Developing and Enforcing Security Policies
John Rodford, Managing Director, and Rix Groenboom, Support Manager - Europe, Parasoft
To safeguard security, most enterprises have added security officers who report to CIOs or other executive team members. Yet, few enterprises have developed a solid security policy (a critical design document that every organization needs), let alone determined how to enforce one. This presentation describes how to create an application security policy, and explains how such policies correlate to Sarbanes-Oxley compliance. First, we'll outline a general strategy for developing a security policy, and inform readers about resources that will help them develop security policies that suit their unique needs. Next, we’ll explain how to implement the security policy in the code, and how to confirm that applications comply with the security policy. We’ll also explain why the "Security Policy" approach is an effective way to prevent application-level security vulnerabilities.

Principles and Tools for SOA Governance
Brent Carlson, VP of Technology and Co-founder, LogicLibrary, Inc
In the past year, Web services and service-oriented architectures (SOAs) have become mainstream because of their ability to provide business agility and flexibility through integration, productivity and reuse. The outlook on SOA has become so positive that Gartner, Inc. has predicted that by 2008, 60% of enterprises will use service-oriented architectures (SOAs) as their “guiding principle” and the Yankee Group believes 75% of enterprises are now planning large SOA investments. With SOA enablement clearly on the rise, developers are turning to SOA governance as a means of controlling what and how services located within an SOA are deployed.

In this half-day workshop, Brent Carlson, co-founder and VP of technology at LogicLibrary, will discuss SOA governance and describe principles and tools that support SOA governance in the leading development environments. He will provide a list of best practices and take attendees through a real-world example of a large insurance company that built out an SOA, describing the SOA governance platform that has been put in place, noting how it spans the entire application development lifecycle, from functional requirements through design and development, to operations and deployment.