ISO/IEC 18384-2:2016

Information technology - Reference Architecture for Service Oriented Architecture (SOA RA) - Part 2: Reference Architecture for SOA Solutions

ISO/IEC 18384-2:2016 describes a Reference Architecture for SOA Solutions which applies to functional design, performance, development, deployment and management of SOA Solutions. It includes a domain-independent framework, addressing functional requirements and non-functional requirements, as well as capabilities and best practices to support those requirements.

Technologie de l'information — Architecture de référence pour l'architecture orientée service (SOA RA) — Partie 2: Architecture de référence pour les solutions de l'architecture orientée service

General Information

• Status: Published
• Publication Date: 26-Jun-2016
• ICS: 35.100.05 - Multilayer applications
• ICS: 35.210 - Cloud computing
• Technical Committee: ISO/IEC JTC 1/SC 38 - Cloud computing and distributed platforms
• Drafting Committee: ISO/IEC JTC 1/SC 38 - Cloud computing and distributed platforms
• Current Stage: 9093 - International Standard confirmed
• Start Date: 20-Sep-2021
• Completion Date: 30-Oct-2025

Overview

ISO/IEC 18384-2:2016 - Reference Architecture for SOA Solutions defines a domain‑independent reference architecture for Service‑Oriented Architecture (SOA) solutions. It provides a structured framework that supports the functional design, performance, development, deployment and management of SOA solutions. The standard covers a metamodel, conformance guidance, capability descriptions and best practices to address both functional and non‑functional requirements for service‑oriented systems.

Key Topics and Technical Requirements

The standard organizes SOA solutions into layered architecture and cross‑cutting aspects. Key technical topics include:

• Layered Architecture: Operational & IT Systems Layer, Service Component Layer, Services Layer, Process Layer, Consumer Layer - each with structure, capabilities and interaction patterns.
• Cross‑Cutting Aspects: Integration, Management & Security, Information, Governance, Development - guidance for consistent enforcement of policies and controls.
• Metamodel & Conformance: Definitions, terms, notations and conformance rules to ensure consistent interpretation and reuse.
• Service lifecycle: Service definition, realization, publication/exposure, binding, invocation, deployment and runtime enablement.
• Non‑functional requirements: Performance, scalability, auditing/logging, policies, virtualization and infrastructure support.
• Capabilities & ABBs: Abstract building blocks (ABBs) that map to capabilities such as service delivery, runtime environment, service invocation and policy management.
• Operational guidance: Design options, implementation considerations, runtime and deployment views, intersection points between layers.

Keywords: ISO/IEC 18384-2:2016, SOA reference architecture, service-oriented architecture, service layer, governance, service invocation, policy management, non-functional requirements.

Applications - Practical Use Cases

ISO/IEC 18384-2:2016 is practical for organizations designing, deploying or managing SOA solutions. Typical applications:

• Creating solution blueprints and architectures that ensure interoperability, scalability and maintainability.
• Defining governance models, policy enforcement and security controls for service ecosystems.
• Guiding developers and integrators on service realization, binding and runtime enablement.
• Informing operations teams on deployment, virtualization and performance tuning for service runtimes.
• Supporting enterprise architects in mapping business processes to service and process layers.

Benefits include standardized terminology, repeatable design patterns, improved cross‑team communication and clearer criteria for conformance and validation of SOA solutions.

Who Should Use This Standard

• Enterprise and solution architects
• Integration architects and SOA designers
• Development leads and software engineers building services
• DevOps, operations and infrastructure teams
• IT governance, security and compliance stakeholders

Related Standards (if applicable)

Organizations typically apply ISO/IEC 18384‑2 in conjunction with other SOA best practices and standards (other parts of the ISO/IEC 18384 series, and widely adopted service standards and tooling for service description, messaging and security).

