll DPI/CPI Merchandise Withdrawl IC Batching Open Inventory Receivings Adj/Count Correct PI Count Inventory Results Control Reports PI Time Results Inventory from Inv Levels Price Protection Inventory Roll Sales Flash Merchandise Reporting Withdrawl Shrink Reporting Open Receivings SKU Gross PI Count MarginResults SKU Shrink PI Time Level Results Detail from Inv USM Price Protection VCB Sales Downloads Flash Reporting Shrink Reporting SKU Gross Margin I17 Customer I15 Hand Perceived Scan In-Stock Apps I15 Hand Scan I06 Warehouse Apps Management X92-X96 Host to AS400 Communication I06 Warehouse Management Washington, RGIS, Ntl Bus Systems Washington, RGIS, Ntl Bus Systems X92-X96 Host to AS400 Communication SKU Performance Page 1 of 2 SKU Selection SKU Tool Performance SKU Selection Arthur Planning Tool Ad Expense Arthur Planning Store Scorecard Ad Expense Store Store Budget Reporting Scorecard BMP Store - BusBudget performance Reporting Mngt BMP - Bus performance Mngt ACCTS REC APPS - PC 990COR Bad Debt Benefical Fees Beneficial Reconcil SKU Shrink Level Detail USM Prepared by Michelle Mills VCB Downloads ACCTS JEAXF REC APPS - PC JEBFA 990COR JEBKABad Debt JEDVA Benefical Fees JESOA Beneficial Reconcil JEVSA JEAXF JEVSF JEBFA NSF JEBKA TeleCredit Fees JEDVA JESOA JEVSA JEVSF NSF TeleCredit Fees Prepared by Michelle Mills Business flexibility depends on IT flexibility Whether designing an airplane, assembling a motorcycle [or delivering software] the ability to integrate the talents of dispersed individuals and organizations is becoming the defining competency for managers and firms. -- Tapscott & Williams, Wikinomics, Copyright 2006 Why are today s roadblocks? Lack of business process standards Architectural policy limited Point application buys to support redundant line of business needs Infrastructure built with no roadmap DRAFT Best Buy - Application Diagram V4 DRAFT November 10, 1999 DRAFT Best Buy - Application Diagram V4 DRAFT November 10, 1999 Actual application architecture for a consumer electronics company

4 IBM SOA A Scenario To Get Us Started * Sales App. 1 App. 2 Legal X x X x X x x X X x Currency Conversion Service x X Order Fulfillment Accounting Dept. Purchasing 1. Provide a currency service that fills a specific LoB need 2. Other LoB s start using the service 3. LoB s increase use of service / quality suffers 4. Service is fixed at provider s expense 5. Fix works temporarily but problem reappears 6. Maintenance costs soar / provider ends service * Scenario from Introduction to SOA Governance by Bobby Woolf

5 Never do this

6 What is Governance? Governance The establishment of chains of responsibility to empower people, measurement to gauge effectiveness, policies to guide the organization to meet their goals, control mechanisms to ensure compliance, and communication to keep all required parties informed IT Governance The application of governance to an IT organization, its people, processes, and information to guide the way those assets support the needs of the business. SOA Governance A specialization of IT Governance that puts key IT Governance decisions within the context of the lifecycle of service components, services, and business processes. It is the effective management of this lifecycle that is the key goal of SOA Governance.

7 The Relationship Between IT and SOA Governance Key IT Governance Decisions 1 Key SOA Governance Decisions IT Principles (ITIL) SOA Business & SOA IT Principles IT Architectural Decisions SOA Architectural Decisions IT Infrastructure Business Application Needs Service Portfolio SOA Infrastructure Service Portfolio Needs IT Investment & Prioritization Service Candidate Funding & Prioritization 1 IT Governance: How Top Performers Manage IT Decision Rights for Superior Results, Peter Weill and Jeanne W. Ross

8 Why SOA governance matters Realize business benefits of SOA Business process flexibility Improved time to market Mitigate business risk and regain control Maintaining quality of service Ensuring consistency of service Improved team effectiveness Measuring the right things Communicating clearly between business and IT "Firms with above average IT governance... had more than 20 percent higher profits than firms with poor governance following the same strategy." Source: Peter Weill and Jeanne W. Ross, Harvard Business School Press 2004 "Effective IT Governance is the single most important predictor of value an organization generates from IT. Source: Peter Weill, MIT Sloan School of Management s Center for Information Systems Research Professional investors are willing to pay premiums of 18-26% for stock in firms with high corporate governance. Source: McKinsey Quarterly

