Today's organizations depend on software applications for their business success-and survival. When applications fail, businesses are severely damaged-revenue losses in the millions, key data stolen, brands and reputations damaged. Security vulnerabilities impact consumer trust and result in violations of customer privacy or customer lawsuits. Often the root cause of these dire consequences is an information and communication gap between development and corporate management. Simply stated, business executives often do not know the first thing about how software is built, tested, or maintained. They often refuse to approve the time and resources necessary to ship a product with acceptable quality and security. Likewise, development teams often do not know the first thing about business and cannot adequately justify their needs to business.

"Plan your work. Work your plan." Or, "Plan? Plan? We don't need no stinkin' plan." Which is the best approach for your software project? According to Robert Galen, neither is the right answer. Because software projects are expensive and challenging, you need a pragmatic project plan-one that is concise, targeted, useful, used, and adaptive. Beginning with a chartering process that leads to a high level project strategy, stakeholders determine the critical success factors and where to focus their planning activities. Robert describes the use of "Sticky Note Planning" workshops to develop and, more importantly, to maintain pragmatic plans as living documents. Learn from Robert what to monitor in your project, what milestones to set, and what the important drivers should be for adjusting the plan. Make planning one of the top contributors to the success of your project.

We all know that testing should be based on business risks. In practice, test managers often go from those risks to test coverage in an ad-hoc, intuitive way. Instead, by taking a step-by-step approach, you can improve coverage and better prioritize your tests. After translating business risks into product risks and establishing the required test coverage, you select the appropriate techniques and estimate test effort. Ruud Teunissen explains that the right test design technique is based on the required coverage, type of functionality, test level, quality characteristics to be tested, available documentation, available resources, and resource skill sets. This risk-based test planning approach enables the test manager to report progress and defects found in terms of the business risks so that stakeholders can make informed decisions about releasing the software into production.

Serious enterprise application development is moving to Service Oriented Architectures as companies try to leverage existing applications while meeting new customer demands. Even as the ability to connect Web sites dynamically adds significant new levels of business functionality, it opens up a new point of failure with each connection. Code coverage is becoming far less important than the ability to test every component of your J2EE stack in the same environment as it will be deployed in production. John Michelsen shares the current trends in SOA testing, including unit testing with JUnit, test-driven Development (XP, TDD methods), test script automation, load testing, continuous testing, and much more. Learn about the pitfalls in testing SOA systems and why some companies wrongly give up on even trying.

• Trends in testing SOA and Web service enabled applications