Welcome!

Weblogic Authors: Yeshim Deniz, Elizabeth White, Michael Meiner, Michael Bushong, Avi Rosenthal

Related Topics: Microservices Expo, Java IoT, IBM Cloud, Weblogic, Open Source Cloud, @CloudExpo

Microservices Expo: Article

Making Cloud a Reality for Enterprises via SOA Governance

Governance is the key for enterprises to successfully deliver applications in the cloud

Cloud computing is slowly gaining credibility and traction in the enterprise world. As giants such as Google and Amazon productize their massive cloud infrastructures, moving enterprise applications to the public cloud seems a more realistic possibility. The advantages of an enterprise application leveraging the public cloud sound like utopia - lowered total cost of ownership and overhead costs, ease of maintenance, inherent high availability and scalability that is built into the infrastructure. Yet when the theory of moving to the cloud is put into practice, the biggest hurdle that stalls the success of the transition is governance. This article analyzes its importance and the various aspects of governance in the realm of cloud computing.

Governance in the Cloud
Many organizations are reluctant to move forward with a cloud computing strategy because of justified concerns related to security, compliance and control. Without a doubt, information is the biggest strategic asset for any organization. The fear of compromise can throttle the transition of enterprise applications to the cloud. In the cloud, governance must be treated as a first-class citizen. The threats are greater and the stakes are higher when information is not in direct corporate oversight. Commitment to the rigors of governance will bring freedom in leveraging the advantages of the cloud paradigm.

Here are some of the key aspects to consider around governance in the cloud.

Answering the 4 Ws: Enterprises need to have fine-grained control to answer the 4 Ws:

  • WHO can access the application, data and resources
  • WHAT permissions a specific user has
  • WHERE is the application and the data
  • WHEN was the application accessed

To exercise this level of application control, it is mandatory to have a well-defined mechanism to define these security, auditing, and compliance policies. In addition, defining and managing policies should be decoupled from the development of the service and the underlying distributed cloud infrastructure so they can change independently of each other. For example, a new regulatory requirement may need to be enforced through a policy on an application. However, changes in the policy should not require rewriting the application. Also decoupling a policy allows it to be applied to multiple applications or services. While design and development of the policy should be decoupled from the application, the actual enforcement should be part and parcel of the actual application so there is a reduced chance of breach of contract. These seemingly contradictory requirements need to be met for successful governance of the enterprise application in the cloud.

  • Managing Service Level Agreements (SLAs): It is one thing to have raw computing power at your call and another to leverage it to meet service level agreements through peak application performance. This is an aspect of governance that is intensified with the transition to the cloud. Users move enterprise applications to the cloud with the hope of leveraging the infinite computing power of the distributed world. However, visibility into how the cloud is being leveraged to meet SLAs, whether they are indeed being met, and how easily the cloud can be set up to deliver on this are all requirements to consider as part of the governance of SLAs on the cloud. In addition to the infrastructure-level SLAs (CPU usage, memory utilization, etc.), business-level SLAs also need to be defined. For instance, your business SLA could define a response time for an order processing application. The order processing application can in turn be comprised of various intertwined distributed service interactions. It is critical to be able to manage the performance of the entire application and be application aware to dynamically deploy additional instances of services to meet these business SLAs.
  • Application Lifecycle Management: Lifecycle governance focuses on the entire lifecycle of an application or service, from design to development, to test to deployment and maintenance. It also involves assessing and managing change impact on operations and services. When you factor in the cloud, this involves end-to-end lifecycle management across distributed computing boundaries. This implies the need for very selective transparency of the underlying infrastructure for management of the enterprise application. Where exactly the application resides should not be visible while considering the processes around design and development of services. On the other hand, during phases in the lifecycle such as deployment and management, it should be possible to seamlessly leverage the power of the cloud without needing to figure which exact node or machine in the cloud the application needs to be deployed to or what the underlying software is at the node of execution.
  • Governance Body: In addition to ensuring you have the right tools in place to effectively deliver a secure, governed application in the cloud, it is important for the organization to establish a regulatory body. This is imperative in any organization that wants success with their SOA, even without the cloud paradigm. Factoring in the cloud makes the need for a regulatory body that much more important, as the parameters that affect the success of SOA become more complex. The regulatory body should be responsible for the success of governance; establishing guidelines, principles and processes; and foreseeing the overall enforcement of governance.

