Service-Oriented Architecture Governance for the Services Driven Enterprise

10.13. DEVELOP A UNIFIED MODEL OF POLICIES

One of the most critical efforts required of standards bodies is to develop a unified model for SOA policies that integrates business policies with process, technology, design, and runtime policies. The following research areas should be considered:

• Establish a broad policy model that integrates and maps policies vertically and horizontally in the enterprise based on policy enforcement requirements.

• Develop industry standards for enterprise governance policies for compliance, business, process, and technical policies.

• Develop a unified policy model that establishes an ontology and taxonomy of policies, as well as the relationships of policies to one another by category, such that enforcement can be accomplished using an integrated policy enforcement model.

• Develop technical standards and a policy syntax that support the realization of a universal policy model. While Web services standards are evolving for Web services policy enforcement, there are different approaches and vendor proprietary models for network policy enforcement, security policy enforcement, service level agreement (SLA), and quality of service (QoS) policy enforcement and more.

• Encourage the integration of tools that support an integrated policy enforcement model. While a governance interoperability framework was proposed at one time by a vendor consortium, little progress has been made to add non-Web services standards into the picture, much less integrating policy enforcement ...