Standards Content (Sample)

FINAL
INTERNATIONAL ISO/IEC
DRAFT
STANDARD FDIS
18384-2
ISO/IEC JTC 1/SC 38
Information technology — Reference
Secretariat: ANSI
Architecture for Service Oriented
Voting begins on:
2015-06-19 Architecture (SOA RA) —
Voting terminates on:
Part 2:
2015-08-19
Reference Architecture for SOA
Solutions
Technologie de l’information — Architecture de référence pour
l’architecture orientée service (SOA RA)
RECIPIENTS OF THIS DRAFT ARE INVITED TO
SUBMIT, WITH THEIR COMMENTS, NOTIFICATION
OF ANY RELEVANT PATENT RIGHTS OF WHICH
THEY ARE AWARE AND TO PROVIDE SUPPOR TING
DOCUMENTATION.
IN ADDITION TO THEIR EVALUATION AS
Reference number
BEING ACCEPTABLE FOR INDUSTRIAL, TECHNO-
ISO/IEC FDIS 18384-2:2015(E)
LOGICAL, COMMERCIAL AND USER PURPOSES,
DRAFT INTERNATIONAL STANDARDS MAY ON
OCCASION HAVE TO BE CONSIDERED IN THE
LIGHT OF THEIR POTENTIAL TO BECOME STAN-
DARDS TO WHICH REFERENCE MAY BE MADE IN
©
NATIONAL REGULATIONS. ISO/IEC 2015

ISO/IEC FDIS 18384-2:2015(E)
© ISO/IEC 2015, Published in Switzerland
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Ch. de Blandonnet 8 • CP 401
CH-1214 Vernier, Geneva, Switzerland
Tel. [phone]
Fax [phone]
[e-mail]
www.iso.org
ii © ISO/IEC 2015 – All rights reserved

