IBM Software Group SOA Governance 2006 IBM

Agenda ● Why SOA Governance ? ● IBM Products and Solution © 2006 IBM

IBM’s definition of SOA – it’s about the business Service Oriented Architecture (SOA) is a business-centric IT architectural approach that supports integrating your business as linked, repeatable business tasks, or services. SOA helps users build composite applications, which are applications that draw upon functionality from multiple sources within and beyond the enterprise to support horizontal business processes A more complete discussion of these definitions and related concepts is found IBM SOA Foundation: An Architectural Introduction and Overview http: //www-128. ibm. com/developerworks/webservices/library/wssoa-whitepaper/ © 2006 IBM Corporation 3

Service-Oriented Enterprise BUSINESS DOMAIN Business Process #1 Business Process #2 Business Service #1 Business Service #4 Business Service #5 Business Service #3 Business Service #4 Business Service #7 Business Service #3 Business Service #4 Re-usable Business Services Business Service #6 Business Service #5 Business Service #3 IT DOMAIN Business Service #3 IT Service #1 Re-usable IT Services © 2006 IBM Corporation Business Service #5 IT Service #2 IT Service #3 IT Service #2 IT Service #4 IT Service #3 4

A scenario on the importance of SOA governance App. 1 Sales X x X x x 2. Other Lo. B’s 4. start using the 5. service Legal x x Currency Conversion Service Order Fulfillment 1. Provide a currency service that fills a specific Lo. B need App. 2 Accounting Dept. 3. 4. Service is Lo. B’s increase use of fixed at service / quality provider’s 6. suffers expense X X Purchasing 5. Fix works 6. Maintenance temporarily costs soar / but problem provider reappears ends service * Scenario from “Introduction to SOA Governance” by Bobby Woolf © 2006 IBM Corporation 5

The Journey to SOA is filled with potholes ● Most organizations are implementing SOI not SOA ● SOA is largely an IT effort, Lo. B is not in ● Without Senior IT endorsement, many SOA efforts are focused on product selection, i. e. , Shelf ware ● Funding to support Enterprise SOA is scarce or non-existent ● With no oversight comes no reuse and no relevance ● Oversight mechanisms lack teeth; projects evade the processes ● Inconsistent standards, drive inconsistent methodology, competing tools, and a lack of skilled resources ● Organizations are replacing silo’d applications with silo’d SOA © 2006 IBM Corporation 6

A scenario on the importance of SOA governance Finance Sales Legal Currency Service Order Fulfillment 1. All groups plan a re-usable currency service © 2006 IBM Corporation Purchasing 2. Service defined that meets everyone’s needs 3. Service enabled to be available to all LOBs 4. Success metrics defined, monitored to confirm service scalability 7

14 Critical Processes That Constitute an Effective SOA Governance Model Implementation Service Planning Service Modeling Service Implementation Service Management Define Service Focus Process Identify Services Process Design Services Process Manage Quality of Service Process Identify Service Owners Process Specify Services Process Assemble Services Process Manage Service Levels Process Define Service Funding Process Realize Services Process Test Services Process Manage Service Change Process Deploy Services Process Manage Service Security Process By effectively establishing governance mechanisms in these 14 areas, clients can address these common challenges: Establishing decision rights Defining high value business services Managing the lifecycle of assets Measuring effectiveness © 2006 IBM Corporation 8

Different Aspects of Governance There are different aspects of Governance, based on the process governed SOA Governance: examples of governed processes SOA Governance is an extension of IT Governance ● ● ● SOA Governance IT Governance Corporate Governance © 2006 IBM Corporation service funding service ownership service creation service reuse composite application design IT Governance: example of governed processes ● ● ● requirements management portfolio management change management data design architectural design release management 9

Solution Overview: Service Lifecycle Management Process design & implementation expertise based on the market’s leading solutions delivery platform Infrastructure & Management in Support of SOA Service Development & Delivery Management SOA Governance Method Empowering development teams to deliver the “A” in SOA © 2006 IBM Corporation 10

Service Lifecycle Management is essential in the realization of SOA Governance Service Lifecycle Management ycle ifec SOA L Service Development and Delivery Management Enforce, execute, automate process and policies Infrastructure and Management In Support of SOA Monitor and control operational policies SOA Governance Method Establish Process and Policies © 2006 IBM Corporation 11

