Click here to close now.


Industrial IoT Authors: Elizabeth White, Liz McMillan, Pat Romanski, Pete Waterhouse, Glenn Rossman

Related Topics: Industrial IoT

Industrial IoT: Article

The Importance of Information Asset Governance

The Importance of Information Asset Governance

The greatest benefit of XML lies in its potential for managing "islands of data" locked into proprietary tools, systems, applications, and technologies through the use of a common data format that's understandable to any process and system that use it for data representation, data exchange, and application integration. In fact, if XML doesn't achieve this potential, there is little point in using it at all.

Following a trend all too familiar to the IT industry, XML is being seen as a silver bullet that will magically solve all the problems of data integrity, instantly remove islands of data, and disentangle the spaghetti of data interfaces across the enterprise. Typically, those who have willingly embraced this "Next Big Thing" approach will be sadly disappointed, and another real opportunity to move forward could be lost.

XML's greatest strength is also its biggest weakness. It is so flexible that different vocabularies and structures can be written to define the same type of data. Left unchecked, this can lead to a confused set of fragmented, point-to-point XML formats that simply move the problems of data islands and integration around, instead of actually addressing them. Evidence from early (and very expensive) XML implementations confirms this problem. Many software vendors are implementing proprietary layers of XML that can give the appearance of providing a common format for data exchange, but in fact are designed to lock users into proprietary platforms. As a result, eXtensible Markup Language is fast becoming the "eXtensively Misused Language."

XML will only succeed when businesses truly embrace the principles of openness, transparency, and reusability that XML can support. This will require moving away from point-to-point negotiations for exchanging data toward an agreement on standard ways of defining and expressing XML vocabularies, and on common guidelines for the implementation and ongoing use of these standards.

The Need for an XML Clearinghouse
The effective application of XML to overcome the "islands of data" problem requires proper implementation strategies to ensure consistent exchange and reuse of information assets using XML. All projects using XML should have uniform access to appropriate XML documents and their related metadata, which can be only be achieved through the development and deployment of an XML Clearinghouse (also known as XML registry and repository) for the enterprise that provides a single location to store and manage the common XML standards and vocabularies used in the enterprise.

An enterprise XML Clearinghouse allows users to:
1.   Discover and use pertinent XML components in the enterprise
2.   Register additional XML components that can be reused (e.g., projects, applications) by other projects within the enterprise

What is an XML Clearinghouse?
An XML Clearinghouse is a software model that consists of two key components:
1.   Registry: Stores relevant descriptive information, or metadata, about registered information components and their associated objects, and allows the metadata to be operated on in various ways.
2.   Repository: Stores the registered information components and their associates. It also provides interfaces to retrieve and use registered information components and associated objects.

Registered information components and their associated objects provide users with the information necessary to effectively use them. The key information components registered in the Clearinghouse are the XML Schemas and XML DTDs that can be reused within the enterprise by XML developers, projects, applications, etc. Other information components may also be registered.

Examples of associated objects of registered information components include:

  • XML documents
  • XML specifications
  • XML specifications usage
  • UML models
  • Other projects that use the information components and the implementation details
  • XML design and implementation guidelines
  • Usage conflicts and collisions, including details of their resolution
  • Business process descriptions
  • Trading partner agreements
The relationship between an XML registry and an XML repository is shown in Figure 1.

The XML Clearinghouse can store different XML-specific files: XML, XSL, XSLT, XSD, and many others from the XML family. The main goal of the registry and repository is to share XML vocabularies between interested parties so they can discover and understand each other's vocabulary. The XML Clearinghouse ensures consistency, quality, and compatibility among XML projects within the enterprise and also helps to ensure that the XML standards used are controlled and monitored effectively.

Using the XML Clearinghouse
The following step by step example illustrates how the XML Clearinghouse works:

  • Project A of an enterprise develops an XML vocabulary (DTD or Schema) for structuring the customer name and address data that it uses.
  • Project A registers the vocabulary (information component) with other appropriate and relevant information (associated objects) as needed, such as description of the vocabulary, implementation guidelines, and so on, with the registry of its enterprise's XML Clearinghouse.
  • Project A wants to communicate with Project B by submitting name and address data electronically as XML documents that are validated against the registered XML vocabulary. Instead of writing its own XML vocabulary for name and address data, Project B should seek to use an XML vocabulary that has already been registered with the XML Clearinghouse of its enterprise for structuring their submission, as per the policy implemented by the enterprise.
  • Project B then searches the registry of the XML Clearinghouse for vocabularies that are designed for name and address data, to see how they have been used by other projects, and in particular to verify what has been adopted by Project A, and selects and downloads the proper vocabulary.