9 Governing key processes across the service lifecycle Assemble Solution Model Business Processes Identify Business Domain Design the Architecture Develop the Service Functionally Test Deploy Solution Deploy to Infrastructure System Test Assign Ownership Allocate Funding Model the Service - Identify the Service - Specify the Service - Realize the Service Manage/Operate System Manage Access Monitor the Service Manage Versions Manage Retirement Help define guiding decisions around these processes Properly enforce these guiding decisions Communicate these guiding decisions effectively Effective SOA Governance Must: Evolve these guiding decisions with changing needs Ensure the perspective of both service providers and consumers are properly met

10 SOA Governance Lifecycle Scope the Governance Need Document and validate business strategy for SOA and IT Assess current IT and SOA capabilities Define/Refine SOA vision and strategy Review current Governance capabilities and arrangements Layout governance plan Design the Governance Approach Define/modify governance processes Design policies and enforcement mechanisms Identify success factors, metrics Identify owners and funding model Charter/refine SOA Center of Excellence Design governance IT infrastructure Manage & Monitor the Governance Processes Monitor compliance with policies Monitor compliance with governance arrangements Monitor IT effectiveness metrics Put the Governance Model into Action Deploy governance mechanisms Deploy governance IT infrastructure Educate and deploy on expected behaviors and practices Deploy policies

11 What Constitutes an SOA Governance Model Principles - Guiding objectives and /or goals and associated metrics to ensure they are met Role and Responsibilities - The roles and associated responsibilities that will facilitate business / IT alignment and to properly establish decision rights Guiding Decisions Policies, Guidelines / Best Practices, & Standards Methods Consistent approach to establishing SOA Governance and applying it across the lifecycle Foundational Governance Processes Exception and Appeals Compliance Vitality Communication Platform Enabling technology (Registry, Monitoring, etc.) Governance processes should make it easy to do things the right way and hard to do them the wrong way. Build schools, not prisons. The goal is to help people conform to best practices, not police them. Mark Ericson, CTO of Mindreef

12 IBM s Comprehensive approach to SOA Governance is the SOA Governance & Management Method Plan Define Enable Measure Determine the Governance Focus Define the SOA Governance Model Implement the SOA Governance Model Refine the SOA Governance Model Tailor method for goals / environment Understand current Governance structures Define scope of governance Conduct change readiness survey Define and refine governance processes Define organizational change Define IT changes in SOA development Implement the transition plan Initiate SOA Org Changes Launch the SOA Center of Excellence Implement infrastructure for SOA Measure effectiveness governance processes Measure effectiveness of organization change Review and refine operational environment Continuous SOA Governance Process Measurement & Improvement Define the scope of governance: business, development governance or service management or all of the above Define new governance processes for services and define SOA governance mechanisms such as the SOA Center of Excellence Begin implementation of the SOA Center of Excellence, Skills Enablement, Organizational Change, Infrastructure Change, etc. Monitor composite application performance and adjust; Monitor effectiveness of governance changes

13 Challenges Faced In Governing SOA What is happening? How does this impact my business? What actions can I take? Service performance and availability monitoring Service level mgmt Service identity & access control Service mediation Service lifecycle mgmt The most satisfied SOA customers are likely to be the same customers who have also invested in end-to-end service management (ISM) best practices and tools, IT management automation and virtualization. OVUM, 2006 Source: Survey finds IT management upgrades required for SOA runtime success, Mary Johnson Turner OVUM, August 2006

14 Specific GTS Services related to Service Management in a SOA environment Design and Implementation Services Service Management Strategy, Planning, Design and Implementation Business of IT Dashboard Service Management and Governance Infrastructure Strategy, Architecture and Design Infrastructure Healthcheck Infrastructure Healthcheck Services for SOA Infrastructure Implementation, Integration and Migration Event Management & Monitoring New Infrastructure Test, Optimization and Performance