IBM SOA Governance Method Establish the Governance Need • Document and validate business strategy for SOA and IT • Assess current IT and SOA capabilities • Define/Refine SOA vision and strategy • Review current Governance capabilities and arrangements • Layout Governance plan Monitor and Manage the Governance Processes • Monitor compliance with policies • Monitor compliance with governance arrangements • Monitor IT effectiveness metrics © 2006 IBM Corporation Define the Governance Approach • Define/modify Governance Processes • Design policies and enforcement mechanisms • Identify success factors, mechanisms • Identify owners and funding model • Charter/refine SOA Center of Excellence • Design Governance IT infrastructure Deploy the Governance Model Incrementally • Deploy Governance mechanisms • Deploy Governance IT infrastructure • Educate and deploy on expected behaviors and practices • Deploy policies 12

SOA Governance Challenges : Applying the SOA Governance Life Cycle ● Establishing decision rights ● Defining high value business services ● Managing the lifecycle of assets ● Measuring effectiveness © 2006 IBM Corporation 13

Getting Started – Establishing decision rights Business Executive Determine business strategy that leverages SOA Assessment Services IT Executive © 2006 IBM Corporation Assess readiness for SOA Assess current governance approach Determine governance plan SOA Assessment Services SOA Governance and Management Method Rational Method Composer 14

Getting Started – Defining high value business services Business Executive IT Executive Business / System Analyst Software Architect Data Architect © 2006 IBM Corporation Identify key performance indicators Document business strategy milestones Charter Center of Excellence Strategy & Planning Services Document standards and policies Rational Requisite. Pro Identify metrics Define development process Center of Excellence Services Strategy & Planning Services Workplace Business Strategy Execution Rational Unified Process for SOA Central Service Registry Model key performance indicators across business process Web. Sphere Business Modeler Web. Sphere Service Registry Instantiate standards in application design Rational Software Architect Instantiate data standards & enable Data Governance Rational Data Architect 19

Getting Started – Managing the lifecycle of assets Developer Establish change management process for development Establish change management process for operations Rational Unified Process for SOA IT Executive Tivoli Unified Process Discover service for reuse / publish service Web. Sphere Service Registry and Repository Manage and track build time assets Rational Clear. Case Deployment Manager Security Manager © 2006 IBM Corporation Validate and authenticate user Record service configuration information Tivoli Change and Configuration Management Database Instantiate security policy Tivoli Federated Identity Manager Ensure signoff and create audit trail for change Rational Clear. Quest Tivoli Access Manager 20

Getting Started – Measuring effectiveness Business Executive IT Executive Operations Manager © 2006 IBM Corporation Monitor key performance indicators Central Service Registry Measure performance against business strategy milestones Web. Sphere Business Monitor Web. Sphere Service Registry Workplace Business Strategy Execution Measure project costs Rational Portfolio Manager Monitor performance against service level agreement Monitor and measure service performance Tivoli Service Level Adviser Tivoli Composite Application Manager 21

The Web. Sphere Service Registry and Repository provides value throughout the SOA lifecycle Web. Sphere Service Registry and Repository Publish Find Enrich Manage Govern Find Encourage Reuse Find and reuse services for building blocks for new composite applications. Govern Enable Governance Govern services throughout the service lifecycle © 2006 IBM Corporation Enrich Enhance Connectivity Enable dynamic and efficient interactions between services at runtime. Manage Help optimize service performance Enable enforcement of policies. Impact analysis 22

Web. Sphere Service Registry and Repository: Publish and Find Web. Sphere Service Registry and Repository ● Encourage Service Reuse 4 Publish and Find Services through all stages of SOA 4 Encourage greater leverage of services Publish (1) Search is performed for a service or mediation or policy to (re)use (4) WSRR performs validation and enforces policies (3) Service metadata artifact is published to the WSRR Development Tool (2) Development tools are used to create a new service metadata artifact © 2006 IBM Corporation Find Publish Find Enrich Manage Govern (7) The assembled service is (re) published using the Service Explorer during deployment. (5) Search is performed for a service or mediation or policy to use Assembly/ Admin Tool (6) The service is configured/wired and policy relationships are established. 23

WSRR Eclipse Plug-in ● Generalized Eclipse plug-in 4 Read and/or write access to WSRR 4 Selectively browse for WSRR meta-data 4 Import meta-data into a selected project § “Deep” import available to include nested resources 4 Publish meta-data to WSRR 4 Uses published Java interface ● Available for any Eclipse based component 4 Rational Application Developer 4 Web. Sphere Integration Developer 4 Portlet development environment 4 Other eclipse environment From the Resource Perspective © 2006 IBM Corporation 24

WSRR Eclipse Plug-in: Retrieve/Import © 2006 IBM Corporation 25

Service Lookup During Assembly Phase Dow. Jones WSDL Meta-Data: Finance 0. 01. . . WSRR NASDAQ WSDL Finance 0. 03. . . Category Cost. . . Metadata Repository Retrieve Import Publish © 2006 IBM Corporation 26