    Note that the registry should also provide facilities to store multiple versions of the same XML vocabulary. However, it is up to each project to decide which versions of the XML vocabulary it will support.

    Figure 2 shows how an XML developer can hypothetically use an XML Clearinghouse in a government environment consisting of many agencies and business units.

    Benefits of an XML Clearinghouse
    The XML Clearinghouse is an essential part of the infrastructure that supports the reuse of common information components across business applications. It has four main benefits:
    1.   Helps protect enterprise information assets: The information assets represented in the form of XML Schemas and DTDs that are commonly and consistently used across the enterprise are preserved, maintained, and protected from being locked into proprietary or custom-built applications that result in new data islands.
    2.   Promotes cross-project activities: The XML Clearinghouse stores information on the use of the XML Schemas and DTDs by different projects, which gives projects insight into XML-related activities and provides opportunities for collaboration.
    3.   Promotes a common understanding of information components: Storing the information models and metadata for subject areas (such as customer, product, etc.) as XML Schema in a single location promotes a common understanding of the purpose of the registered information components.
    4.   Facilitates B2B communication: External business partners can access the XML Clearinghouse so they can exchange data with the enterprise in the same standard ways used by internal business systems. This can expedite B2B communication and greatly reduces the cost of supporting it.

    The main thrust of the XML Standards Clearinghouse work is to provide visibility and awareness of XML data elements in use within various functional areas across an enterprise. This awareness is important to application integrators and system interfaces.

    Use of an XML Clearinghouse needs governance
    Despite the benefits of having an XML Clearinghouse for an enterprise, if the XML Clearinghouse were left uncontrolled, every point-to-point XML vocabulary would be registered, each reflecting the narrow interests of application areas. This would result in the proliferation of many diverse data formats within an enterprise to represent the same piece of data. New data islands of information would be created, resulting in new and expensive one-off formatting problems. This would seriously threaten the credibility and integrity of the XML Clearinghouse and defeat the purpose of using XML in the first place.

    An XML Clearinghouse will only be effective if policies are set, usage guidelines established, and a management and funding process put in place for effective operation. Policies and procedures should include:

  • Registration procedures for new XML components
  • Verification procedures for input to the registry
  • The extent to which developers will be required to consult the standards registry when deploying XML data structures
  • Classes of compliance for categorizing how rigorously projects within the enterprise adhere to standard data structures and definitions
  • A configuration management process to keep track of successive versions of each registered component

    Benefits of a governance model
    The benefits of a governance model to manage XML Clearinghouse use in an enterprise are numerous. Some of the key benefits are listed below:

  • Facilitates the convergence of standards within an enterprise, and reduces the costly divergence and fragmentation of XML used by different business units/projects.
  • Supports the management and control of the information assets of an enterprise by ensuring consistency, quality, and compatibility of the information assets used across the enterprise.
  • Enables an enterprise to track and monitor the progress of different XML projects, thereby avoiding duplication, conflicts, and inconsistency in the XML initiatives.
  • Provides a set of guidelines, policies, and procedures for implementing XML standards in an enterprise. This will provide a common understanding of data and a standard way of implementing XML that will enable the interoperability of information and business processes.
  • Enables an enterprise to monitor the evolution of the XML standards at national and international levels.
  • Resolves conflicts between different projects within the enterprise regarding the definition, creation, usage, and implementation of XML standards.

    Potential XML-Related Work in an Enterprise and the Importance of Governance
    This section describes the different types of XML-related work experienced implementing XML strategies for enterprises and the importance of governance for such projects.

    Projects that use existing XML standards
    Projects could be using existing industry XML standards. It's therefore important for the enterprise to monitor and govern this type of project for the following reasons:

  • Several projects in an enterprise could be planning to use the same XML standard, which could result in duplication of effort in evaluation and implementation.
  • A single mechanism should monitor the changes in industry standards on behalf of the enterprise and document how to apply any changes within applications.
  • It's important to have a common agreement on which XML standards will be adopted, since there could be many flavors of similar standards.
  • It's important to have a common agreement on how XML standards are implemented since an XML standard could be implemented in different ways and still meet its purpose.

