Welcome!

Weblogic Authors: Yeshim Deniz, Elizabeth White, Michael Meiner, Michael Bushong, Avi Rosenthal

Related Topics: Microservices Expo, Java IoT, IBM Cloud, Weblogic, Open Source Cloud, @CloudExpo

Microservices Expo: Article

Making Cloud a Reality for Enterprises via SOA Governance

Governance is the key for enterprises to successfully deliver applications in the cloud

Cloud computing is slowly gaining credibility and traction in the enterprise world. As giants such as Google and Amazon productize their massive cloud infrastructures, moving enterprise applications to the public cloud seems a more realistic possibility. The advantages of an enterprise application leveraging the public cloud sound like utopia - lowered total cost of ownership and overhead costs, ease of maintenance, inherent high availability and scalability that is built into the infrastructure. Yet when the theory of moving to the cloud is put into practice, the biggest hurdle that stalls the success of the transition is governance. This article analyzes its importance and the various aspects of governance in the realm of cloud computing.

Governance in the Cloud
Many organizations are reluctant to move forward with a cloud computing strategy because of justified concerns related to security, compliance and control. Without a doubt, information is the biggest strategic asset for any organization. The fear of compromise can throttle the transition of enterprise applications to the cloud. In the cloud, governance must be treated as a first-class citizen. The threats are greater and the stakes are higher when information is not in direct corporate oversight. Commitment to the rigors of governance will bring freedom in leveraging the advantages of the cloud paradigm.

Here are some of the key aspects to consider around governance in the cloud.

Answering the 4 Ws: Enterprises need to have fine-grained control to answer the 4 Ws:

  • WHO can access the application, data and resources
  • WHAT permissions a specific user has
  • WHERE is the application and the data
  • WHEN was the application accessed

To exercise this level of application control, it is mandatory to have a well-defined mechanism to define these security, auditing, and compliance policies. In addition, defining and managing policies should be decoupled from the development of the service and the underlying distributed cloud infrastructure so they can change independently of each other. For example, a new regulatory requirement may need to be enforced through a policy on an application. However, changes in the policy should not require rewriting the application. Also decoupling a policy allows it to be applied to multiple applications or services. While design and development of the policy should be decoupled from the application, the actual enforcement should be part and parcel of the actual application so there is a reduced chance of breach of contract. These seemingly contradictory requirements need to be met for successful governance of the enterprise application in the cloud.

  • Managing Service Level Agreements (SLAs): It is one thing to have raw computing power at your call and another to leverage it to meet service level agreements through peak application performance. This is an aspect of governance that is intensified with the transition to the cloud. Users move enterprise applications to the cloud with the hope of leveraging the infinite computing power of the distributed world. However, visibility into how the cloud is being leveraged to meet SLAs, whether they are indeed being met, and how easily the cloud can be set up to deliver on this are all requirements to consider as part of the governance of SLAs on the cloud. In addition to the infrastructure-level SLAs (CPU usage, memory utilization, etc.), business-level SLAs also need to be defined. For instance, your business SLA could define a response time for an order processing application. The order processing application can in turn be comprised of various intertwined distributed service interactions. It is critical to be able to manage the performance of the entire application and be application aware to dynamically deploy additional instances of services to meet these business SLAs.
  • Application Lifecycle Management: Lifecycle governance focuses on the entire lifecycle of an application or service, from design to development, to test to deployment and maintenance. It also involves assessing and managing change impact on operations and services. When you factor in the cloud, this involves end-to-end lifecycle management across distributed computing boundaries. This implies the need for very selective transparency of the underlying infrastructure for management of the enterprise application. Where exactly the application resides should not be visible while considering the processes around design and development of services. On the other hand, during phases in the lifecycle such as deployment and management, it should be possible to seamlessly leverage the power of the cloud without needing to figure which exact node or machine in the cloud the application needs to be deployed to or what the underlying software is at the node of execution.
  • Governance Body: In addition to ensuring you have the right tools in place to effectively deliver a secure, governed application in the cloud, it is important for the organization to establish a regulatory body. This is imperative in any organization that wants success with their SOA, even without the cloud paradigm. Factoring in the cloud makes the need for a regulatory body that much more important, as the parameters that affect the success of SOA become more complex. The regulatory body should be responsible for the success of governance; establishing guidelines, principles and processes; and foreseeing the overall enforcement of governance.

