View
223
Download
1
Tags:
Embed Size (px)
Citation preview
© 2006 IBM Corporation
IBM Software Group
SOA Governance
© 2006 IBM Corporation 2
Agenda● Why SOA Governance ?
● IBM Products and Solution
© 2006 IBM Corporation 3
Service Oriented Architecture (SOA) is a business-centric IT architectural approach that supports integrating your business as linked, repeatable business tasks, or services. SOA helps users build composite applications, which are applications that draw upon functionality from multiple sources within and beyond the enterprise to support horizontal business processes
IBM’s definition of SOA – it’s about the business
A more complete discussion of these definitions and related concepts is found IBM SOA Foundation: An Architectural Introduction and Overviewhttp://www-128.ibm.com/developerworks/webservices/library/ws-soa-whitepaper/
© 2006 IBM Corporation 4
Service-Oriented EnterpriseBUSINESS DOMAIN
Business Service #1
Business Service #2 Business
Service #4
Business Service
#5
IT DOMAIN
Business Service #4
Business Service #3
Business Service
#6 Business Service
#5
Business Process #2
Business Service #3
Business Service
#4 Business Service
#5
Business Service #3
Business Service #7
Business Process #1
Re-usable Business Services
IT Service #1
IT Service #2
IT Service #3
Business Service #3
IT Service #2
IT Service #4
IT Service #3
Business Service #5
IT Service #2
IT Service #3
Re-usable IT Services
© 2006 IBM Corporation 5
3. LoB’s increase use of service / quality
suffers
A scenario on the importance of SOA governance
1. Provide acurrency service
that fills a specific LoB need
CurrencyConversion
Service
AccountingDept.
App. 1 App. 2
5. Fix works temporarily but problem
reappears
1. Provide acurrency service
that fills a specific LoB need
CurrencyConversion
Service
AccountingDept.
App. 1 App. 2
2. Other LoB’s start using the
service
Sales
Order Fulfillment Purchasing
Legal
4. Service is fixed at
provider’s expense
x
x
x
x
xx
6. Maintenance costs soar /
providerends service
X
X
X
X
XX
* Scenario from “Introduction to SOA Governance” by Bobby Woolf
© 2006 IBM Corporation 6
The Journey to SOA is filled with potholes
● Most organizations are implementing SOI not SOA
● SOA is largely an IT effort, LoB is not in
● Without Senior IT endorsement, many SOA efforts are focused on product selection, i.e., Shelf ware
● Funding to support Enterprise SOA is scarce or non-existent
● With no oversight comes no reuse and no relevance
● Oversight mechanisms lack teeth; projects evade the processes
● Inconsistent standards, drive inconsistent methodology, competing tools, and a lack of skilled resources
● Organizations are replacing silo’d applications with silo’d SOA
© 2006 IBM Corporation 7
Currency Service
A scenario on the importance of SOA governance
Finance
LegalSales
PurchasingOrder
Fulfillment
1. All groups plana re-usable
currency service
2. Service defined that meets
everyone’s needs
3. Service enabledto be available
to all LOBs
4. Success metrics defined, monitored to confirm service
scalability
© 2006 IBM Corporation 8
14 Critical Processes That Constitute an Effective SOA Governance Model Implementation
Service PlanningService
PlanningService
ModelingService
ModelingService
ImplementationService
ImplementationService
ManagementService
Management
Define Service Focus Process
Assemble Services Process
Deploy Services Process
Test Services Process
Design Services Process
Manage Service Levels Process
Manage Service Security Process
Manage Service Change Process
Manage Quality of Service Process
Specify Services Process
Realize ServicesProcess
Identify Services Process
Define Service Funding Process
Identify Service Owners Process
By effectively establishing governance mechanisms in these 14 areas, clients can address these common challenges:
Establishing decision rights
Defining high value business services
Managing the lifecycle of assets
Measuring effectiveness
© 2006 IBM Corporation 9
Different Aspects of Governance
There are different aspects of Governance, There are different aspects of Governance, based on the process governedbased on the process governed
SOA GovernanceSOA Governance is an extension is an extensionof IT Governanceof IT Governance
SOA Governance
IT Governance
Corporate Governance
● service funding
● service ownership
● service creation
● service reuse
● composite application design
SOA Governance:SOA Governance:examples of governed processesexamples of governed processes
● requirements management
● portfolio management
● change management
● data design
● architectural design
● release management
