13. Digital Transformation, Innovation, and Organizational ChangeIntroduction and ContextDigital transformation is not simply the introduction of new software, cloud services, artificial intelligence, or automated processes. It is the deliberate redesign of how an organization creates value, serves stakeholders, makes decisions, operates internally, and competes or fulfills its public mission through digital capabilities. Information technology strategy provides direction for this transformation, while governance determines whether investment, risk, architecture, data, security, and organizational consequences are managed responsibly. Transformation is therefore both a technological and institutional phenomenon. A technically successful platform may fail to produce value if incentives, skills, processes, leadership behavior, and operating structures remain unchanged. Conversely, organizational change without adequate digital capability may create enthusiasm without sustainable performance. Strategic transformation requires these elements to be treated as an interconnected portfolio rather than as isolated projects. For doctoral-level analysis, an important distinction is between digitization, digitalization, and digital transformation. Digitization converts analog information into digital form. Digitalization uses digital tools to improve an existing process, such as automating invoice approval. Digital transformation changes the underlying operating model, customer proposition, governance arrangement, or institutional capability. The distinction matters because transformation involves greater uncertainty, wider organizational effects, and more demanding governance. Learning ObjectivesBy the end of this chapter, the reader should be able to: 1. Distinguish digitization, digitalization, innovation, and digital transformation. 2. Govern transformation portfolios by balancing strategic value, risk, capacity, and interdependence. 3. Explain agile, product, platform, DevSecOps, experimentation, automation, and legacy-modernization approaches. 4. Analyze the cultural, leadership, workforce, and political dimensions of organizational change. 5. Design measures for transformation outcomes rather than relying only on delivery metrics. 6. Evaluate ethical, security, regulatory, and professional responsibilities in digital transformation. 7. Apply transformation concepts to complex organizational situations. From Technology Projects to Transformation PortfoliosTraditional IT governance often organizes work as projects with defined scope, schedule, budget, and deliverables. This model remains useful for infrastructure replacement, regulatory compliance, and other bounded initiatives. It becomes less adequate when the organization is exploring uncertain markets, changing user behavior, or developing continuously evolving digital products. In such contexts, value is discovered over time, and the most important decisions concern learning, sequencing, capability development, and stopping low-value work. A transformation portfolio is a coordinated set of initiatives, products, platforms, experiments, capability investments, and organizational interventions. Portfolio governance should answer four questions. First, which strategic outcomes are being pursued? Second, what combination of initiatives can plausibly produce those outcomes? Third, what risks and dependencies must be managed collectively? Fourth, how will the organization know whether value is being realized? Portfolio logic prevents two common errors. The first is the accumulation of disconnected projects, each justified locally but collectively creating duplication and architectural complexity. The second is the treatment of transformation as a single grand program whose assumptions cannot be revised without political conflict. A portfolio can contain exploratory experiments, scaled products, foundational platforms, mandatory controls, and retirement activities, each governed according to its uncertainty and risk. A useful portfolio classification distinguishes: - Core optimization: improving reliability, efficiency, and cost of existing operations.
- Adjacent innovation: extending existing capabilities to new users, channels, or services.
- Disruptive or exploratory innovation: testing unfamiliar technologies, business models, or institutional arrangements.
- Foundational capability: investing in identity, data, integration, cloud, cybersecurity, skills, and architecture.
- Renewal and retirement: replacing, simplifying, or decommissioning obsolete assets.