15 SOA Governance direction builds off the current governance and supports Smart SOA Foundational Extend End-to-End Transform Adapt Dynamically Gain control of current environment Focus: Inventory and control of current services Center of Excellence Registry/Repository Go after key business opportunities Focus: End-to-end processes and policies Culture and Org Change Enabling tools Create cross organization Business IT alignment Focus: Enhance Business/IT governance Expand measurements & metrics End-to-end Quality Management

16 Tools What To Look For Registry Monitoring / Management Security Testing

17 What to Look For. Provides the capability to effectively manage service metadata Supports design time discovery and runtime access Stores artifacts and not just references to artifacts Supports a service taxonomy to define domains and functional areas Manages the service lifecycle in a shared environment Notification to keep all required parties informed of important events / changes to service metadata Control service access Ability to handle multiple versions of a service and help with the version management process

18 Reuse will require development of quality services and the associated assets Service and Asset Development Service Discovery Service Development Lifecycle Development Registries Rational Team Concert Rational Asset Manager Rational Clearcase Rational ClearQuest RAM V7.1 update Collaboration & Community Improvements Rational Team Concert integration Asset Lifecycle and Traceability Graphical Asset Relationships Governance Policy management integration Reporting improvements Interfaces with Development tools, Rational Clearcase and Clearquest Rational Team Concert improves ability for collaborative development and deployment

19 WebSphere Service Registry and Repository Federated Services, Policies and Metadata Publish/Manage Services Dependencies/relationships and discovery User-defined relationships Impact analysis Integration with WebSphere DataPower SOA Appliance for runtime enforcement Service Deployment Runtime Repository Runtime Service Discovery WebSphere Service Registry & Repository Other Registries / Repositories UDDI Registries Other External Reg / Rep Interface with WebSphere Business Service Fabric (WBSF) Acquire services from IBM SOA Business Catalog Improved support for UDDI registries Enhanced SOA Policy capability WBSF SOA Business Catalog

20 New product for effectively governing the SOA lifecycle from service creation to consumption Store and organize assets and services Impact assessment of deployed services Auditing and reporting on service SLAs WSRR Advanced Lifecycle Edition Service and Asset Development Service Deployment and Runtime Rational Asset Manager WebSphere Service Registry & Repository Available July Low cost starter pack Single organization for support Easy to upgrade

21 Tools What To Look For Registry Monitoring / Management Security Testing

22 What to Look For in a Management / Monitoring Monitors multiple environments concurrently Supports various deployment environments Monitors all necessary Quality of Service (QoS) criteria Availability, Accessibility, Integrity, Performance, Reliability, etc. Provides a fully integrated interactive portal where you can not only see all results for all monitored platforms through one easy to use UI, but can act on those platforms when (not if) it is required. Monitors all necessary business process key performance indicators (KPI s)

23 Contextual Service Visibility: Executive Views Interactive Map Views Stock Trading Realtime Charts & Graphs Business KPIs & Balanced Scorecards Integrated 3 rd Party Data

24 Contextual Service Visibility: Service Manager Views Balanced Scorecards & KPIs Realtime Service Dependency Views SLA Performance Tracking Realtime Event & Root Cause Views Contextual Views of Federated Data/Intelligence

25 Right-click access to granular SOA intelligence SOA Services Automates management of SOA services through built-in and extensible alerts, mediations, situations and Expert Help Service to service Topology provides developers and architects with a deep understanding of service flows and relationships Access to web services objects, BPEL, & WSSR information. Underlying IT Infrastructure Transaction tracking through lower levels of IT infrastructure Quickly identify non-performing resource and resolve issue In context linkage across monitored systems and layers of abstraction

26 Scenario: Discovery of Rogue and Underutilized Services Business challenge How to easily identify rogue services services observed, but not registered How to report on services registered but not actively being used. Display of Observed and Registered Services Registered but not observed Observed but not registered Observed and registered Metrics % of rogue services allowed in the system Observed Services and their Relationships Registered Services, their relationships, metadata and documents

27 Tivoli Composite Application Manager for SOA Tivoli Business Services Manager Integrates with all 3 of IBM s ESBs Provides performance and availability metrics across all 3 IBM ESBs Support for SCA mediation primitives enable operational automation capabilities Multi-box management for DataPower devices Tivoli CAM for SOA Platforms Faster problem identification through new service-to-service topologies Tracking by service requestor ID New support for IBM Universal ESB (Message Broker) and CICS Transaction Server 3.2 Heterogeneous SOA Platform Support In addition to IBM ESBs, ITCAM for SOA also discovers and monitors services built on: Microsoft.NET, JBOSS, BEA WebLogic, and SAP NetWeaver Integrated Console Service views, alerts and automation included within Tivoli Enterprise Portal, the integration point for Tivoli operational monitoring Integration and support for Tivoli Business Service Manager 4.1 Support for cross-product linking, enabling drill-down capabilities from services layers down to component and resource layers for true root cause analysis