ISO/IEC FDIS 18384 Part 2
79 Contents Page
80 Introduction . xiv
81 1 Scope . 2
82 2 Normative references . 2
83 3 Terms and Definitions . 2
84 3.1 Definitions . 2
85 3.2 Acronyms . 2
86 3.3 Notations . 3
87 3.3.1 UML . 3
88 3.3.2 Entity-Relationship . 3
89 3.3.3 Flows . 3
90 3.3.4 Layer Diagrams . 3
91 3.3.5 Capability diagrams . 4
92 3.4 Conventions . 4
93 3.5 Conformance . 5
94 4 Overview . 6
95 4.1 Introduction to SOA . 6
96 4.2 Introduction to the SOA Reference Architecture . 7
97 4.3 Meta Model . 8
98 4.4 Capabilities . 11
99 4.5 Reference Architecture for SOA Solutions . 12
100 4.5.1 Overview of Reference Architecture. 12
101 4.5.2 Operational and IT Systems Layer. 13
102 4.5.3 Service Component Layer . 14
103 4.5.4 Services Layer . 15
104 4.5.5 Process Layer . 15
105 4.5.6 Consumer Layer . 16
106 4.5.7 Integration Aspect . 16
107 4.5.8 Management and Security Aspect . 17
108 4.5.9 Information Aspect . 18
109 4.5.10 Governance Aspect . 19
110 4.5.11 Development Aspect . 20
111 4.6 Common Services Categories . 20
112 4.7 Assumptions and Key Concepts . 22
113 4.7.1 General . 22
114 4.7.2 Functional and Non Functional . 22
115 4.7.3 Requirements . 22
116 4.7.4 Services . 23
117 4.7.5 Documenting the Layers . 23
118 4.7.6 Logical and Physical Elements . 23
119 4.7.7 Interactions between Layers . 24
120 4.7.8 Understanding ABBs . 25
121 4.7.9 Provisioning Services . 26
122 4.7.10 Invoking Services . 26
123 4.7.11 Registries and Repositories . 26
124 4.7.12 Policies and Business Rules . 26
125 4.7.13 Events . 26
126 4.7.14 Auditing and Logging . 27
127 4.7.15 Understanding different logical elements . 27
128 5 Operational and IT Systems Layer. 29
129 5.1 Overview . 29
ISO/IEC FDIS 18384 Part 2
130 5.1.1 Summary . 29
131 Context and Typical Flow . 30
5.1.2
132 5.1.3 Capabilities . 30
133 5.1.4 Structural Overview of the Layer . 31
134 5.2 Details of ABBs and Supported Capabilities . 32
135 5.2.1 Service Delivery . 32
136 5.2.2 Runtime Environment. 33
137 Virtualization and Infrastructure Services . 34
5.2.3
138 5.3 Inter-Relationships between the ABBs . 34
139 5.4 Significant Intersection Points with other Layers . 35
140 5.4.1 General . 35
141 5.4.2 Intersection with the Rest of the SOA RA . 35
142 5.4.3 Interaction with Cross-Cutting Aspects . 35
143 Interaction with Horizontal Layers . 37
5.4.4
144 5.5 Usage Implications and Guidance . 38
145 5.5.1 Options and Design Decisions . 38
146 5.5.2 Implementation Considerations . 38
147 5.5.3 Runtime and Deployment View of the SOA RA . 39
148 6 Service Component Layer . 40
149 Overview . 40
6.1
150 6.1.1 Summary . 40
151 6.1.2 Context and Typical Flow . 40
152 6.1.3 Capabilities . 41
153 6.1.4 Structural Overview of the Layer . 42
154 6.2 Details of ABBs and Supported Capabilities . 43
155 Service Realization and Implementation . 43
6.2.1
156 6.2.2 Service Publication and Exposure . 43
157 6.2.3 Service Deployment. 44
158 6.2.4 Service Invocation . 44
159 6.2.5 Service Binding . 44
160 6.3 Inter-Relationships between the ABBs . 45
161 Significant Intersection Points with other Layers . 46
6.4
162 6.4.1 In General . 46
163 6.4.2 Interaction with Cross-Cutting Aspects . 47
164 6.4.3 Interaction with Horizontal Layers . 48
165 6.4.4 Interaction with the Services Layer . 49
166 6.4.5 Interactions with the Operational and IT Systems Layer . 50
167 Usage Implications and Guidance . 51
6.5
168 6.5.1 Options and Design Decisions . 51
169 6.5.2 Implementation Considerations . 52
170 7 Service Layer . 53
171 7.1 Overview . 53
172 7.1.1 Summary . 53
173 Context and Typical Flow . 54
7.1.2
174 7.1.3 Capabilities . 54
175 7.1.4 Structural Overview of the Layer . 55
176 7.2 Details of ABBs and Supported Capabilities . 57
177 7.2.1 Service Definition . 57
178 7.2.2 Service Runtime Enablement . 57
179 Policy Management . 58
7.2.3
180 7.3 Inter-Relationships between the ABBs . 58
181 7.4 Significant Intersection Points with other Layers . 61
182 7.4.1 Interaction with Cross-Cutting Aspects . 61
183 7.4.2 Interaction with Horizontal Layers . 62
184 7.5 Usage Implications and Guidance . 63
185 Process Layer . 64
186 8.1 Overview . 64
187 8.1.1 Summary . 64
vi © ISO 2015 – All rights reserved