The portfolio should be reviewed through strategic guardrails rather than only annual budget cycles. Guardrails may specify acceptable risk, data protection requirements, architectural principles, funding thresholds, service-level expectations, and conditions for scaling or stopping an initiative. Governance is strengthened when decision rights are explicit: executives set strategic intent and risk appetite; product leaders prioritize outcomes; architecture and security authorities establish constraints; delivery teams determine implementation details within those constraints. Agile and Product Operating ModelsAgile is frequently reduced to short iterations or daily meetings. Its deeper contribution is an approach to managing uncertainty through short feedback cycles, multidisciplinary collaboration, transparent priorities, and incremental delivery. Agile does not eliminate planning; it changes planning from a one-time prediction exercise into a continuing process of learning and adjustment. A product operating model organizes people and investment around a persistent user or business outcome rather than around temporary projects. A product team may include product management, design, engineering, data, security, operations, and domain expertise. It owns a product over its lifecycle, including discovery, delivery, operation, improvement, and eventual retirement. This arrangement contrasts with a project model in which a team delivers a specified output and then disbands. The product model has important governance implications. Funding must support durable teams rather than only approved project statements. Product managers require authority to prioritize within strategic boundaries. Success measures should include adoption, task success, customer or citizen outcomes, reliability, cost-to-serve, and risk reduction. A product model is not automatically agile or effective; permanent teams can still reproduce hierarchy, local optimization, and weak accountability if outcomes are unclear. Platform teams provide reusable capabilities such as identity services, data pipelines, developer tools, observability, integration, and cloud environments. A well-designed platform reduces cognitive load for product teams and creates standardized controls. However, platforms can become centralized bottlenecks if they are designed around internal technical preferences rather than user needs. Platform governance should therefore treat internal developers and delivery teams as customers and measure platform usability, reliability, security, and adoption. DevSecOps and the Control of Digital DeliveryDevOps integrates development and operations through automation, shared responsibility, continuous feedback, and reliable release practices. DevSecOps extends this logic by embedding security, privacy, compliance, and resilience throughout the development lifecycle rather than inspecting them only before deployment. A DevSecOps pipeline may include source-control protections, automated testing, dependency and vulnerability scanning, infrastructure-as-code review, secrets management, software composition analysis, policy-as-code, deployment approvals, runtime monitoring, and incident feedback. Automation does not remove accountability. It makes control activities repeatable and produces evidence for assurance, but humans must still determine whether a control is appropriate and whether exceptions are justified. The strategic value of DevSecOps lies in reducing the cost and delay associated with late discovery of defects and risks. It also changes the relationship between delivery and governance. Instead of security being perceived solely as an approval gate, security specialists work with teams to create reusable patterns, secure defaults, threat models, and automated checks. High-risk changes may still require independent review, separation of duties, or formal authorization. Important measures include deployment frequency, lead time for change, change-failure rate, mean time to restore service, vulnerability remediation time, control coverage, recovery-test results, and customer-impacting incidents. These measures should be interpreted together. A high deployment frequency is not a success if it produces unacceptable failures or weakens security. Experimentation, Innovation, and EvidenceInnovation involves the creation and adoption of new value, not merely the generation of ideas. Digital innovation is particularly dependent on experimentation because user needs, technical feasibility, and economic viability may be uncertain. A disciplined experiment states a hypothesis, identifies the population or context, specifies the evidence required, defines a time and resource limit, and establishes a decision rule. Experiments may use prototypes, usability studies, controlled trials, simulations, pilot deployments, or minimum viable products. The purpose of a minimum viable product is not to release an inferior product indefinitely; it is to obtain meaningful evidence with limited exposure. A minimum viable product should therefore be viable for the learning objective and safe for its intended users. Organizations commonly confuse activity with innovation. Hackathons, idea portals, and prototypes may generate energy but do not demonstrate value. Innovation governance should provide pathways from discovery to validation, scaling, integration, or termination. It should also protect teams from pressure to report only positive findings. A failed experiment can be strategically valuable when it prevents a larger investment based on an invalid assumption. Experimentation involving employees, customers, citizens, or sensitive data requires ethical review. Participants should not be exposed to unreasonable risk, and experimentation should not silently manipulate access to essential services. In algorithmic or automated decision systems, testing should examine disparate impacts, explainability, contestability, and effects on vulnerable groups. Automation, Artificial Intelligence, and Process RedesignAutomation should follow process understanding, not substitute for it. Automating a defective process can increase the speed and scale of waste, error, or unfairness. Before automation, organizations should examine process purpose, demand variability, exception patterns, decision rights, data quality, and control requirements. Robotic process automation is useful where tasks are repetitive, rule-based, stable, and accessible through structured interfaces. Application programming interfaces and workflow platforms often provide more sustainable integration than screen-based automation. Machine learning and generative AI are appropriate when problems involve classification, prediction, language, pattern recognition, or content generation, but they introduce uncertainty, model risk, data governance requirements, and the need for human oversight. A responsible automation decision considers the consequence of error. A low-risk recommendation may be automated with monitoring, whereas an automated decision affecting employment, credit, health, legal rights, or public benefits requires stronger controls, transparency, appeal mechanisms, and possibly human authorization. Automation should be evaluated by outcome quality, not simply by labor hours removed. It may improve service, reduce harm, increase accessibility, or release skilled workers for higher-value activities. Legacy Modernization as Strategic RenewalLegacy systems are not merely old technologies. They often embody institutional knowledge, regulatory logic, data definitions, and relationships with other systems. Their replacement is consequently an organizational and socio-technical problem. A legacy platform may be expensive and inflexible, yet it may also provide stable and trusted capabilities that a replacement could endanger. Modernization choices include: - Retain: continue operating the system when risk and cost are acceptable.