28 Tools What To Look For Registry Monitoring / Management Security Testing

29 What to Look For in Security Products Centrally and quickly automate user provisioning Centrally automate user access with security policy Detect and correct inappropriate changes to user access Provide single login access to IT resources Provide self service for password resets and account updates to reduce IT help call volumes Centralize application access, data disclosure, and OS access control Securely link across channel partners Automate the auditing process Audit clients and servers to understand configurations and provide scanning and reporting Audit security events to identify only critical events

30 SOA Security Identity and Policy Management Customer Goals: Service Security Management Process Prevent unauthorized access to business services Ensure consistent access control and data security Develop policy and governance Compliance with regulatory agencies Watch Assess Access Defend ROI: Decrease in security administration costs Increased revenue by adding more secured services through portal Single sign-on enhances user productivity IBM Advantages: IDENTITY & ACCESS: Enable secure collaboration with internal and external users with controlled and secure access to information, applications and assets COMPLIANCE: Demonstrable policy enforcement aligned to regulations, standards, laws, agreements (PCI, FISMA, etc..) POLICY : Centrally manages security for multiple business applications across an enterprise eco-system

31 WebSphere DataPower Integration Appliance XI50 Purpose-built hardware ESB for simplified deployment and hardened security Redefines the boundaries of middleware with specialized hardware Many functions integrated into a single device Simplified deployment and ongoing management WebSphere DataPower Integration Appliance XI Support for WS-RX for guaranteed delivery of mission critical messages Improved Registry & Repository support for centralized access to service metadata & policies Streamlined multistep transaction processing Secures services on the network with sophisticated web services access control, policy enforcement, message filtering, and field-level encryption Optimized to bridge between leading standard protocols at wirespeed, including web services, messaging, files, and database access Enables transformation between a wide range of data formats, including XML, legacy, and industry standards, and custom formats Captures and emits events to facilitate web services management and enable business visibility in Business Activity Monitoring solutions

32 Tivoli Security Policy Manager support IBM s SOA Policy approach in an heterogeneous environment Beta Unified SOA security policy management & enforcement with delegation & change control Java EE Web Services Standards-based interoperability with service registry WS-Policy, WS-SecurityPolicy support Enable fine-grained authorization and control data entitlements with callable Security as a Service WS-Trust, XACML support Tivoli Security Policy Manager Manage Enforce SOA Security Data Entitlements Available in 3Q Tivoli Change and Configuration Management Database WebSphere Service Registry and Repository Discover Relate Control Automate Govern Publish Find Enrich Manage Govern 32

33 Tools What To Look For Registry Monitoring / Management Security Testing

34 What to Look For in Functional and Performance Testing Products.. Functional Testing: Test Planning Creates test plans and test cases associated with requirements (know where you are going) Test Execution Runs test suites or individual test cases (know where you are now) Test Reporting Reports progress in your test plan (know how far you have come and still need to go) Supports teams that are geographically distributed Load / Performance Testing: Easily builds scripts that capture user interactions with varying input data from multiple users Schedules workload through the definition of order and sequencing and provides the flexibility to model complex workloads that can dynamically add load. Ease of execution and ability to monitor from a master console that is integrated with reporting capabilities that make the identification of bottlenecks easier.

35 IBM Rational Tester for SOA Quality Code free test of GUI-less web services Simplify testing of GUI-less service Automated generation of web service test client Test log details Test creation WS-BPEL Targeted at developers and the QA Team Eliminate need for manual coding Automated data correlation and data driven testing through a code-free test environment Supporting wide variety of users on a broad range of platforms Simplify service integration testing Automated test creation from WebSphere BPEL resources Create, comprehend, modify, and execute a functional or performance test Graphical test editor enables both high-level and deeper detail views Supports Web services standards (e.g. SOAP, HTTP(S), JMS, WS-Security, UDDI) Supports testing secure web services by means of using XML Signatures.