Governance is the key for enterprises to successfully deliver applications in the cloud. All aspects of lifecycle and operational governance assume a level of complexity when considered for the cloud. As the industry recognizes the need for governance as an enabler to successful adoption of the cloud, and the unique set of challenges associated with the cloud deployments, we see new offerings emerge across the spectrum. Considering the nascency of the market, most offerings address only a few of the aspects discussed in the previous section. It is imperative to consider a holistic approach to governance that addresses all aspects of it rather than just one or two criteria. To get an enterprise application up and running on the cloud, there is a need for opaqueness on the underlying infrastructure so that the users can focus on the business use that the enterprise application is meant to address.

Cloud platforms have emerged as the solution to this problem where the personnel associated with the application such as developers, business, operational and administrative users can focus on their specific use while the cloud platform leverages the power of the underlying distributed system. A cloud platform that provides comprehensive coverage of lifecycle and operational governance and addresses all the obstacles discussed in the earlier part of this article can be a powerful ally in making enterprise applications successful in leveraging the infinite computing power of the cloud.

More Stories By Mala Ramakrishnan

Mala Ramakrishnan is a Product Marketing Manager at TIBCO who manages outbound marketing functions across the SOA and BPM product lines. Previous to this, Mala head the Developer Strategy at TIBCO to drive demand generation and user adoption of TIBCO’s products. Mala has over 10 years experience in product development, management and marketing roles across a variety of software offerings ranging from network optimization to software security to mobile computing. She holds a Masters in Computer Science from Stanford University.

More Stories By Sriram Chakravarthy

Sriram Chakravarthy is Sr. Product Marketing Manager, Cloud Services at TIBCO. He has more then 10 years of experience in the designing and implementing of high performance messaging servers, integration and on-demand platforms. He has helped design scalable, high-performance middleware architecture for several large customers. Sriram has several patents filed in the distributed computing and Web Services space.

More Stories By Srini Vinnakota

Srini Vinnakota is Product Marketing Manager, SOA Governance at TIBCO Software. He has more than 6 years of experience in product management & marketing, product development, customer service, and account management in Enterprise Software (TIBCO Software, Siebel Systems), Digital Media (Sun Microsystems’ Research Labs), and Web 2.0 eCommerce (eBay). Over the years, he worked with customers from various industries such as Financial Services, Telecommunications, High-Tech, and Transportation. He has an MBA from the Kellogg School of Management and an MS (Computer Science) from the University of Illinois at Urbana-Champaign.

More Stories By Chris Nguyen

Chris Nguyen is group product marketing manager at Adobe. As a group product marketing manager on the Adobe Experience Manager team, he is responsible for go-to-market strategy and field readiness for Adobe Experience Manager’s cloud deployment product offerings. Prior to joining Adobe, Nguyen served as manager of product marketing for TIBCO Software’s Service Oriented Architecture platform, focusing on application development, governance, and integration and product management at BEA Systems (Oracle).