ISO/IEC FDIS 18384 Part 2
188 8.1.2 Context and Typical Flow . 64
189 Capabilities . 67
8.1.3
190 8.1.4 Structural Overview of the Layer . 68
191 8.2 Details of ABBs and Supported Capabilities . 69
192 8.2.1 Process Definition . 69
193 8.2.2 Event Handling. 69
194 8.2.3 Process Runtime Enablement . 70
195 Process Information Management . 70
8.2.4
196 8.2.5 Process Integration . 71
197 8.2.6 Decision Management . 71
198 8.2.7 Process Monitoring and Management. 71
199 8.3 Inter-Relationships between the ABBs . 72
200 8.4 Significant Intersection Points with other Layers . 72
201 Interaction with Cross-Cutting Aspects . 72
8.4.1
202 8.4.2 Interaction with Horizontal Layers . 73
203 8.5 Usage Implications and Guidance . 74
204 9 Consumer Layer . 74
205 9.1 Overview . 74
206 9.1.1 Summary . 74
207 Context and Typical Flow . 75
9.1.2
208 9.1.3 Capabilities . 75
209 9.1.4 Structural Overview of the Layer . 76
210 9.2 Details of ABBs and Supported Capabilities . 78
211 9.2.1 Consumer Services . 78
212 9.2.2 Presentation Services . 78
213 Backend Integration . 79
9.2.3
214 9.2.4 Caching and Streaming Content . 79
215 9.2.5 Security and Privacy . 79
216 9.2.6 Information Access . 79
217 9.3 Inter-Relationships between the ABBs . 79
218 9.4 Significant Intersection Points with other Layers . 81
219 Interaction with Cross-Cutting Aspects . 81
9.4.1
220 9.4.2 Interaction with Horizontal Layers . 82
221 9.5 Usage Implications and Guidance . 83
222 10 Integration Aspect . 83
223 10.1 Overview . 83
224 10.1.1 Summary . 83
225 Context and Typical Flow . 84
10.1.2
226 10.1.3 Capabilities . 85
227 10.1.4 Structural Overview of the Layer . 86
228 10.2 Details of ABBs and Supported Capabilities . 87
229 10.2.1 Communication, Service Interaction and Integration . 87
230 10.2.2 Message Processing . 88
231 Security . 89
10.2.3
232 10.3 Inter-Relationships between the ABBs . 90
233 10.4 Significant Intersection Points with other Layers . 91
234 10.4.1 Interaction with Cross-Cutting Aspects . 91
235 10.4.2 Interaction with Horizontal Layers . 93
236 10.5 Usage Implications and Guidance . 94
237 11 Management and Security (MaS) Aspect . 95
238 11.1 Overview . 95
239 11.1.1 Summary . 95
240 11.1.2 Context and Typical Flow . 96
241 11.1.3 Capabilities . 97
242 11.1.4 Structural Overview of the Layer . 101
243 Details of ABBs and Supported Capabilities . 102
11.2
244 11.2.1 Facilities Security Management . 102
245 11.2.2 Security Management . 103
ISO/IEC FDIS 18384 Part 2
246 11.2.3 IT Systems Monitoring and Management . 105
247 SOA Solution Monitoring and Management . 105
11.2.4
248 11.2.5 Business Activity Monitoring and Management . 106
249 11.2.6 Event Managment . 107
250 11.2.7 Policty Monitoring and Enforcement . 108
251 11.2.8 Configuration and Change Management. 108
252 11.2.9 Registry and Repository . 109
253 Inter-Relationships between the ABBs . 109
11.3
254 11.4 Significant Intersection Points with other Layers . 111
255 11.4.1 Interaction with Cross-Cutting Aspects . 111
256 11.4.2 Interaction with Horizontal Layers . 113
257 11.5 Usage Implications and Guidance . 113
258 12 Information Aspect . 114
259 Overview . 114
12.1
260 12.1.1 Summary . 114
261 12.1.2 Context and Typical Flow . 115
262 12.1.3 Capabilities . 115
263 12.1.4 Structural Overview of the Layer . 117
264 12.2 Details of ABBs and Supported Capabilities . 118
265 Information Service . 118
12.2.1
266 12.2.2 Information Integration. 119
267 12.2.3 Information Security and Protection . 121
268 12.2.4 Business Information Management . 121
269 12.2.5 Business Analytics . 122
270 12.2.6 Information Definition and Modeling . 123
271 Information Registry/Repository . 123
12.2.7
272 12.3 Inter-Relationships between the ABBs . 124
273 12.4 Significant Intersection Points with other Layers . 126
274 12.4.1 Interaction with Cross-Cutting Aspects . 126
275 12.4.2 Interaction with Horizontal Layers . 127
276 12.5 Usage Implications and Guidance . 128
277 13 Governance Aspect . 128
278 13.1 Overview . 128
279 13.1.1 Summary . 128
280 13.1.2 Context and Typical Flow . 129
281 13.1.3 Capabilities . 131
282 13.1.4 Structural Overview of the Layer . 132
283 Supported Capabilities . 134
13.2
284 13.2.1 Governance Lifecycle . 134
285 13.2.2 SOA Metadata Storage and Management. 135
286 13.2.3 Rule Definition and Management . 135
287 13.2.4 Policy Definition and Management . 136
288 13.2.5 Monitoring . 136
289 Management . 137
13.2.6
290 13.2.7 Workflow . 137
291 13.3 Inter-Relationships between the ABBs . 137
292 13.4 Significant Intersection Points with other Layers . 139
293 13.4.1 Interaction with Cross-Cutting Aspects . 140
294 13.4.2 Interaction with Horizontal Layers . 141
295 Usage Implications and Guidance . 142
13.5
296 13.5.1 Options and Design Decisions . 142
297 14 Development Aspect . 143
298 14.1 Overview . 143
299 14.1.1 Summary . 143
300 14.1.2 Context and Typical Flow . 144
301 Capabilities . 148
14.1.3
302 14.1.4 Structural Overview of the Layer . 150
303 14.2 Details of ABBs and Supported Capabilities . 151
viii © ISO 2015 – All rights reserved