IT Governance:IT Governance:example of governed processesexample of governed processes
© 2006 IBM Corporation 10
Empowering development teamsto deliver the “A” in SOA
Solution Overview: Service Lifecycle Management
SOA Governance Method
Infrastructure& Management
in Support of SOA
Service Development & Delivery
Management
Process design & implementation expertise based on the market’s leading solutions delivery platform
© 2006 IBM Corporation 11
Service Lifecycle Management is essential in the realization of SOA Governance
SOA Lifecycle
Infrastructure and Management
In Support of SOA
Monitor and control operational policies
Service Development and Delivery Management
Enforce, execute, automate process and policies
SOA Governance Method
Establish Process and Policies
SOA Governance
Service Lifecycle Management
© 2006 IBM Corporation 12
IBM SOA Governance Method
Establish the Governance Need• Document and validate business strategy for SOA and IT• Assess current IT and SOA capabilities• Define/Refine SOA vision and strategy• Review current Governance capabilities and arrangements• Layout Governance plan
Define the Governance Approach• Define/modify Governance Processes• Design policies and enforcement mechanisms• Identify success factors, mechanisms• Identify owners and funding model• Charter/refine SOA Center of Excellence• Design Governance IT infrastructure
Deploy the Governance Model Incrementally• Deploy Governance mechanisms• Deploy Governance IT infrastructure• Educate and deploy on expected behaviors and practices• Deploy policies
Monitor and Manage the Governance Processes • Monitor compliance with policies• Monitor compliance with governance arrangements• Monitor IT effectiveness metrics
© 2006 IBM Corporation 13
● Establishing decision rights
● Defining high value business services
● Managing the lifecycle of assets
● Measuring effectiveness
SOA Governance Challenges : Applying the SOA Governance Life Cycle
© 2006 IBM Corporation 14
Getting Started – Establishing decision rights
Determine business strategy that leverages
SOABusinessExecutive
Assess readiness for SOA
IT Executive
Assess current governance approach
SOA Governance and Management
Method
Determine governance plan
Rational Method Composer
SOA Assessment Services
SOA Assessment Services
© 2006 IBM Corporation 19
Getting Started – Defining high value business services
Document standards and policies
Rational RequisitePro
Document business strategy milestones
Workplace Business Strategy Execution
Model key performance indicators across business process
WebSphere Business Modeler
Business / System Analyst
BusinessExecutive
Identify key performance indicators
Identify metrics
IT Executive
Software Architect
Data Architect
Instantiate data standards & enableData Governance
Rational Data Architect
Instantiate standards in application design
Rational Software Architect
Define development process
Rational Unified Process for SOA
Charter Center of Excellence
Center of Excellence Services
Strategy & Planning Services
Strategy & Planning Services
Central Service Registry
WebSphere Service Registry
© 2006 IBM Corporation 20
Getting Started – Managing the lifecycle of assets
Discover service for reuse / publish service
WebSphere Service Registry and Repository
Ensure signoff and create audit trail for
changeRational
ClearQuest
Security Manager
Developer
Deployment Manager
Validate and authenticate user
Tivoli Federated Identity Manager
Instantiate security policy
Tivoli Access Manager
IT ExecutiveEstablish change
management process for development
Rational Unified Process for SOA
Establish change management process
for operations
Tivoli Unified Process
Manage and track build time assets
Rational ClearCase
Record service configuration informationTivoli Change and
Configuration Management Database
© 2006 IBM Corporation 21
Getting Started – Measuring effectiveness
Monitor performance against service level
agreement
Tivoli Service Level Adviser
Measure performance against business
strategy milestones
Workplace Business Strategy Execution
Monitor and measure service performance
Tivoli Composite Application Manager
Operations Manager
BusinessExecutive
Monitor key performance indicators
Measure project costs
IT ExecutiveRational Portfolio
Manager
WebSphere Business Monitor
Central Service Registry
WebSphere Service Registry
© 2006 IBM Corporation 22
The WebSphere Service Registry and Repository provides value throughout the SOA lifecycle
WebSphere Service Registry and Repository
Publish Find Enrich GovernManage
Encourage ReuseFind and reuse services for building blocks for new composite applications.