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@ThingsExpo Stories
SYS-CON Events announced today that B2Cloud will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. B2Cloud specializes in IoT devices for preventive and predictive maintenance in any kind of equipment retrieving data like Energy consumption, working time, temperature, humidity, pressure, etc.
SYS-CON Events announced today that NetApp has been named “Bronze Sponsor” of SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. NetApp is the data authority for hybrid cloud. NetApp provides a full range of hybrid cloud data services that simplify management of applications and data across cloud and on-premises environments to accelerate digital transformation. Together with their partners, NetApp em...
Elon Musk is among the notable industry figures who worries about the power of AI to destroy rather than help society. Mark Zuckerberg, on the other hand, embraces all that is going on. AI is most powerful when deployed across the vast networks being built for Internets of Things in the manufacturing, transportation and logistics, retail, healthcare, government and other sectors. Is AI transforming IoT for the good or the bad? Do we need to worry about its potential destructive power? Or will we...
SYS-CON Events announced today that SIGMA Corporation will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. uLaser flow inspection device from the Japanese top share to Global Standard! Then, make the best use of data to flip to next page. For more information, visit http://www.sigma-k.co.jp/en/.
Agile has finally jumped the technology shark, expanding outside the software world. Enterprises are now increasingly adopting Agile practices across their organizations in order to successfully navigate the disruptive waters that threaten to drown them. In our quest for establishing change as a core competency in our organizations, this business-centric notion of Agile is an essential component of Agile Digital Transformation. In the years since the publication of the Agile Manifesto, the conn...
SYS-CON Events announced today that Nihon Micron will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Nihon Micron Co., Ltd. strives for technological innovation to establish high-density, high-precision processing technology for providing printed circuit board and metal mount RFID tags used for communication devices. For more inf...
SYS-CON Events announced today that Suzuki Inc. will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Suzuki Inc. is a semiconductor-related business, including sales of consuming parts, parts repair, and maintenance for semiconductor manufacturing machines, etc. It is also a health care business providing experimental research for...
SYS-CON Events announced today that Daiya Industry will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Daiya Industry specializes in orthotic support systems and assistive devices with pneumatic artificial muscles in order to contribute to an extended healthy life expectancy. For more information, please visit https://www.daiyak...
The Internet giants are fully embracing AI. All the services they offer to their customers are aimed at drawing a map of the world with the data they get. The AIs from these companies are used to build disruptive approaches that cannot be used by established enterprises, which are threatened by these disruptions. However, most leaders underestimate the effect this will have on their businesses. In his session at 21st Cloud Expo, Rene Buest, Director Market Research & Technology Evangelism at Ara...
SYS-CON Events announced today that N3N will exhibit at SYS-CON's @ThingsExpo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. N3N’s solutions increase the effectiveness of operations and control centers, increase the value of IoT investments, and facilitate real-time operational decision making. N3N enables operations teams with a four dimensional digital “big board” that consolidates real-time live video feeds alongside IoT sensor data a...
Internet of @ThingsExpo, taking place October 31 - November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with 21st Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. The Internet of Things (IoT) is the most profound change in personal and enterprise IT since the creation of the Worldwide Web more than 20 years ago. All major researchers estimate there will be tens of billions devic...
Mobile device usage has increased exponentially during the past several years, as consumers rely on handhelds for everything from news and weather to banking and purchases. What can we expect in the next few years? The way in which we interact with our devices will fundamentally change, as businesses leverage Artificial Intelligence. We already see this taking shape as businesses leverage AI for cost savings and customer responsiveness. This trend will continue, as AI is used for more sophistica...
SYS-CON Events announced today that SourceForge has been named “Media Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. SourceForge is the largest, most trusted destination for Open Source Software development, collaboration, discovery and download on the web serving over 32 million viewers, 150 million downloads and over 460,000 active development projects each and every month.
SYS-CON Events announced today that DXWorldExpo has been named “Global Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Digital Transformation is the key issue driving the global enterprise IT business. Digital Transformation is most prominent among Global 2000 enterprises and government institutions.
SYS-CON Events announced today that Massive Networks, that helps your business operate seamlessly with fast, reliable, and secure internet and network solutions, has been named "Exhibitor" of SYS-CON's 21st International Cloud Expo ®, which will take place on Oct 31 - Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. As a premier telecommunications provider, Massive Networks is headquartered out of Louisville, Colorado. With years of experience under their belt, their team of...
SYS-CON Events announced today that Interface Corporation will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Interface Corporation is a company developing, manufacturing and marketing high quality and wide variety of industrial computers and interface modules such as PCIs and PCI express. For more information, visit http://www.i...
SYS-CON Events announced today that Mobile Create USA will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Mobile Create USA Inc. is an MVNO-based business model that uses portable communication devices and cellular-based infrastructure in the development, sales, operation and mobile communications systems incorporating GPS capabi...
While some developers care passionately about how data centers and clouds are architected, for most, it is only the end result that matters. To the majority of companies, technology exists to solve a business problem, and only delivers value when it is solving that problem. 2017 brings the mainstream adoption of containers for production workloads. In his session at 21st Cloud Expo, Ben McCormack, VP of Operations at Evernote, will discuss how data centers of the future will be managed, how th...
SYS-CON Events announced today that Ryobi Systems will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Ryobi Systems Co., Ltd., as an information service company, specialized in business support for local governments and medical industry. We are challenging to achive the precision farming with AI. For more information, visit http:...
SYS-CON Events announced today that MIRAI Inc. will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. MIRAI Inc. are IT consultants from the public sector whose mission is to solve social issues by technology and innovation and to create a meaningful future for people.