As important as information security is, it seems to be one aspect of SOA that is too often overlooked. Without a well-thought out security plan, a SOA project will introduce critical vulnerabilities to the enterprise, it may require a large amount of time and resources in order to “retrofit” security later, and it may never be deployed at all due to accreditation failure when there are unmet needs related to mandatory security rules and privacy laws.

BPMS Watch: Which Way for BPMN?
To the surprise of nearly everyone, OMG’s Business Process Modeling Notation (BPMN) has emerged as far and away the most important standard in BPM, driven in large part by the BPM Suite vendors who recognize its value as a bridge between business-oriented process modeling and implementation design. Today, for example, BPMSs ranging from Appian, Savvion, and Lombardi to BEA, Oracle, SAP, SoftwareAG, TIBCO, and Vitria layer rely on BPMN-based modeling as the underpinning of their process implementation design.

The Five Implementation Options to Manage the Risk in a New Process
How do you manage the risk and uncertainty concerning a new process design? Below are five options ranging from low-risk suggestions to ones that imply higher risks.
Role-Playing, Practice, and Simulation
The least risky option is to role-play, practice, or simulate the new design. To use a military metaphor, you wouldn’t be using live ammunition in this option. A professional football team employs this option (and calls it practice) Monday through Saturday. There’s no risk in role-playing, practice, or simulation.
Introducing the Jiffy Lube Metaphor of Continuous Flow
Are your software implementation efforts woefully behind? Are your development schedules constantly being compromised by increased demands from other business units?
Does SOA Kill Capacity Planning?
In theory, computing capacity should be like water, if you need more just leave the tap running a little longer. All manner of virtualization, grid and attached processing technologies are being developed and deployed in an effort the make this theory a reality. Therefore it would be easy to assume that capacity management would not be an issue for SOA. Just deploy the services and SOA infrastructure on your tap water computing power with a few automation policies and capacity management ceases to be an issue.
What a lovely fantasy.
The real world, unfortunately, does not work that way.

Business Decision Management – Part 2
In Part 1 we discussed using business rules and analytics in the context of Business Decision Management to automate and improve operational business decisions. There are many ways to bring business rules and analytics to play in information systems and they can be used to improve business processes, Business Decision Management is emerging an extremely productive and effective method.

U.S Government Better Utilizes IT to Improve Efficiency
The Federal Enterprise Architecture provides a platform for cross-agency collaboration and a discipline to guide IT investments, helping the federal government achieve its goals. BPMInstitute.org talked to Richard Burk, chief architect in the Office of Management and Budget, about the initiative.

BPMS Watch: How Much BPMN Do You Need?
In March, Michael zur Muehlen of Stevens Institute of Technology and Jan Recker of Queensland University published an article based on their analysis of BPMN diagrams collected in the wild, as it were, from consultants and practitioners.

Adaptive Software – Systematically Responding to Emergent Environmental Change
This article is the first in a series of four to address the role of decisions and rules as an integral part of systems designed to adapt dynamically to changing environments.

Business Architecture: Scaling SCOR® to meet your needs
I have been in this business for 27 years and somehow never managed to do any supply chain work. So when a client asked me what I knew about the Supply Chain Operations Reference-model (SCOR1 ), developed and endorsed by the Supply-Chain Council (SCC), I had to admit “nothing.” So, being a good consultant, I set about familiarizing myself with SCOR: I did some reading, downloaded some PDFs, and attended a workshop. Admittedly, this does not make me an expert. It does not even make me particularly knowledgeable. It only makes “familiar” with SCOR.