Encourage ReuseFind and reuse services for building blocks for new composite applications.
Enhance ConnectivityEnable dynamic and efficient interactions between services at runtime.
Enhance ConnectivityEnable dynamic and efficient interactions between services at runtime.
Enable GovernanceGovern services throughout the service lifecycle
Enable GovernanceGovern services throughout the service lifecycle
Publish Find
Enrich
Govern Manage
Help optimizeservice performanceEnable enforcement of policies. Impact analysis
Help optimizeservice performanceEnable enforcement of policies. Impact analysis
© 2006 IBM Corporation 23
WebSphere Service Registry and Repository: Publish and Find
● Encourage Service Reuse Publish and Find Services through all stages of SOA Encourage greater leverage of services
Development Tool
Development Tool
Assembly/AdminTool
Assembly/AdminTool
(7) The assembled service is (re) published using the Service Explorer during deployment.
(7) The assembled service is (re) published using the Service Explorer during deployment.
(1) Search is performed for a service or mediation or policy to (re)use
(2) Development tools are used to create a new service metadata artifact
(3) Service metadata artifact is published to the WSRR
(6) The service is configured/wired and policy relationships are established.
(6) The service is configured/wired and policy relationships are established.
(5) Search is performed for a service or mediation or policy to use
(5) Search is performed for a service or mediation or policy to use
(4) WSRR performs validation and enforces policies
FindPublish
Enrich GovernManagePublish Find
WebSphere Service Registry and Repository
© 2006 IBM Corporation 24
WSRR Eclipse Plug-in
● Generalized Eclipse plug-in Read and/or write access to WSRR Selectively browse for WSRR meta-data Import meta-data into a selected project
“Deep” import available to include nested resources Publish meta-data to WSRR
Uses published Java interface
● Available for any Eclipse based component Rational Application Developer WebSphere Integration Developer Portlet development environment Other eclipse environment
From the Resource Perspective
© 2006 IBM Corporation 25
WSRR Eclipse Plug-in: Retrieve/Import
© 2006 IBM Corporation 26
Service Lookup During Assembly Phase
WSRRWSRR
Meta-Data:
CategoryCost...
Finance0.01...
Finance0.03...
MetadataRepository
NASDAQWSDL
DowJonesWSDL
Retrieve
Import
Publish
© 2006 IBM Corporation 27
How it works (How it’s used): Operational Monitoring Interactions
Publish Find Enrich GovernManage
WebSphere Service Registry and Repository
Message
1) During service invocation a message is received by the ESB
1) During service invocation a message is received by the ESB
Me
ssa
ge
2) The ESB routes the message to an intermediate logging mediation or agent
2) The ESB routes the message to an intermediate logging mediation or agent
Service Management Repositories
3) Retrieve monitoring policy for the message from the WSRR
3) Retrieve monitoring policy for the message from the WSRR
Mediation
4) Mediation records the operational data about the running service
4) Mediation records the operational data about the running service
Service
Message
Me
ssag
e
Performance and health alerts are generated based on operational data and recorded in the WSRR
Performance and health alerts are generated based on operational data and recorded in the WSRR
5) The ESB then continues with the invocation of the service.
Operatio
nal data
Performance data
Policies
© 2006 IBM Corporation 28
WebSphere Service Registry & Repository Governance
ActionsActions
State State
Classification
Versioning
Promotion
Approval
Validation / Compliance
Impact Analysis
SocializationSocialization
State
State
Process
Notification
Collaboration
Communication
Governed EntityGoverned Entity
GE
GEE
Concepts
Documents
Collections
Access ControlAccess Control
Organization
Role
Action
Governed Entity
Lifecycle State
Life Cycle ModelLife Cycle Model
Procured Approved
PublishedOperational
Specified
Development IT Governance
DeploymentNew Version
IT Management
States
Transitions
Guards
ActionsAudit
Audit
What was changed ?