- Retire: eliminate redundant functionality or obsolete services.
- Rehost: move the system to a new infrastructure environment with minimal change.
- Replatform: modify the technical foundation while preserving most application behavior.
- Refactor: restructure code to improve maintainability or scalability.
- Rearchitect: redesign the system around different components or interfaces.
- Replace: adopt a new commercial or internally developed solution.
- Encapsulate: expose selected legacy capabilities through interfaces while gradually reducing dependence.
The appropriate approach depends on business criticality, technical debt, data quality, regulatory constraints, skills, integration complexity, and tolerance for service disruption. A common mistake is to treat modernization as a technology migration without funding data cleansing, process redesign, change management, testing, and decommissioning. Dual running may reduce transition risk but increases cost and reconciliation complexity. A modernization roadmap should identify value streams, dependencies, migration waves, rollback conditions, and explicit retirement criteria. The Human System: Culture, Leadership, and Workforce CapabilityOrganizational change is not a communication problem added after technical design. It is part of the design. People interpret transformation through its effects on autonomy, status, workload, employment security, professional identity, and fairness. Resistance may represent fear or political self-interest, but it may also reveal genuine defects, unaddressed operational risk, or knowledge that is absent from executive plans. Culture can be understood as patterns of shared assumptions and practices that influence how people make decisions. Digital transformation often requires a shift from functional silos to cross-functional collaboration, from output protection to outcome accountability, from avoidance of bad news to learning from evidence, and from manual approval dependence to transparent guardrails. Leaders cannot create these patterns through slogans. They must reinforce them through resource allocation, promotion criteria, meeting behavior, escalation practices, and their responses to failure. Leadership is distributed across the transformation system. Senior executives establish purpose, protect capacity, resolve cross-functional conflicts, and model informed risk-taking. Middle managers translate strategy into operational priorities and are often decisive in adoption. Technical leaders protect architectural integrity and explain trade-offs. Product and delivery leaders connect user needs with organizational constraints. Change leaders create participation, readiness, communication, and capability development. Workforce planning should identify the capabilities required after transformation, not merely the roles displaced during it. Relevant capabilities may include product management, service design, cloud engineering, data stewardship, cybersecurity, platform engineering, model governance, process analysis, vendor management, and systems thinking. Build, buy, borrow, and partner decisions should consider strategic sensitivity, labor-market conditions, knowledge retention, and professional development. Reskilling is credible only when employees receive time, resources, practice opportunities, and access to roles in which new skills are valued. Change approaches such as Lewin's unfreeze-change-refreeze model, Kotter's staged change process, and socio-technical systems theory offer useful perspectives, but none should be treated as a universal recipe. Transformation is often iterative rather than linear. Readiness assessments, stakeholder mapping, change-impact analysis, champion networks, training, feedback channels, and reinforcement mechanisms should be selected according to context. Measuring Transformation OutcomesDelivery metrics answer whether work is progressing; transformation metrics answer whether the organization is becoming more capable and valuable. A balanced measurement system can include four layers: 1. Flow and delivery: lead time, release frequency, throughput, and blocked work. 2. Technical health: reliability, technical debt, security exposure, recoverability, and platform adoption. 3. Behavior and adoption: active use, task completion, employee capability, process compliance, and stakeholder satisfaction. 4. Strategic outcomes: revenue, cost-to-serve, resilience, inclusion, service quality, risk reduction, or mission impact. Metrics require interpretation. Adoption may be high because a system is mandatory, not because it is useful. Cost reduction may reflect service withdrawal rather than efficiency. Customer satisfaction may improve temporarily while technical debt accumulates. Outcome measures should therefore be triangulated with qualitative evidence, operational data, financial analysis, and independent assurance. Benefits realization should assign an owner, establish a baseline, define the expected causal pathway, and specify when benefits will be assessed. Where outcomes are difficult to attribute to a single initiative, contribution analysis can be more appropriate than claiming direct causation. Transformation dashboards should make uncertainty visible rather than creating false precision. Governance, Ethics, and RiskTransformation governance must integrate strategic