Web services are a standards-based software technology that lets programmers and integrators combine existing and new systems or applications in new ways over the Internet, within a company’s boundaries, or across many companies. Web services allow interoperability between software written in different programming languages, developed by different vendors, or running on different operating systems or platforms. Web Services are services offered across the web using existing web infrastructure. They are network-based services built using standard technologies that allow interoperability between systems and applications. Once the operational restraints and legacy issues facing the majority of businesses have been accepted, it is safe to say that Web Services are a valuable tool for increasing operational efficiency and response times to meet business objectives. Web Services are a key tool in the mission to bring together disparate systems, initially within the enterprise and when matured with trusted third parties. The use of Web Services makes it easier and cheaper to unlock the value of information contained within existing systems and allows the business to create seamless processes that are flexible and scaleable. Waiting for Web Services security standards to mature is not the most prudent option and standards will likely never adequately address the larger enterprise issues of control and monitoring. Enterprises have many options for implementing Web Services security, but the creation of a “control layer” in the architecture using a distributed Web Services management (WSM) solution is the most effective means for securing Web Services behind and across firewalls.