    Projects that need to extend or develop XML standards
    There will be situations where existing industry XML standards don't meet the requirements of a project. In such circumstances the project may decide to cover identified gaps by extending existing standards, or by developing a new standard. It's important for an enterprise to monitor and govern this activity in order to:

  • Produce a common set of guidelines for adopting, changing, or building XML standards. This will encourage interoperability and foster a common understanding and use of the standards in an enterprise.
  • Ensure that effort is not duplicated where two projects share the same requirements.
  • Encourage projects with similar requirements to collaborate to extend or build common standards that meet all requirements, thereby producing more robust XML standards and fostering interoperability and common understanding.
  • Minimize the impacts that changes to existing enterprise XML standards might have on projects and business applications.

    Developing enterprise XML standards Projects in an enterprise may be building an enterprise XML standard for a subject area not addressed by existing standards, and the enterprise must govern this type of activity. It's important to:

  • Gather all inputs and requirements in a central place in order to expedite consensus across business units about the development and deployment of XML standards
  • Enable different projects to communicate using a common language when developing or adopting XML standards
  • Coordinate the enterprise XML standards initiative to avoid version control problems, conflicts and collisions, confusion, and misunderstandings about developing and deploying XML standards

    Turn locally developed XML into open industry standards
    There may be times when an enterprise decides to submit an XML standard it has developed to a global XML standards body or a local (e.g., national) standards body to ratify it as an "open" XML standard. For example, our organization submitted three XML standards for customer information management to OASIS to develop and promote them as open industry standards free of royalty and IP issues:

    • NAML: Name and Address Markup Language
    • CIML: Customer Identity Markup Language
    • CRML: Customer Relationships Markup Language
    This has resulted in five open industry standards under the control of the OASIS Customer Information Quality Technical Committee:
    • xNL: Extensible Name Language
    • xAL: Extensible Address Language
    • xNAL: Extensible Name and Address Language
    • xCIL: Extensible Customer Information Language
    • xCRL: Extensible Customer Relationships Language
    It's important for an enterprise to monitor and govern this type of activity in order to:
  • Ensure that the enterprise's interests are strongly and accurately represented at the global or local XML standards level when modifications and extensions to the standards are being considered
  • Position the enterprise as a world leader in the development of global XML standards for industry (this requires active sponsorship by the enterprise)
  • Ensure that changes and extensions ratified by the global or local XML standards body to standards submitted by the enterprise are reflected in their deployment within the enterprise

    The XML Standards Governance model will enable enterprises to form closer relationships with global/local standards bodies and provides the opportunity to establish business relationships with other organizations involved in the standards initiative and those who are using the standards.

    XML allows the specification of an arbitrary set of nonbinary tags for representing information components. This offers an open, independent, and low-cost platform for representing information for a multitude of purposes. However, left uncontrolled, the introduction of XML results in the proliferation of many diverse data formats that represent the same piece of information. This would create new islands of information and result in a new version of the expensive one-off formatting problems that most enterprises are looking to solve.

    Information components can be shared, exchanged, and reused through the deployment of an XML Clearinghouse for the enterprise that provides a single, common, sharable location to store and manage the XML standards and vocabularies used in the enterprise. However, the technical solutions used to implement an effective XML strategy need to be managed properly. It is therefore important for an enterprise to establish an XML Standards Governance Model for the XML Clearinghouse to oversee the effective development and deployment of an integrated set of XML standards to represent, share, and exchange enterprise information components.


  • Ferguson, R. (2002). "XML: Plugging into 'standard' hybrids." eWEEK. January.
  • Kumar, R. (2002). "XML Standards for Global Customer Information Management." DM Review. Volume 12, Number 5.
  • ebXML:
  • Challenges of effective adoption of the Extensible Markup Language. (2002). GAO Report to the U.S. Government. April.
  • OASIS Customer Information Quality Technical Committee:
  • Comments (0)

    Share your thoughts on this story.

    Add your comment
    You must be signed in to add a comment. Sign-in | Register

    In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.

