William A Brown

1. William A Brown • brownaw@us.ibm.com • World Wide SOA Governance SGMM Lead • IBM Sr. Certified Executive Architect • Open Group Master Certified Architect • IBM GBS Enterprise Architecture & Technology Center of Excellence • World Wide SOA Center of Excellence • Lead Author of IBM’s SOA Governance and Management Method • Holder of 82 Patents or Patent Pending • 25 years of IT Experience

2. SOA Governance and The SOA Governance and Management Method (SGMM) The SOA CoE William A Brownbrownaw@us.ibm.com WW SOA Governance/SGMM Chief Architect SOA and Web Services Center of Excellence (CoE)

3. This presentation, SOA Governance and Management Method CoE Overview addresses several key areas: SOA Governance Overview The SOA Governance and Management Method The SOA Center of Excellence SOA CoE in Action – Case Study Additional IBM Internal Information - http://w3.tap.ibm.com/w3ki2/display/SOA/SOA Governance Sub-Community IBM SOA Governance and Management Global Business Services

4. SOA can be complex stuff.. But let’s not lose our heads. Seasoned: - to make fit by experience <a seasoned veteran>intransitive verb We are, after all, Seasoned Professionals

5. Principles Policies Guidelines Standards Method What & How do I tailor the model for individual projects Governance Processes Exception and Appeals Process Compliance Vitality Communication Governance Organizational Structure Governance Roles and Responsibilities Governance Foundational Building Blocks What Constitutes a Governance Model

6. SOA Governance Processes are specific to Governing the life cycle of Services SOA introduces new concepts not found in traditional IT Governance models Domain Ownership Service Funding Models Service Modeling Orchestration of Services Provisioning of Services Versioning of Services Implementation of Services SOA Governance should be built on or Extend IT Governance but.. SOA Governance will not replace IT Governance SOA Governance Processes

7. Compliance SOA Strategy Service Assembly Event Management & ServiceMonitoring Service Modeling Define Service Funding Service Testing Service Design Security Management Service Domain Owners Service Deployment Service Architecture Service Support Service Delivery Vitality Communication Service Discovery Service Transition Service Design Service Operation Managed by Monitored by Implemented by Principles, Policies, Standards & Procedures Governance Mechanisms Dashboards & Metrics Supported by Organizational Change Management Infrastructure & Tools Skills Exception/Appeals SOA Governance and Management Model SOA Vision Governed Processes Services Governed Processes Service Strategy Service Design Service Operation Service Transition ESB/Registry Repository Governed Processes

8. Vitality Governance Foundation Service Strategy Service Design Service Transition Service Operation Support & Management Compliance SOA Strategy Service Assembly Event Mgmt & Service Monitoring Mechanisms Service Modeling Communication Security Management Define Service Funding Service Design Organization Structure Service Testing Exception & Appeals Service Domain Owners Skills Service Support Service Architecture Service Deployment ESB/RR Service Opportunity Identification ESB/RR Service Inception Service Delivery ESB/RR Manage Service Metrics ESB/RRService Elaboration ESB/RR Service Construction ESB/RR Service Inception Infrastructure & Tools Principles, Policies, Standards ESB/RR Service Discovery ESB/RR Service Transition Direct Execute Control SOA Governance and Management Model – Component View

9. SOA Governance and Management Model -- Capabilities Model • SGMM Planning Assessment – Determines SOA Governance Maturity and identifies Capabilities. SGMM Capabilities Model is in alignment with CobiT V4.1

10. Essential for the realization of business benefits thru SOA Business Process Flexibility Business Agility Understanding of The Cost of SOA vs Benefits The Risk to Business and how to Mitigation How to Maintain the Quality of Services How to Ensuring Consistency of Services Effectiveness of your SOA Model Ability to Measure the right things at the right time A Clear Communication and Decision Making Process between Business and IT SOA Implementation Failure is certain without SOA Governance SOA Chaos is the result Why is SOA Governance Needed?

