Does anybody have an idea what SOA Governance is all about? What is the difference (or correlation) between SOA Governance and IT Governance? and How can it be applied using SOA platforms available in the market?
Can a project built on SOA platform be successful without applying SOA Governance? How? I am talking here from a practical point of view.
SOA governance is a subset of IT governance where you focus on defining, delivering and enforcing IT governance rules using SOA. It is also organization wide, otherwise it is practically pointless except as an exercise.
IT Governance which is a subset of Corporate governance and should have at least a policy of providing Business Value in things that the company does.
Here's an example:
As you drill down things get more technical and actually easier to enforce.
SOA/IT/Corporate governance is basically analogous to the law makers (those who define the rules), the judge/police (those who enforce the rules), the rest of us (those who deliver within the rules).
See Service Oriented Architecture and SOA Governance for help.
Service-Oriented Architecture (SOA) governance is a concept used for activities related to exercising control over services in an SOA. SOA governance can be seen as a subset of IT governance which itself is a subset of Corporate governance. The focus is on those resources to be leveraged for SOA to deliver value to the business.
SOA needs a solid foundation that is based on standards and includes policies, contracts and service level agreements. The business is expected to be able to use services to build and change the organisations business process quickly. To do so, a degree of granularity in the services available will be required. Consequently an SOA increases the need for good governance as it will help assign decision-making authorities, roles and responsibilities and bring focus to the organisational capabilities needed to be successful.
Being an employee of a large enterprise, our SOA governance approach stewards the usage of internal standards such as leveraging a common message format, ensures that all WSDL produced meets security standards such as ensuring that all attributes have regular expressions attached to them for validation and aligns with our strategic business architecture.