ServiceNow: The Mythical Enterprise Integration Bus?
ServiceNow: The Mythical Enterprise Integration Bus?
Every few years, IT is promised the mythical “Enterprise Integration Bus.”
One platform. One source of truth. All your systems flowing together in harmony like a well-conducted orchestra.
Today, ServiceNow is the frontrunner for that role. And honestly, it makes sense:
• CMDB gives a common data backbone
• Integration Hub connects out to everything
• Dashboards give execs confidence they finally have “the big picture”
• Workflows do a lot of the glue work that used to live in emails and spreadsheets
But here’s the reality I hear around the camp fire…
• Sometimes it feels less like a bus, more like a DIY kit from IKEA — the parts are there, the diagrams are pretty, but a few screws are always left over.
• Customisations sneak in, and suddenly “out-of-the-box” looks more like “held together with elastic bands.”
• And beneath it all, Kafka, MuleSoft, and a stack of APIs are still doing the late-night heavy lifting.
And while we’re on it, let’s talk about SOAR. For a while it was billed as the future of automated response — playbooks, orchestration, hands-off remediation. But the hype curve flattened fast. Most organisations found SOAR too rigid, too noisy, or too resource-intensive to maintain. In many cases, it quietly died on the vine, leaving behind another graveyard of half-written workflows and broken promises.
The irony is that ServiceNow’s SecOps module makes more sense than pure-play SOAR ever did in all but extremely stubborn cases 🤪. Vulnerability response tied back to the CMDB, incident response linked to ITSM workflows — it’s not glamorous, but it connects directly to how organisations actually run. Less “robots saving the SOC,” more “making the SOC’s pain visible to management.” And in practice, that turns out to be more valuable than the dream of full automation.
Is ServiceNow the mythical Enterprise Integration Bus?
• Yes — it’s the closest thing we’ve had to an enterprise nervous system.
• No — it’s not magic, and it still needs care, feeding, and some old-fashioned architecture to keep the wheels moving.
Maybe that’s the real point: it doesn’t need to be perfect. It just needs to be good enough to keep execs confident, auditors calm, and architects (mostly) sane.
Enjoy the ride. Assembly instructions sold separately.
— Scott Gardner
Threat intelligence every morning — new victims, new groups, what matters, in plain English. Free, with receipts.
Subscribe to the Daily →
Scott Gardner ·