11. Implementation Introduces Risks.

12. What processes do we need to identify, develop, deploy and manage services? What standards do we need to establish and when? How do we Identify, develop, deploy, and manage services? How do we change our organization to gain the benefits of service orientation? Center of Excellence What metricsandkey performance indicators will we use? What can I reuse from my existing IT Governance Model? What is our SOA Vision and Strategy? How does the registry and repository work? How do we implement it? What other tools do we need? How do we unlock services from our existing applications? What base guidelines do we use to create our SOA ? Is there a reference model? SOA introduces a number of unique challenges requiring the targeted skills and capabilities a CoE will provide. The SOA CoE Makes SOA Success Someone's Responsibility A SOA CoE provides the dedicated subject matter team to address these challenges and affect the change necessary for a successful SOA Implementation.

13. Center of Excellence Center of Excellence (CoE) speeds SOA success The CoE delivers capabilities to address many SOA issues. It’s structure can be defined prescriptively to meet need and consolidate SOA activities. Knowledge: A CoE serves to supply the expertise to the organization for SOA implementation and execution Delivery: Enables successful delivery of your business strategy with establishment of technical resources. One Size Does Not Fit All Capabilities: • SOA Architecture Design and Customization • SOA Architecture Review • SOA Development Leadership • Tool installation, configuration and support • Education and Skills Transfer Support: • SOA Adoption • SOA Design • SOA Development • SOA Governance • SOA Management SOA on your terms and our expertise

14. What is the SOA Center of Excellence (CoE) The SOA Center of Excellence (CoE) is a cross-organization business and IT team that guides the process of meeting business objectives through SOA. • It is Not IT Governance or SOA Governance • It is the Center of Adoption, Change and Vitality of the SOA • Is Responsible for the Architecture’s • Vitality, Viability, Compliance • Drives Adherence to Policies and Standards • Drives Adherence to Business Goals and Direction • Helps Speed Time to Market • Reduces New Technology Risk • Provides thought leadership in portfolio prioritization • It is the implementation mechanism of SOA Governance • Directs Business Objectives to be Implemented • Members of the CoE Enforce the Governance Model • Implements the Governance Processes • IBM’s Opinion: • A CoE is highly desirable for implementing SOA governance. Our experience shows that the operation of an SOA CoE: • Increases the likelihood of SOA adoption across the enterprise • Increases the organization’s adherence to the SOA governance model

15. Center of Excellence Center of Excellence (CoE) Sample Mission Makes SOA success Someone's Responsibility Provide Project Support Provide direct project assistance to drive architecture and gain feedback on vitality & viability and harvest assets Provides Skills Transfer & Early Proof of Concepts Identify skills gaps and create development roadmaps Drive use of new technologies Socialize Architecture Communicate framework, best practices, assets, patterns, templates, recipes, methods and other blueprints Promotes Asset Adoption Manage service, service component, pattern, data re-use processes to reduce project risk and accelerate delivery Provide Architecture Vitality & Thought Leadership Continuously assess, refine and architecture framework and supporting assets based on internal & external influences • Conduct Architecture Reviews • Perform independent design and architecture reviews for key applications Provides Best Practice Policy & Procedures Provide expert resources to accelerate delivery of critical architecture practices Production Support Enable infrastructure teams toexecute on build/deploy, tuning, and metrics reporting