What was done to it ?
Who changed it ?
When did they change it ?
Audit History Trail
© 2006 IBM Corporation 29
Browser based console
● User role based browser perspectives
● Standards based service metadata documents support
● “Shredding” documents into meaningful and optimized organization
● Query Canned and user wizard based search
● Classification Helps Manage service metadata (more on this
later under the Manage capability)
© 2006 IBM Corporation 30
WebSphere Service Registry & Repository Integration with IBM SOA Products
Publish Find Enrich GovernManage
WebSphere Service Registry and Repository
Process Server
Process Server
RAMRAM
Synchronize withBuildTime
Enterprise Service Bus
Enterprise Service Bus
Mediations based on WSRR Lookup
RSA, RAD, WID
RSA, RAD, WID
Publish and Find
Generic ClientUsing SOAP
Generic ClientUsing SOAP
Publish and Find
ITCAM for SOA
ITCAM for SOA
Service Health information
Tivoli CCMDB
Tivoli CCMDB
Extends toITIL Change Mgmt
Mediations based on WSRR Lookup
© 2006 IBM Corporation 31
Rational Asset Manager - RAM● Asset Consumption
Asset Search via Web client and Eclipse
Asset Subscriptions via Web client
Asset download via Web client and Eclipse
● Asset Creation Asset packaging via Web client and Eclipse
Asset submission for review and approval
● Asset Usage and Reporting Asset comments, discussions, ratings and user tagging
Asset Repository metrics by download, state, type, teamspace and history
● Asset Governance Operations Define review boards
Review state notification
● Adminstration Operations
© 2006 IBM Corporation 32
RAM – Integrations● ClearQuest – submit a change request from an asset details
● ClearCase – store and download versioned assets in ClearCase
● WebSphere Service Registry and Repository: Federated search of deployed WSRR Services from RAM search Retrieve service artifacts for usage as artifact in RAM service asset. Exchange Categorizations between RAM and WSRR Ensure consistent Access Controls for RAM and WSR Link Asset ID and version with WSRR deployed Service ID and version
● Rational Method Composer: Customize out of the box RAM process
● Eclipse Based clients Search, Download and extract assets into Eclipse Workspaces
© 2006 IBM Corporation 33
“Half of all companies and 77% of large enterprises reported that they are or will be using SOA by the end of 2005. Why? Evidence is mounting that SOA provides real benefits for
business integration and flexibility.” Real-World SOA: SOA Platform Case Studies, Forrester Research, Inc., September 2005
What the Analysts Are Saying
With the widespread adoption of SOA, the challenges associated with SOA projects are emerging. SOA governance isn't optional — it's imperative.
Without it, return on investment will be low and every SOA project out of pilot phase will be at risk.
Service-Oriented Architecture Craves Governance, Gartner, Inc., Paolo Malinverno, January 20, 2006
CIOs continue to struggle to align business and IT in meaningful,
measurable ways. More effective IT governance processes and tools are
becoming top priorities among business-savvy CIOs.
Five Ways the Rise of IT Governance Will Change How Enterprises Buy IT, Summit Strategies, December 2005
In 2006, lack of working governance mechanisms in midsize-to-large
(greater than 50 services) post-pilot SOA projects will be the most common reason for
project failure (0.8 probability).Management Update: Predicts 2006: The Strategic Impact of SOA
Broadens, Gartner, Inc., Jess Thompson, Yefim V. Natis, Massimo Pezzini, Paolo Malinverno,
November 23, 2005
© 2006 IBM Corporation 34
Governance is not just about compliance – it is an enabler of business value
● With the right focus, support and funding, it can be an enabler by
Facilitating reuse
Prioritizing spending
Reducing costs
Setting the technology direction
Subsidizing enterprise-value efforts like Service-Oriented Architecture