How it works (How it’s used): Operational Monitoring Interactions Performance and health alerts are generated based on operational data and recorded in the WSRR Web. Sphere Service Registry and Repository Publish Find Enrich Manage Performance data Govern t da l li Po na s cie 3) Retrieve monitoring policy for the message from the WSRR tio ra pe O Service Management Repositories a 4) Mediation records the operational data about the running service Message 1) During service invocation a message is received by the ESB Message Mediation 2) The ESB routes the message to an intermediate logging mediation or agent 5) The ESB then continues with the invocation of the service. Message Service © 2006 IBM Corporation 27

Web. Sphere Service Registry & Repository Governance GE E Organization Classification Versioning Role Action Governed Entity Documents Lifecycle State Promotion Concepts Collections Access Control Validation / Compliance IT Governance Procured New Version Operational Approved State Deployment IT Management Who changed it ? States When did they change it ? Transitions Audit History Trail Guards Audit Actions Life Cycle Model © 2006 IBM Corporation Impact Analysis Actions Specified What was done to it ? Approval Governed Entity Development What was changed ? State GE Process Published State Notification Collaboration Communication Socialization 28

Browser based console ● User role based browser perspectives ● Standards based service metadata documents support ● “Shredding” documents into meaningful and optimized organization ● Query 4 Canned and user wizard based search ● Classification 4 Helps Manage service metadata (more on this later under the Manage capability) © 2006 IBM Corporation 29

Web. Sphere Service Registry & Repository Integration with IBM SOA Products Web. Sphere Service Registry and Repository Publish RSA, RAD, WID Publish and Find Generic Client Using SOAP RAM Find Enrich Enterprise Service Bus Synchronize with Mediations based Build. Time on WSRR Lookup Manage Process Server Govern Tivoli CCMDB ITCAM for SOA Mediations based Extends to. ITIL Service Health on WSRR Lookup Change Mgmt information Publish and Find © 2006 IBM Corporation 30

Rational Asset Manager - RAM ● Asset Consumption 4 Asset Search via Web client and Eclipse 4 Asset Subscriptions via Web client 4 Asset download via Web client and Eclipse ● Asset Creation 4 Asset packaging via Web client and Eclipse 4 Asset submission for review and approval ● Asset Usage and Reporting 4 Asset comments, discussions, ratings and user tagging 4 Asset Repository metrics by download, state, type, teamspace and history ● Asset Governance Operations 4 Define review boards 4 Review state notification ● Adminstration Operations © 2006 IBM Corporation 31

RAM – Integrations ● Clear. Quest – submit a change request from an asset details ● Clear. Case – store and download versioned assets in Clear. Case ● Web. Sphere Service Registry and Repository: 4 Federated search of deployed WSRR Services from RAM search 4 Retrieve service artifacts for usage as artifact in RAM service asset. 4 Exchange Categorizations between RAM and WSRR 4 Ensure consistent Access Controls for RAM and WSR 4 Link Asset ID and version with WSRR deployed Service ID and version ● Rational Method Composer: 4 Customize out of the box RAM process ● Eclipse Based clients 4 Search, Download and extract assets into Eclipse Workspaces © 2006 IBM Corporation 32

What the Analysts Are Saying “Half of all companies and 77% of large enterprises reported that they are or will be using SOA by the end of 2005. Why? Evidence is mounting that SOA provides real benefits for business integration and flexibility. ” Real-World SOA: SOA Platform Case Studies, Forrester Research, Inc. , September 2005 CIOs continue to struggle to align business and IT in meaningful, measurable ways. More effective IT governance processes and tools are becoming top priorities among businesssavvy CIOs. Five Ways the Rise of IT Governance Will Change How Enterprises Buy IT, Summit Strategies, December 2005 In 2006, lack of working governance mechanisms in midsize-to-large (greater than 50 services) post-pilot SOA projects will be the most common reason for project failure (0. 8 probability). Management Update: Predicts 2006: The Strategic Impact of SOA Broadens, Gartner, Inc. , Jess Thompson, Yefim V. Natis, Massimo Pezzini, Paolo Malinverno, November 23, 2005 With the widespread adoption of SOA, the challenges associated with SOA projects are emerging. SOA governance isn't optional — it's imperative. Without it, return on investment will be low and every SOA project out of pilot phase will be at risk. Service-Oriented Architecture Craves Governance, Gartner, Inc. , Paolo Malinverno, January 20, 2006 © 2006 IBM Corporation 33

Governance is not just about compliance – it is an enabler of business value ● With the right focus, support and funding, it can be an enabler by 4 Facilitating reuse 4 Prioritizing spending 4 Reducing costs 4 Setting the technology direction 4 Subsidizing enterprise-value efforts like Service-Oriented Architecture © 2006 IBM Corporation 34