16. SOA CoE’s Sample Roles • Harvesting of Assets • Defines Documentation Standards • Identifies Project Level Artifacts • Generizes Project Level Artifacts • Identifies New and Updates Existing Best Practices • Provides a Artifacts Repository • Provides Expert SOA Skills and Resources • Project level SOA Leadership • Experience Development Resources • Experience Engagement Resources • Experience Best Practices Practitioners • Hands on Team Member Mentoring • Communication • Communicates the Role of the CoE • Communicates how to leverage the Architecture, How to Be compliant • Communicates Requirements for Processes • Exception and Appeals Process • Compliance • Vitality • Communication • Communicates Best Practices and Standards • Keeps the Organization Informed • Governance • Implements Governance Processes • Maintains Vitality • Delivers the Communication Plan - • Organization experience and successes • Processes and Approaches • Enforces Compliance • Maintains Standards • Maintains Rigor • Thought Leadership • Provides New Processes • Investigates New Technology • Sets Direction/Vision • Sets Standards • Defines Rigor • Delivers Education • Mentors the Organization

17. SOA CoE can drive many SOA Initiatives Governance Integration (SOI) BPM Education Tooling support and expertise Reference Architecture Service Modeling and Design (SOMA) Legacy Application Transformation to Services Organizational Change Service Development Positioned as a team of trusted advisors and SME’s to guide the SOA Journey Leads SOA Adoption SOA Center of Excellence

18. Center of Excellence How to Build the SOA CoE Building the SOA CoE 1. Understand the Current Environment 2. Define the CoE Mission and Vision 3. Define CoE Roles, Responsibilities and Mechanisms • Inputs • SOA Vision & Principles • Current Organization Assessment • Current IT Environment • Current Organization Description • Future Organization Design • Job Roles, Responsibilities, and Competencies • Outputs • CoE Mission and Vision • CoE Process Definition • CoE Job Roles, Responsibilities, Competencies • CoE Future Organizational Design • SOA CoE Education Plan • SOA CoE Mentoring Plan • SOA CoE Transition Plan 6. Identify CoE Educational Needs 4. Map Resources and Mechanisms to CoE Roles 5. Identify CoE Mentoring Needs 7. Identify CoE Processes 8. Define Education and Mentoring Plans 9. Define CoE Metrics 10. Create Transition Plan 11. Get Approval of Sponsor and Stakeholders

20. Business experts (on Rotation) Invited SOA /EA Architects & Leads SOA Board Manager SME’s. Lead SOA Architects (on Rotation) Chief Architect Chief Architect Business Relationship Directors Lead SOA Architects SOA Advisory Group ARB, PRB, Ser Ops RB SOA Exec Steering Committe Office of the Chief Architect or Architecture Office Maintaining the vitality and use of the SOA Maintaining the authority of the SOA Executes Day to Day SOA Operations Project Design Authorities or Project Team Authority Architecture Sponsors Enterprise Architects Solution Architects SOA CoE Mechanisms – Used to Implement the Responsibilities of the CoE • Ensure SOA solution designs comply with the architecture • Maintain the SO Architecture • Identifies new Technologies Standards, Best Practices • Set Direction • Prioritise Initiatives • Make Final Decisions • Advises Office of Chief Arch • Runs Reviews • Maintains Compliance SOA Project Teams – Implements SOA Projects • Uses the SO Architecture to best satisfy the project’s needs

21. Typical SOA CoE Structure Logical View Physical View Executive Steering Committee SOA CoE Board SOA CoE Executive Sponsor Business Service Champion SOA CoE Advisory Board LOB Stakeholders (Business & IT) Business Service Analyst Service Architect Service Designer/ Developer SOA CoE Board Director Information Data Modeler Project Manager Service Registrar PMO Service Tester Service Assembler

22. Proposed CoE (Logical View) IBM recommendation is to leverage the current organizational structures and its interaction with existing governance bodies in implementing the proposed SOA CoE ISLT Executives Business Verticals “C” Level Execs Executive Sponsor Sr. Director CoE ITPMO Director CoE Steering Committee Business Service Champion CoE Leadership Service owners and stakeholders CoE Core Team Service Registrar Service architect Marketing stakeholder/owner Senior Director CoE Finance stakeholder/owner Infrastructure specialist Business Relationship Director System QA Director Service security architect Director Enterprise Architect Service Developers IT stakeholder/Owner Operations stakeholder/owner Business Service Analyst Config/change mgt. specialist Director Infrastructure Director Application Dev. & Support System QA SME Service Testers Enterprise Architecture SME Application Dev. & Support SME Provides oversight Project specific

