Governance is the tail that wags the SOA dog. An organization that deploys Web Services without a solid governance program is headed for serious trouble in terms of reliability, security, and cost. While governance is a necessity for any IT endeavor, the open and potentially chaotic nature of SOA makes governance either a showstopper or a magic bullet for success, depending on how it's approached. This article will look at SOA governance from both a technological and business perspective, highlighting the need for a complete governance model - a closed loop that spans design time to runtime, policy definition, enforcement, and audit.