ISO/IEC FDIS 18384 Part 2
304 14.2.1 Description Development . 151
305 Operations Enablement . 153
14.2.2
306 14.2.3 Testing . 155
307 14.2.4 Maintenance . 156
308 14.2.5 Publication . 156
309 14.2.6 Process Development . 156
310 14.2.7 Deployment . 157
311 Subscription . 157
14.2.8
312 14.3 Inter-Relationships between the ABBs . 158
313 14.4 Significant Intersection Points with other Layers . 163
314 14.4.1 Intersection with the Rest of the SOA RA . 163
315 14.4.2 Interaction with Cross-Cutting Aspects . 163
316 14.4.3 Interaction with Horizontal Layers . 165
317 Usage Implications and Guidance . 166
14.5
318 14.5.1 Options and Design Decisions . 166
319 15 Common Service Categories . 172
320 15.1 Introduction . 172
321 15.2 Mediation Services . 173
322 15.3 Interaction Services . 174
323 Process Services . 174
15.4
324 15.5 Information Services . 174
325 15.6 Access Services . 175
326 15.7 Security Services . 175
327 15.8 Partner Services . 176
328 15.9 Lifecycle Services . 176
329 Asset and Registry/Repository Services . 176
15.10
330 15.11 Infrastructure Services . 177
331 15.12 Management Services . 177
332 15.13 Development Services . 177
333 15.14 Strategy and Planning Services . 178
334 15.15 Business Application Services . 178
335 Business Services . 178
15.16
336 15.17 Considering Implementations of Common Service Categories using Reference
337 Architecture . 179
338 15.18 Summary . 180
339 16 Related Work and Usages of the SOA RA . 181
340 Bibliography . 183
ISO/IEC FDIS 18384 Part 2
343 List of Figures
344 Figure 1 — SOA RA Layer/Aspect Indicator Diagram . 5
345 Figure 2 — Meta model for instantiating the SOA Reference Architecture for a Given . 10
346 Figure 3 — Reference Architecture for SOA Solutions . 12
347 Figure 4 — Common Service Categories . 21
348 Figure 5 — Typical Interactions among the Layers of the SOA RA . 24
349 Figure 6 — Structural Relationship between Service-Related ABBs . 28
350 Figure 7 — The Dynamic/Temporal Relationship between Service Components, Deployment Units and Solution
351 Components . 28
352 Figure 8 — ABBs in the Operational and IT Systems Layer . 32
353 Figure 9 — Relationships among ABBs in the Operational and IT Systems Layer . 35
354 Figure 10 — Key Interactions of Operational and IT Systems Layer with Cross Cutting . 36
355 Figure 11 — Key Interactions of Operational and IT Systems Layer with Horizontal Layers . 38
356 Figure 12 — Deployment View of the SOA RA . 39
357 Figure 13 — ABBs in the Service Component Layer . 42
358 Figure 14 — Illustrative Interaction Flow among Design-Time ABBs in the Service Component Layer . 45
359 Figure 15 — Illustrative Interaction Flow among Runtime ABBs in the Service Component Layer . 46
360 Figure 16 — High-Level Interaction of the Service Component Layer with Layers Above and Below in the SOA RA . 47
361 Figure 17 — Key Interactions of the Service Component Layer with Cross-C
...

