Explanation/Reference:
Rationale: Security services allow multiple solutions to share common security logic, features, policies, and identity information. This provides a more secure environment by eliminating redundancies and associated risks. It also enables more effective management of security in the IT environment.
Implications:
* Security logic must be externalized as much as possible, i.e., developers must not hand-code security logic into business solutions. (A)
* Security enforcement, decisions, and management must be performed by dedicated, shared services and infrastructure. (B)
* Security services must leverage open standards for interface protocols and message formats where possible in order to promote interoperability. (C)
* The availability and performance characteristics of security services must meet or exceed the specifications required to support the business solutions.
Reference: Oracle Reference Architecture, Security , Release 3.1