23. New roles Need based rotation Current roles at XYZ which need to be modified for SOA CoE The recommended End State CoE (Physical View) The recommended CoE builds on the existing IS governance structure and identifies specific roles for shared services governance Builds on ISLT Strategic Direction Thought Leadership Builds on TGB Expert Skills and Resources Asset Harvesting Represent lines of communication, not a reporting structure

24. Transition Roles The recommended Transitional State CoE (Physical View) The recommended CoE builds on the existing IT governance structure and identifies specific roles for shared services governance Builds on ISLT Strategic Direction Thought Leadership Builds on TGB Expert Skills and Resources Asset Harvesting Represent lines of communication, not a reporting structure

25. The CoE roles have been mapped to the existing roles and governing bodies at XYZ Recommended Roles Descriptions XYZ current Role Recommended changes in role for CoE None. Need to identify a senior IT executive for this role Champions the SOA within XYZ and provides guidance to Steering Committee IT Senior Director or above Executive Sponsor ‘C’ level business executives Sr. executives from business verticals Senior Director or above from various business verticals None. They will need to champion SOA in their LoBs Sr. director in IT, able to influence XYZ IT strategy Sr. Director CoE None. Needs to provide overall direction to CoE IT Senior Director or above Needs to have deep understanding of business and IT. Role must be filled by an individual highly respected by both the business and IT A linchpin role in SOA transformation. Senior Executive from business verticals Senior Director or above from a business vertical Business Service Champion Business Relationship Directors Manager or above from a business vertical May be a virtual member of the SOA CoE. Key business touch point for the Business Service Champion CoE Core team Subject Matter Experts from various IT domains as needed Managers or their team members from various IT teams Draw from existing teams, based on project needs

26. The CoE roles have been mapped to the existing roles and governing bodies at XYZ-2 Recommended changes in role for CoE Recommended Roles Descriptions XYZ current Role Owns the SOA reference architecture and provides architectural oversight during service conceptualization Manager or similar role from EA group Service Architect None Registrar to register services and maintain versioning Service Registrar None Create a new role/train-possibly in the EA group Work with service architects to identify and develop service opportunity that will enable reuse and reduce code redundancy Service Developer Draw from the existing development team Assembles services from existing services to realize new services Service Assembler Draw from solution integration team Identify and define service assembler role. Responsible for provisioning of services. Establishes necessary environments for SOA development, testing and production Infrastructure specialist Draw from infrastructure team Draw from infrastructure team Service support specialist Provides service support Draw from the support team Train and educate the current support team to provide service support

27. The CoE roles have been mapped to the existing roles and governing bodies at XYZ-3 Recommended Roles Descriptions XYZ current Role Recommended changes in role for CoE Business knowledge and decomposition of business processes to identify service opportunities BSA/BA Business Service Analyst Provide training to the the BSAs/BAs Conducts unit testing of services based on functional requirements Train and educate the current testing team Service Tester Draw from testing team Service Security architect Performs critical evaluation and selection of the security solution. Implements SOA security standards & processes Draw from infrastructure team Draw from infrastructure team Configuration and change management specialist Manages service change and versioning Draw from infrastructure team Draw from infrastructure team

28. Center of Excellence Executive SOA CoE Roles and Responsibilities

29. Center of Excellence Core SOA CoE Roles and Responsibilities

30. Center of Excellence Core SOA CoE Roles and Responsibilities (Cont’d)

31. Center of Excellence Core SOA CoE Roles and Responsibilities (Cont’d)

32. Center of Excellence Rotational CoE Roles and Responsibilities

33. Center of Excellence Additional CoE Roles and Responsibilities

34. Large South American Telecommunications Company Case Studies

35. Teleco’s Need • Starting down the SOA Path • Looking for direction and guidance for the Organization • Create a SOA CoE to drive SOA Adoption across the enterprise • Drive Tooling Identification and Support • Governance • Reference Architecture • Service Modeling • Development • Legacy Transformation