36 IBM Rational Performance Tester Ext for SOA Quality performance testing and problem analysis Server All the capabilities of Rational Tester for SOA Quality plus: Validate system scalability Flexible workload modeling enables automated generation of web service test client Automated generation of web service performance tests Real-time reporting of server response time and throughput response time of Web service Find performance bottlenecks and enable problem determination Broad platform monitoring support for deployed web services Collection and visualization of server resource data root cause analysis Advanced data analysis and parsing Flexible test customization through java code insertion User action throughput Targeted at performance engineers

37 Success drivers for SOA Governance are based on a federated approach Key success drivers Assess organizational readiness for federation Skills, Communications, Leadership Integrate federation into current SOA implementation plan Understanding, Acceptance, Preparation, Commitment Governance Approaches Centralized Single solution/product focused Federated Growth based on Smart SOA requirements Decentralized Roll your own Centralized We ll take care of it for you Federated We re all in this together Distributed or Decentralized You re on your own CEO/ CIO/ CFO CEO/ CIO/ CFO CEO/ CIO/ CFO IT Services / App Dev Infrastructure Infrastructure BU 1 BU 2 BU 3 Functional Reqs Functional Reqs Functional Reqs Project Manager IT Program Program BU 1 BU 2 BU 3 IT BU 1 BU 2 BU 3 Services / App Dev Services / App Dev Services / App Dev Federation approach provides the greatest flexibility and growth capability

38 Integrate Silos Service Development Service Discovery Service Development Lifecycle Rational Asset Manager WSRR-ALE Federation Service Deployment Runtime Repository Runtime Service Discovery WebSphere Service Registry & Repository Development Registries Publish and Synchronize Other Registries / Repositories Rational Clearcase Rational Team Concert Rational ClearQuest Tivoli Change and Configuration Management DB (CCMDB) Service Management Operational Efficiency & Resilience Configuration Data Discovery Managing change WBSF UDDI Registries SOA Business Catalog Other External Reg / Rep

39 WebSphere Service Registry and Repository V6.2 policy enhancements* Govern the lifecycle of SOA policies Validate, audit and report changes to policy Enforce service governance policies Use policy authoring tools to easily create new policies Associate policies to services to create an authoritative source Apply prescriptive approach to governance with new policy libraries Templates for operational policies Policies that capture governance best practices Enable ESB s and other SOA products for policy enforcement Policy exchange services for uniform communication Service Service Policy Authoring WebSphere Service Registry and Repository Policy Lifecycle Governance Runtime Enforcement WSRR enables policy management spanning all policy domains Available 3Q Policy Policy * The information on the roadmap is intended to outline our general product direction and it should not be relied on in making a purchasing decision. The information on the roadmap is for informational purposes only and may not be incorporated into any contract. The information on the roadmap is not a commitment, promise, or legal obligation to deliver any material, code or functionality. The development, release, and timing of any features or functionality described for our products remains at our sole discretion.

40 SOA operational policy management: Logical architecture to actual product support 1 SOA Policy Authoring WebSphere Service Registry and Repository 2 Distribute Policy Tivoli Security Policy Manager for SOA 4 Tivoli Composite Application Manager for SOA Monitor Services and Policy WebSphere DataPower SOA Appliance 3 Resolve Services and Enforce Policy WebSphere Application Server

41 SOA Governance Factors To Consider Factor #1 Garner C-level backing across the board Factor #2 Engage the business and drive business value Factor #3 Establish SOA funding model for the long term Factor #4 An EA facilitates initial establishment of SOA governance Factor #5 Commit to roles, responsibilities, and resources Factor #6 Get the message out Factor #7 Be ready for SOA

42 IBM SOA Governance - White Papers Description of SOA Governance Outline of the Process SOA Governance Product Neutral Tools Description Case Studies where IBM has implemented SOA Governance SOA Governance Best Practices

43 More Information Learn more about SOA Governance ibm.com/soa/gov Download whitepapers m/web/prelogin.do?lang=en_us&source=s wg-soagmm View WebCast "Addressing real-world planning for SOA governance" m/web/prelogin.do?lang=en_us&source=d w-c-wcsdpr&s_pkg= Integration Developers News Avoid SOA Mistakes IBM Tivoli ITIL Resources -- ITIL/