Service-Oriented Architecture Governance for the Services Driven Enterprise

9.2. POLICY ENFORCEMENT MODEL (PEM)

Once the PMM is completed, the PEM must be developed. A PEM determines the appropriate governance and policy enforcement mechanisms that will implement the SOA governance model by enforcing its policies. A policy enforcement model is comprised of the following elements:

• Governance Organizational Model. Boards, committees, and working groups that enforce policies or make recommendations for policies that are enforced by others. The governance organizational model is responsible for policies that can only be enforced manually through review processes. Another critical role for governance organizations is to mediate conflict, manage escalations, and deal with governance exceptions.

• Governance Processes, Checkpoints, and Triggers. Processes and events defined through various governance processes that enforce various policies, such as design reviews across an SDLC, or architecture reviews triggered by major milestones of an SDLC. Some processes are horizontal in nature, such as the SDLC processes of an enterprise, while others are vertical and extend from enterprise processes and intersect with horizontal processes and business unit-specific processes, as in federated governance structures.

• Governance Enabling Technology and Tools. Various technologies and tools that can play a role in enforcing various types of policies at multiple locations or policy enforcement points (PEP) across the enterprise. Examples of common governance tools include service ...