36. IB/Ops IB/AM PCB IES CoE CoE CoE CoE Our recommended approach for the SOA Governance Model and CoE is a hybrid Decentralized “You’re on your own” Hybrid “We’re all in this together” Centralized“We’ll take care of it for you” GTO GTO GTO CoE IB/Ops IB/AM PCB IES CoE IB/Ops IB/AM PCB IES App Dev App Dev App Dev Inf Dev App Dev App Dev App Dev Inf Dev App Dev App Dev App Dev Inf. Dev IB/Ops IB/AM PCB IES • LOBs drive their own SOA CoEs to manage their SOA projects • Centralized coordination with CoE expertise augmenting LoB execution • LoB building application function with CoE providing SOA development and enablement Pros • Maximum LoB autonomy and flexibility • Services are highly customized to LoB • Least amount of governance and coordination required • Maximum control over governance and decision making process • Significantly reduces duplication of resources • All LoBs benefit and SOA expertise becomes a shared service • Knowledge and resources are leveraged across the organization • Uniform governance approach promotes delivery consistency through common training / methodology usage • Hybrid approach was extremely effective in Asset Management Cons • Likely outcome no unified SOA vision bank-wide • Significant budget / resource duplication • Inconsistent approach cross LoBs • Sustains silo mentality • Not all LoBs will benefit from SOA • Service development redundancy • Cultural impact of the hybrid model will take time to permeate through the organization • Requires commitment by LoBs • Takes longer to establish then the decentralized model • Severely limits LoB autonomy and flexibility • May take longer to expose services and level of customization is controlled • LoBs loose control over prioritization and associated resource deployment decisions • Centralized model slows flow of knowledge from CoE out to the LoBs

37. The Executive SOA CoE will have the following roles and responsibilities • Executive SOA CoE • Liaison to SOA Steering Team • Define Enterprise SOA Vision & Strategy • Establish Enterprise Goals & Set Direction • Define Enterprise SOA Governance Model • Define & Maintain Enterprise SOA Ref Arch • Define Enterprise SOA Standards • Advocate for SOA Initiatives • Enterprise SOA Education and Training • SOA Tool Recommendations • Enterprise SOA Communications • Share Best Practices & Lessons learned • Conduct SOA High Level Compliance Reviews • SOA Coaching and Mentoring SOA DNA Strategy & PMO Yoav Intrator Architecture Stefan Puehl

38. The Executive CoE will build the foundation and create a high level framework • The foundation and high level framework will consist of; • A Governance Model • Processes • Standards • Policies • Architecture • Training • Communication Executive SOA COE Responsibilities: Enterprise SOA Vision and Strategy, SOA Goals and Direction

39. The Country SOA CoE will have the following roles and responsibilities. • Roles • Architects • Developers • Business Analyst • Project Management • Database Administrators • Business Process Modelers • Responsibilities • Conduct Design and Solution Compliance Reviews • Harvest Assets and Present Best Practices to the Executive SOA CoE • Stop “SOA Chaos” or runaway services • Responsibilities • Design, Develop, Implement and Manage Country Solutions Based on the Executive SOA CoE’s Reference Architecture, Standards, Guidelines and Processes • Comply and adhere to the Executive SOA CoE’s Governance Model • Provide technical assistance, thought leadership, education and mentoring to the SOA development efforts