INTERNATIONAL ISO/IEC
STANDARD 18384-2
First edition
2016-07-01
Information technology — Reference
Architecture for Service Oriented
Architecture (SOA RA) —
Part 2:
Reference Architecture for SOA
Solutions
Technologie de l’information — Architecture de référence pour
l’architecture orientée service (SOA RA) —
Partie 2: Architecture de référence pour les solutions de l’architecture
orientée service
Reference number
©
ISO/IEC 2016
© ISO/IEC 2016, Published in Switzerland
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Ch. de Blandonnet 8 • CP 401
CH-1214 Vernier, Geneva, Switzerland
Tel. [phone]
Fax [phone]
[e-mail]
www.iso.org
ii © ISO/IEC 2016 – All rights reserved

Contents Page
Foreword .viii
Introduction .ix
1 Scope . 1
2 Normative references . 1
3 Terms, definitions and abbreviated terms . 1
3.1 Terms and definitions . 1
3.2 Abbreviated terms . 1
4 Notations. 2
5 Conventions . 3
6 Conformance . 5
7 Overview . 5
7.1 Introduction to SOA . 5
7.2 Introduction to the SOA Reference Architecture . 6
7.3 Metamodel . 7
7.4 Capabilities .11
7.5 Reference Architecture for SOA Solutions .12
7.5.1 Overview of Reference Architecture .12
7.5.2 Operational and IT Systems Layer .14
7.5.3 Service Component Layer .14
7.5.4 Services Layer.15
7.5.5 Process Layer .16
7.5.6 Consumer Layer .16
7.5.7 Integration Aspect .17
7.5.8 Management and Security Aspect .18
7.5.9 Information Aspect .19
7.5.10 Governance Aspect .20
7.5.11 Development Aspect .20
7.6 Common Services Categories .21
7.7 Assumptions and Key Concepts .23
7.7.1 General.23
7.7.2 Functional and Non-functional .23
7.7.3 Requirements .23
7.7.4 Services .23
7.7.5 Documenting the Layers .24
7.7.6 Logical and Physical Elements .24
7.7.7 Interactions between Layers .25
7.7.8 Understanding ABBs .26
7.7.9 Provisioning Services .27
7.7.10 Invoking Services.27
7.7.11 Registries and Repositories .27
7.7.12 Policies and Business Rules .27
7.7.13 Events .27
7.7.14 Auditing and Logging .28
7.7.15 Understanding different logical elements .28
8 Operational and IT Systems Layer .30
8.1 Overview .30
8.1.1 Summary .30
8.1.2 Context and Typical Flow .31
8.1.3 Capabilities .32
8.1.4 Structural Overview of the Layer .33
8.2 Details of ABBs and Supported Capabilities .34
© ISO/IEC 2016 – All rights reserved iii

