Even for organizations that are banking on SOA, SOA governance remains a largely informal process. Bad idea, say experts Cathy Lippert, Mark Dutra, and Bruce Bailey.