Change Management

Information security professionals not only have to deal with change, more often than not they represent change. It might be changing the way a company manages access to its systems, works with third-parties or anything else.

To be effective with the change management process, security professionals should work with the business, demonstrating the value of security.

John Kotter in his book Our Iceberg is Melting tells a story about a penguin colony, which demonstrates basic principles of successful change management:

1. Establish a sense of urgency
2. Create a guiding coalition
3. Develop a change vision
4. Communicate the vision for buy-in
5. Empower broad-based action
6. Generate short-term wins
7. Never let up
8. Anchor new approaches into the culture