    @ThingsExpo Stories
    The Internet of Things is clearly many things: data collection and analytics, wearables, Smart Grids and Smart Cities, the Industrial Internet, and more. Cool platforms like Arduino, Raspberry Pi, Intel's Galileo and Edison, and a diverse world of sensors are making the IoT a great toy box for developers in all these areas. In this Power Panel at @ThingsExpo, moderated by Conference Chair Roger Strukhoff, panelists discussed what things are the most important, which will have the most profound effect on the world, and what should we expect to see over the next couple of years.
    With all the incredible momentum behind the Internet of Things (IoT) industry, it is easy to forget that not a single CEO wakes up and wonders if “my IoT is broken.” What they wonder is if they are making the right decisions to do all they can to increase revenue, decrease costs, and improve customer experience – effectively the same challenges they have always had in growing their business. The exciting thing about the IoT industry is now these decisions can be better, faster, and smarter. Now all corporate assets – people, objects, and spaces – can share information about themselves and thei...
    PubNub has announced the release of BLOCKS, a set of customizable microservices that give developers a simple way to add code and deploy features for realtime apps.PubNub BLOCKS executes business logic directly on the data streaming through PubNub’s network without splitting it off to an intermediary server controlled by the customer. This revolutionary approach streamlines app development, reduces endpoint-to-endpoint latency, and allows apps to better leverage the enormous scalability of PubNub’s Data Stream Network.
    I recently attended and was a speaker at the 4th International Internet of @ThingsExpo at the Santa Clara Convention Center. I also had the opportunity to attend this event last year and I wrote a blog from that show talking about how the “Enterprise Impact of IoT” was a key theme of last year’s show. I was curious to see if the same theme would still resonate 365 days later and what, if any, changes I would see in the content presented.
    Apps and devices shouldn't stop working when there's limited or no network connectivity. Learn how to bring data stored in a cloud database to the edge of the network (and back again) whenever an Internet connection is available. In his session at 17th Cloud Expo, Ben Perlmutter, a Sales Engineer with IBM Cloudant, demonstrated techniques for replicating cloud databases with devices in order to build offline-first mobile or Internet of Things (IoT) apps that can provide a better, faster user experience, both offline and online. The focus of this talk was on IBM Cloudant, Apache CouchDB, and ...
    Microservices are a very exciting architectural approach that many organizations are looking to as a way to accelerate innovation. Microservices promise to allow teams to move away from monolithic "ball of mud" systems, but the reality is that, in the vast majority of organizations, different projects and technologies will continue to be developed at different speeds. How to handle the dependencies between these disparate systems with different iteration cycles? Consider the "canoncial problem" in this scenario: microservice A (releases daily) depends on a couple of additions to backend B (re...
    Two weeks ago (November 3-5), I attended the Cloud Expo Silicon Valley as a speaker, where I presented on the security and privacy due diligence requirements for cloud solutions. Cloud security is a topical issue for every CIO, CISO, and technology buyer. Decision-makers are always looking for insights on how to mitigate the security risks of implementing and using cloud solutions. Based on the presentation topics covered at the conference, as well as the general discussions heard between sessions, I wanted to share some of my observations on emerging trends. As cyber security serves as a fou...
    Discussions of cloud computing have evolved in recent years from a focus on specific types of cloud, to a world of hybrid cloud, and to a world dominated by the APIs that make today's multi-cloud environments and hybrid clouds possible. In this Power Panel at 17th Cloud Expo, moderated by Conference Chair Roger Strukhoff, panelists addressed the importance of customers being able to use the specific technologies they need, through environments and ecosystems that expose their APIs to make true change and transformation possible.
    There are over 120 breakout sessions in all, with Keynotes, General Sessions, and Power Panels adding to three days of incredibly rich presentations and content. Join @ThingsExpo conference chair Roger Strukhoff (@IoT2040), June 7-9, 2016 in New York City, for three days of intense 'Internet of Things' discussion and focus, including Big Data's indespensable role in IoT, Smart Grids and Industrial Internet of Things, Wearables and Consumer IoT, as well as (new) IoT's use in Vertical Markets.
    Container technology is shaping the future of DevOps and it’s also changing the way organizations think about application development. With the rise of mobile applications in the enterprise, businesses are abandoning year-long development cycles and embracing technologies that enable rapid development and continuous deployment of apps. In his session at DevOps Summit, Kurt Collins, Developer Evangelist at, examined how Docker has evolved into a highly effective tool for application delivery by allowing increasingly popular Mobile Backend-as-a-Service (mBaaS) platforms to quickly crea...
