Augmenting service oriented architecture (‘SOA’) governance maturity including receiving an evaluation of the maturity of the governance of the SOA; identifying, for each governance capability in dependence upon the evaluation of the maturity of the governance capability, one or more predefined risks to the SOA; establishing, for each governance capability in dependence upon the predefined risks to the SOA, a risk value representing the severity of the predefined risks; selecting, for each governance capability in dependence upon the evaluation of the maturity of the governance of the SOA and the predefined risk value, one or more governance work products; and communicating to predetermined stakeholders in the SOA the one or more predefined risks to the SOA identified for each governance capability, the risk value established for each governance capability, and the governance work products selected for each governance capability.