Governance is the key for enterprises to successfully deliver applications in the cloud. All aspects of lifecycle and operational governance assume a level of complexity when considered for the cloud. As the industry recognizes the need for governance as an enabler to successful adoption of the cloud, and the unique set of challenges associated with the cloud deployments, we see new offerings emerge across the spectrum. Considering the nascency of the market, most offerings address only a few of the aspects discussed in the previous section. It is imperative to consider a holistic approach to governance that addresses all aspects of it rather than just one or two criteria. To get an enterprise application up and running on the cloud, there is a need for opaqueness on the underlying infrastructure so that the users can focus on the business use that the enterprise application is meant to address.

Cloud platforms have emerged as the solution to this problem where the personnel associated with the application such as developers, business, operational and administrative users can focus on their specific use while the cloud platform leverages the power of the underlying distributed system. A cloud platform that provides comprehensive coverage of lifecycle and operational governance and addresses all the obstacles discussed in the earlier part of this article can be a powerful ally in making enterprise applications successful in leveraging the infinite computing power of the cloud.

More Stories By Mala Ramakrishnan

Mala Ramakrishnan is a Product Marketing Manager at TIBCO who manages outbound marketing functions across the SOA and BPM product lines. Previous to this, Mala head the Developer Strategy at TIBCO to drive demand generation and user adoption of TIBCO’s products. Mala has over 10 years experience in product development, management and marketing roles across a variety of software offerings ranging from network optimization to software security to mobile computing. She holds a Masters in Computer Science from Stanford University.

More Stories By Sriram Chakravarthy

Sriram Chakravarthy is Sr. Product Marketing Manager, Cloud Services at TIBCO. He has more then 10 years of experience in the designing and implementing of high performance messaging servers, integration and on-demand platforms. He has helped design scalable, high-performance middleware architecture for several large customers. Sriram has several patents filed in the distributed computing and Web Services space.

More Stories By Srini Vinnakota

Srini Vinnakota is Product Marketing Manager, SOA Governance at TIBCO Software. He has more than 6 years of experience in product management & marketing, product development, customer service, and account management in Enterprise Software (TIBCO Software, Siebel Systems), Digital Media (Sun Microsystems’ Research Labs), and Web 2.0 eCommerce (eBay). Over the years, he worked with customers from various industries such as Financial Services, Telecommunications, High-Tech, and Transportation. He has an MBA from the Kellogg School of Management and an MS (Computer Science) from the University of Illinois at Urbana-Champaign.

More Stories By Chris Nguyen

Chris Nguyen is group product marketing manager at Adobe. As a group product marketing manager on the Adobe Experience Manager team, he is responsible for go-to-market strategy and field readiness for Adobe Experience Manager’s cloud deployment product offerings. Prior to joining Adobe, Nguyen served as manager of product marketing for TIBCO Software’s Service Oriented Architecture platform, focusing on application development, governance, and integration and product management at BEA Systems (Oracle).