8.2.1 Service Delivery .34
8.2.2 Runtime Environment .35
8.2.3 Virtualization and Infrastructure Services .36
8.3 Inter-Relationships between the ABBs .36
8.4 Significant Intersection Points with other Layers .37
8.4.1 General.37
8.4.2 Intersection with the rest of the SOA RA.37
8.4.3 Interaction with Cross-Cutting Aspects .38
8.4.4 Interaction with Horizontal Layers . .40
8.5 Usage Implications and Guidance .40
8.5.1 Options and Design Decisions .40
8.5.2 Implementation Considerations .41
8.5.3 Runtime and Deployment View of the SOA RA .42
9 Service Component Layer .43
9.1 Overview .43
9.1.1 Summary .43
9.1.2 Context and Typical Flow .44
9.1.3 Capabilities .44
9.1.4 Structural Overview of the Layer .45
9.2 Details of ABBs and Supported Capabilities .46
9.2.1 Service Realization and Implementation .46
9.2.2 Service Publication and Exposure .47
9.2.3 Service Deployment .47
9.2.4 Service Invocation .47
9.2.5 Service Binding.47
9.3 Inter-Relationships between the ABBs .48
9.4 Significant Intersection Points with other Layers .50
9.4.1 General.50
9.4.2 Interaction with Cross-Cutting Aspects .50
9.4.3 Interaction with Horizontal Layers . .52
9.4.4 Interaction with the Services Layer .53
9.4.5 Interactions with the Operational and IT Systems Layer .55
9.5 Usage Implications and Guidance .55
9.5.1 Options and Design Decisions .55
9.5.2 Implementation Considerations .56
10 Service Layer .58
10.1 Overview .58
10.1.1 Summary .58
10.1.2 Context and Typical Flow .59
10.1.3 Capabilities .59
10.1.4 Structural Overview of the Layer .60
10.2 Details of ABBs and Supported Capabilities .62
10.2.1 Service Definition .62
10.2.2 Service Runtime Enablement .62
10.2.3 Policy Management .63
10.3 Inter-Relationships between the ABBs .63
10.4 Significant Intersection Points with other Layers .66
10.4.1 Interaction with Cross-Cutting Aspects .66
10.4.2 Interaction with Horizontal Layers . .67
10.5 Usage Implications and Guidance .68
11 Process Layer.69
11.1 Overview .69
11.1.1 Summary .69
11.1.2 Context and Typical Flow .69
11.1.3 Capabilities .72
11.1.4 Structural Overview of the Layer .73
11.2 Details of ABBs and Supported Capabilities .75
iv © ISO/IEC 2016 – All rights reserved

11.2.1 Process Definition .75
11.2.2 Event Handling .75
11.2.3 Process Runtime Enablement .75
11.2.4 Process Information Management .76
11.2.5 Process Integration .76
11.2.6 Decision Management .76
11.2.7 Process Monitoring and Management.77
11.3 Inter-Relationships between the ABBs .77
11.4 Significant Intersection Points with other Layers .77
11.4.1 Interaction with Cross-Cutting Aspects .77
11.4.2 Interaction with Horizontal Layers . .79
11.5 Usage Implications and Guidance .79
12 Consumer Layer .80
12.1 Overview .80
12.1.1 Summary .80
12.1.2 Context and Typical Flow .80
12.1.3 Capabilities .81
12.1.4 Structural Overview of the Layer .82
12.2 Details of ABBs and Supported Capabilities .83
12.2.1 Consumer Services .83
12.2.2 Presentation Services .84
12.2.3 Backend Integration . .84
12.2.4 Caching and Streaming Content .84
12.2.5 Security and Privacy .85
12.2.6 Information Access .85
12.3 Inter-Relationships between the ABBs .85
12.4 Significant Intersection Points with other Layers .87
12.4.1 Interaction with Cross-Cutting Aspects .87
12.4.2 Interaction with Horizontal Layers . .88
12.5 Usage Implications and Guidance .89
13 Integration Aspect .90
13.1 Overview .90
13.1.1 Summary .90
13.1.2 Context and Typical Flow .90
13.1.3 Capabilities .91
13.1.4 Structural Overview of the Layer .92
13.2 Details of ABBs and Supported Capabilities .94
13.2.1 Communication, Service Interaction and Integration.94
13.2.2 Message Processing .95
13.2.3 Security .96
13.3 Inter-Relationships between the ABBs .96
13.4 Significant Intersection Points with other Layers .98
13.4.1 Interaction with Cross-Cutting Aspects .98
13.4.2 Interaction with Horizontal Layers . .99
13.5 Usage Implications and Guidance .101
14 Management and Security (MaS) Aspect .101
14.1 Overview .101
14.1.1 Summary .101
14.1.2 Context and Typical Flow .103
14.1.3 Capabilities .104
14.1.4 Structural Overview of the Layer .108
14.2 Details of ABBs and Supported Capabilities .109
14.2.1 Facilities Security Management .109
14.2.2 Security Management .110
14.2.3 IT Systems Monitoring and Management .111
14.2.4 SOA Solution Monitoring and Management .112
14.2.5 Business Activity Monitoring and Management .113
© ISO/IEC 2016 – All rights reserved v