    The Internet of Things (IoT) is growing rapidly by extending current technologies, products and networks. By 2020, Cisco estimates there will be 50 billion connected devices. Gartner has forecast revenues of over $300 billion, just to IoT suppliers. Now is the time to figure out how you’ll make money – not just create innovative products. With hundreds of new products and companies jumping into the IoT fray every month, there’s no shortage of innovation. Despite this, McKinsey/VisionMobile data shows "less than 10 percent of IoT developers are making enough to support a reasonably sized team....
    As organizations realize the scope of the Internet of Things, gaining key insights from Big Data, through the use of advanced analytics, becomes crucial. However, IoT also creates the need for petabyte scale storage of data from millions of devices. A new type of Storage is required which seamlessly integrates robust data analytics with massive scale. These storage systems will act as “smart systems” provide in-place analytics that speed discovery and enable businesses to quickly derive meaningful and actionable insights. In his session at @ThingsExpo, Paul Turner, Chief Marketing Officer at...
    The cloud. Like a comic book superhero, there seems to be no problem it can’t fix or cost it can’t slash. Yet making the transition is not always easy and production environments are still largely on premise. Taking some practical and sensible steps to reduce risk can also help provide a basis for a successful cloud transition. A plethora of surveys from the likes of IDG and Gartner show that more than 70 percent of enterprises have deployed at least one or more cloud application or workload. Yet a closer inspection at the data reveals less than half of these cloud projects involve production...
    Internet of @ThingsExpo, taking place June 7-9, 2016 at Javits Center, New York City and Nov 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with the 18th International @CloudExpo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world and ThingsExpo New York Call for Papers is now open.
    We all know that data growth is exploding and storage budgets are shrinking. Instead of showing you charts on about how much data there is, in his General Session at 17th Cloud Expo, Scott Cleland, Senior Director of Product Marketing at HGST, showed how to capture all of your data in one place. After you have your data under control, you can then analyze it in one place, saving time and resources.
    With major technology companies and startups seriously embracing IoT strategies, now is the perfect time to attend @ThingsExpo 2016 in New York and Silicon Valley. Learn what is going on, contribute to the discussions, and ensure that your enterprise is as "IoT-Ready" as it can be! Internet of @ThingsExpo, taking place Nov 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with 17th Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. The Internet of Things (IoT) is the most profound cha...
    We are rapidly moving to a brave new world of interconnected smart homes, cars, offices and factories known as the Internet of Things (IoT). Sensors and monitoring devices will touch every part of our lives. Let's take a closer look at the Internet of Things. The Internet of Things is a worldwide network of objects and devices connected to the Internet. They are electronics, sensors, software and more. These objects connect to the Internet and can be controlled remotely via apps and programs. Because they can be accessed via the Internet, these devices create a tremendous opportunity to inte...
    Growth hacking is common for startups to make unheard-of progress in building their business. Career Hacks can help Geek Girls and those who support them (yes, that's you too, Dad!) to excel in this typically male-dominated world. Get ready to learn the facts: Is there a bias against women in the tech / developer communities? Why are women 50% of the workforce, but hold only 24% of the STEM or IT positions? Some beginnings of what to do about it! In her Day 2 Keynote at 17th Cloud Expo, Sandy Carter, IBM General Manager Cloud Ecosystem and Developers, and a Social Business Evangelist, wil...
    SYS-CON Events announced today that Kintone has been named "Bronze Sponsor" of SYS-CON's 18th International Cloud Expo®, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY. kintone promotes cloud-based workgroup productivity, transparency and profitability with a seamless collaboration space, build your own business application (BYOA) platform, and workflow automation system.
    Cloud computing delivers on-demand resources that provide businesses with flexibility and cost-savings. The challenge in moving workloads to the cloud has been the cost and complexity of ensuring the initial and ongoing security and regulatory (PCI, HIPAA, FFIEC) compliance across private and public clouds. Manual security compliance is slow, prone to human error, and represents over 50% of the cost of managing cloud applications. Determining how to automate cloud security compliance is critical to maintaining positive ROI. Raxak Protect is an automated security compliance SaaS platform and ma...