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@ThingsExpo Stories
"We've been engaging with a lot of customers including Panasonic, we've been involved with Cisco and now we're working with the U.S. government - the Department of Homeland Security," explained Peter Jung, Chief Product Officer at Pulzze Systems, in this SYS-CON.tv interview at @ThingsExpo, held June 6-8, 2017, at the Javits Center in New York City, NY.
"We provide IoT solutions. We provide the most compatible solutions for many applications. Our solutions are industry agnostic and also protocol agnostic," explained Richard Han, Head of Sales and Marketing and Engineering at Systena America, in this SYS-CON.tv interview at @ThingsExpo, held June 6-8, 2017, at the Javits Center in New York City, NY.
SYS-CON Events announced today that Calligo, an innovative cloud service provider offering mid-sized companies the highest levels of data privacy and security, has been named "Bronze Sponsor" of SYS-CON's 21st International Cloud Expo ®, which will take place on Oct 31 - Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Calligo offers unparalleled application performance guarantees, commercial flexibility and a personalised support service from its globally located cloud plat...
Internet of @ThingsExpo, taking place October 31 - November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with 21st Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. The Internet of Things (IoT) is the most profound change in personal and enterprise IT since the creation of the Worldwide Web more than 20 years ago. All major researchers estimate there will be tens of billions devic...
"We are focused on SAP running in the clouds, to make this super easy because we believe in the tremendous value of those powerful worlds - SAP and the cloud," explained Frank Stienhans, CTO of Ocean9, Inc., in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
"The Striim platform is a full end-to-end streaming integration and analytics platform that is middleware that covers a lot of different use cases," explained Steve Wilkes, Founder and CTO at Striim, in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
DX World EXPO, LLC., a Lighthouse Point, Florida-based startup trade show producer and the creator of "DXWorldEXPO® - Digital Transformation Conference & Expo" has announced its executive management team. The team is headed by Levent Selamoglu, who has been named CEO. "Now is the time for a truly global DX event, to bring together the leading minds from the technology world in a conversation about Digital Transformation," he said in making the announcement.
SYS-CON Events announced today that DXWorldExpo has been named “Global Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Digital Transformation is the key issue driving the global enterprise IT business. Digital Transformation is most prominent among Global 2000 enterprises and government institutions.
SYS-CON Events announced today that Datera, that offers a radically new data management architecture, has been named "Exhibitor" of SYS-CON's 21st International Cloud Expo ®, which will take place on Oct 31 - Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Datera is transforming the traditional datacenter model through modern cloud simplicity. The technology industry is at another major inflection point. The rise of mobile, the Internet of Things, data storage and Big...
"MobiDev is a Ukraine-based software development company. We do mobile development, and we're specialists in that. But we do full stack software development for entrepreneurs, for emerging companies, and for enterprise ventures," explained Alan Winters, U.S. Head of Business Development at MobiDev, in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
While the focus and objectives of IoT initiatives are many and diverse, they all share a few common attributes, and one of those is the network. Commonly, that network includes the Internet, over which there isn't any real control for performance and availability. Or is there? The current state of the art for Big Data analytics, as applied to network telemetry, offers new opportunities for improving and assuring operational integrity. In his session at @ThingsExpo, Jim Frey, Vice President of S...
SYS-CON Events announced today that DXWorldExpo has been named “Global Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Digital Transformation is the key issue driving the global enterprise IT business. Digital Transformation is most prominent among Global 2000 enterprises and government institutions.
In his opening keynote at 20th Cloud Expo, Michael Maximilien, Research Scientist, Architect, and Engineer at IBM, discussed the full potential of the cloud and social data requires artificial intelligence. By mixing Cloud Foundry and the rich set of Watson services, IBM's Bluemix is the best cloud operating system for enterprises today, providing rapid development and deployment of applications that can take advantage of the rich catalog of Watson services to help drive insights from the vast t...
SYS-CON Events announced today that EnterpriseTech has been named “Media Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. EnterpriseTech is a professional resource for news and intelligence covering the migration of high-end technologies into the enterprise and business-IT industry, with a special focus on high-tech solutions in new product development, workload management, increased effic...
SYS-CON Events announced today that Massive Networks, that helps your business operate seamlessly with fast, reliable, and secure internet and network solutions, has been named "Exhibitor" of SYS-CON's 21st International Cloud Expo ®, which will take place on Oct 31 - Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. As a premier telecommunications provider, Massive Networks is headquartered out of Louisville, Colorado. With years of experience under their belt, their team of...
SYS-CON Events announced today that Cloud Academy named "Bronze Sponsor" of 21st International Cloud Expo which will take place October 31 - November 2, 2017 at the Santa Clara Convention Center in Santa Clara, CA. Cloud Academy is the industry’s most innovative, vendor-neutral cloud technology training platform. Cloud Academy provides continuous learning solutions for individuals and enterprise teams for Amazon Web Services, Microsoft Azure, Google Cloud Platform, and the most popular cloud com...
SYS-CON Events announced today that Cloudistics, an on-premises cloud computing company, has been named “Bronze Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 - Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Cloudistics delivers a complete public cloud experience with composable on-premises infrastructures to medium and large enterprises. Its software-defined technology natively converges network, storage, compute, virtualization, and ...
SYS-CON Events announced today that CHEETAH Training & Innovation will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on Oct. 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. CHEETAH Training & Innovation is a cloud consulting and IT training firm specializing in improving clients cloud strategies and infrastructures for medium to large companies.
SYS-CON Events announced today that Datanami has been named “Media Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Datanami is a communication channel dedicated to providing insight, analysis and up-to-the-minute information about emerging trends and solutions in Big Data. The publication sheds light on all cutting-edge technologies including networking, storage and applications, and thei...
The current age of digital transformation means that IT organizations must adapt their toolset to cover all digital experiences, beyond just the end users’. Today’s businesses can no longer focus solely on the digital interactions they manage with employees or customers; they must now contend with non-traditional factors. Whether it's the power of brand to make or break a company, the need to monitor across all locations 24/7, or the ability to proactively resolve issues, companies must adapt to...