14.2.6 Event Management .114
14.2.7 Policy Monitoring and Enforcement .114
14.2.8 Configuration and Change Management .115
14.2.9 Registry and Repository .115
14.3 Inter-Relationships between the ABBs .116
14.4 Significant Intersection Points with other Layers .118
14.4.1 Interaction with Cross-Cutting Aspects .118
14.4.2 Interaction with Horizontal Layers . .119
14.5 Usage Implications and Guidance .120
15 Information Aspect .121
15.1 Overview .121
15.1.1 Summary .121
15.1.2 Context and Typical Flow .122
15.1.3 Capabilities .122
15.1.4 Structural Overview of the Layer .124
15.2 Details of ABBs and Supported Capabilities .125
15.2.1 Information Service .125
15.2.2 Information Integration .126
15.2.3 Information Security and Protection . .128
15.2.4 Business Information Management .128
15.2.5 Business Analytics .129
15.2.6 Information Definition and Modeling .130
15.2.7 Information Registry/Repository .130
15.3 Inter-Relationships between the ABBs .130
15.4 Significant Intersection Points with other Layers .133
15.4.1 Interaction with Cross-Cutting Aspects .134
15.4.2 Interaction with Horizontal Layers . .135
15.5 Usage Implications and Guidance .135
16 Governance Aspect .136
16.1 Overview .136
16.1.1 Summary .136
16.1.2 Context and Typical Flow .137
16.1.3 Capabilities .138
16.1.4 Structural Overview of the Layer .140
16.2 Supported Capabilities .143
16.2.1 Governance Lifecycle .143
16.2.2 SOA Metadata Storage and Management .143
16.2.3 Rule Definition and Management .144
16.2.4 Policy Definition and Management .144
16.2.5 Monitoring .145
16.2.6 Management .145
16.2.7 Workflow .145
16.3 Inter-Relationships between the ABBs .145
16.4 Significant Intersection Points with other Layers .147
16.4.1 Interaction with Cross-Cutting Aspects .148
16.4.2 Interaction with Horizontal Layers . .149
16.5 Usage Implications and Guidance .150
16.5.1 Options and Design Decisions .150
17 Development Aspect .151
17.1 Overview .151
17.1.1 Summary .151
17.1.2 Context and Typical Flow .152
17.1.3 Capabilities .157
17.1.4 Structural Overview of the Layer .159
17.2 Details of ABBs and Supported Capabilities .160
17.2.1 Description Development .160
17.2.2 Operations Enablement .162
vi © ISO/IEC 2016 – All rights reserved

17.2.3 Testing .163
17.2.4 Maintenance .164
17.2.5 Publication .164
17.2.6 Process Development .165
17.2.7 Deployment .165
17.2.8 Subscription .165
17.3 Inter-Relationships between the ABBs .166
17.4 Significant Intersection Points with other Layers .171
17.4.1 Intersection with the Rest of the SOA RA .171
17.4.2 Interaction with Cross-Cutting Aspects .171
17.4.3 Interaction with Horizontal layers .173
17.5 Usage Implications and Guidance .174
17.5.1 Options and Design Decisions .174
18 Common Service Categories .179
18.1 General .179
18.2 Mediation Services .180
18.3 Interaction Services .181
18.4 Process Services .181
18.5 Information Services .182
18.6 Access Services .182
18.7 Security Services .182
18.8 Partner Services .183
18.9 Lifecycle Services .183
18.10 Asset and Registry/Repository Services.184
18.11 Infrastructure Services .184
18.12 Management Servi
...