Implementing SOA Security

Each interaction with an IT asset is a potential place for a service. If the interface between the process step and the IT asset is framed in terms of the purpose of the process step, and if the interface is open to being invoked through multiple interaction channels (such as a Web application, desktop application, Web service and interactive voice response), the IT asset is a business service. As such, it provides important flexibility for a process step because, no matter how the interaction channel of the step may change, the service maintains consistent operation of the process step through its encapsulation of the relevant business rules.