SOA Security is hardly a technology subject only. Cross-departmental processes and role concepts also require cross-departmental governance and a change of thinking in the risk departments of large companies.
Enterprise SOA Security – Part 4: Organizational Measures