40. The Executive SOA CoE will provide direction and thought leadership to the Country SOA CoE’s

41. Identified key themes for communication strategy specific to MGB and a framework for executing the plan Communication Themes • SOA will improve ability to respond to MGB business needs and improve system agility, enabling improved customer experience • Standardization and reuse of services e.g. Minutes of Use service can be leveraged across channels/applications • SOA will help reduce project delivery cycles and reduce complexity, leading to increased throughput and higher profits • Use of SOA concepts like Service Brokering, can lead to better integration and reduced complexity • SOA adoption using CoE as the umbrella organization will aid growth of adynamic organization • Will aid in empowerment and associate satisfaction • SOA adoption will help institutionalizing service orientation and standards, leading tohigher standards of excellence • Better monitoring, improving compliance, leveraging best practices from across the industry The framework identified the key stakeholder, the proposed messages, message owners and feedback mechanisms Communication themes mapped to the client’s business vision and IT goals

42. Developed a Transition Plan that Recommended Key Elements Sept 07 Oct 07 Nov ‘07 Dec ‘07 Jan ‘08 Feb. ‘08 Mar ‘08 Ramp up MGB should focus on putting the SOA program in motion Build and Operationalize a CoE Training: • MGB needs to develop capabilities and skills around SOA • Leverage rapid self-study and classroom to best meet each learning requirement Build the SOA Governance Model Identify Tools • Building blocks MGB should have building blocks in place for governance and architecture Implement Tools Like Registry and Repository Identify Pilot Pilot Complete Define KPIs and performance measures Service realization Identification, development and deployment of SOA services Collect & Report Metrics Communication: • focus on creating awareness about SOA • create positive perception for CoE/SOA Transition Management Execute Communications Plan Develop & deliver training per plan Manage MGB stakeholders per plan

43. Identified Training Objectives, Stakeholders and a Delivery Framework and Timeline to speed the SOA Adoption Training objectives • Prepare relevant users to adapt to the services oriented environment within the bank with minimal impact to essential business operations • Develop SOA skill base with in the SOA CoE and throughout the Enterprise • Development skills • Architectural Skills • Business process skills • Service modeling skills • Transform the bank from a project driven focus to a shared component focus • Strengthen the linkage between business and IT as it relates to identification and development of initiatives with a technology component to meet business goals Relevant courses were identified for each of the stakeholders along with the delivery mechanisms Proposed timeline

44. Great Success!!!

45. SOA Gov and SOA CoE Lessons Learned • Lesson #1 – “C-level” Backing Across the Board • SOA Governance absolutely requires buy-in and active support from the CxO level. • Lack of real “C-level” understanding, commitment, and active support for SOA leaves governance efforts impotent • CxOs can ensure that SOA stays center stage • Leadership absolutely must participate in the early stages of governance • Lesson #2 – Establish SOA Funding Model for the Long Term • there will need to be resources dedicated to SOA. • Understaffing SOA Governance or the COE as a token nod to their importance is an SOA killer. • Funding for projects must be linked to the governance processes • A creative model that rewards the LOB for serving the enterprise at large is essential. • Lesson #3 – Commitment to Roles, Responsibilities, and Resources • some dedicated SOA resources will be necessary • enable enough key resources to make governance effective. • Lesson #4 – Get the Message Out • Involve some folks (S&C) skilled in formal communication and education campaigns. • Do some SOA evangelist work • The COE’s role(s) must be understood, documented, and propagated • Collect and Publish Metrics • Lesson #5 – Be Ready for SOA • Take the time to make an impartial evaluation of readiness and start at the right level. • significant project oversight and a deep commitment to SOA aspects is required. • Involve some Change experts from the beginning

46. More Information • Learn more about SOA Governance • Download whitepapers • Description of SOA Governance and Best Practices • Outline of the Process • SOA Governance & CoE Implementation Case Studies • Download Rational Method Composer SOA Governance Plug Inibm.com/soa/gov

47. Thai Hindi Gracias Traditional Chinese Spanish Russian Thank You Questions? Obrigado Brazilian Portuguese Arabic Danke Grazie Merci German Italian French Simplified Chinese Tamil Korean Japanese