I have always maintained that governance is something that SOA and BPM platforms should just have built-in.  Governance should not get in the way or be bolted on, but rather be a central and cohesive part of the platform experience.  I recently wrote a post for the IBM IMPACT blog that discusses why this is important and talks about the innovations we delivered in v7.5 of the IBM Business Process Manager platform to enable governance for BPM programs.  You can find the post here.