alignment, architecture, cybersecurity, privacy, data governance, financial control, procurement, resilience, and responsible innovation. Governance should be proportionate: low-risk experiments should not face the same process as high-impact automated decisions, but no initiative should be exempt from basic accountability. Key risks include vendor concentration, cloud dependency, cyberattack, privacy violations, algorithmic discrimination, data leakage, operational fragility, uncontrolled technical debt, shadow IT, workforce displacement, and exclusion of users with limited digital access. Organizations should define risk ownership, conduct threat and impact assessments, maintain auditability, and provide incident-response and recovery capabilities. Ethically responsible transformation respects human dignity, autonomy, privacy, accessibility, due process, and non-discrimination. It also considers environmental effects, including energy use, hardware lifecycle, and the resource demands of large-scale computation. Professional responsibility requires practitioners to disclose material limitations, avoid misleading performance claims, protect confidential information, and challenge decisions that create foreseeable and disproportionate harm. Illustrative Case: Modernizing a National Benefits AgencyBackgroundThe fictional National Benefits Agency (NBA) operates a twenty-year-old case-management system. The system is reliable but difficult to modify, has duplicated citizen records, and requires employees to re-enter information across several applications. Processing times vary substantially, and policy changes require expensive manual intervention. Situation and ProblemThe agency's executive committee proposes replacing the entire platform within three years. A technology vendor presents a standardized cloud solution, while operational managers warn that the existing system contains complex eligibility rules not fully documented elsewhere. Employee representatives fear job losses and argue that frontline knowledge has been excluded. Privacy officials are concerned about linking additional data sources, and service advocates note that some claimants lack reliable internet access. AnalysisA single replacement project would create concentration risk and could reproduce undocumented defects in the new system. The agency maps its value streams, identifies policy rules and data owners, and separates foundational capabilities from user-facing improvements. It finds that identity, data quality, integration, accessibility, and rule management are prerequisites for several desired outcomes. It also identifies a high-risk population for whom digital-only service would be inappropriate. Approach and StrategyThe agency establishes a transformation portfolio. One product team redesigns the application process with claimants and caseworkers. A platform team develops secure identity, integration, audit, and notification services. A modernization team encapsulates selected legacy functions through interfaces while retiring duplicated reporting tools. Small experiments test simplified forms and proactive notifications before national scale-up. DevSecOps practices introduce automated testing, vulnerability scanning, accessibility checks, and deployment monitoring. A governance forum approves high-impact changes and reviews privacy, fairness, and operational resilience. Funding is shifted from one large project budget to persistent product and platform teams, with quarterly outcome reviews. The workforce plan includes caseworker participation, training in digital service support, new data-steward roles, and redeployment pathways. The agency retains assisted channels for people who cannot use digital services. Transformation measures include application completion, processing time, error rates, claimant satisfaction, accessibility outcomes, service availability, security incidents, and reduction in legacy dependencies. OutcomeThe agency first improves the application journey and reduces unnecessary re-entry, while the legacy system continues to process complex cases. Early experiments reveal that a proposed automated eligibility recommendation performs poorly for unusual household arrangements, so it is restricted to decision support with mandatory caseworker review. The agency avoids a high-cost deployment that could have produced unfair denials. Over subsequent releases, selected legacy components are retired, but the full replacement is postponed until data quality and rule transparency meet agreed thresholds. Learning PointsThe case illustrates that modernization should be sequenced around capabilities and risk rather than technology fashion. Product teams can improve services before the legacy core is fully replaced. Experimentation provides evidence for responsible scaling. Human expertise remains essential where rules are complex or consequences are significant. Finally, transformation outcomes depend on governance, inclusion, workforce participation, and technical delivery together. Challenges and Common MistakesSeveral recurring mistakes weaken transformation. Executives may announce a technology solution before defining the problem. Portfolio committees may approve too many initiatives, creating hidden overload and dependency failure. Agile teams may optimize velocity while neglecting outcomes, architecture, security, or operational support. Organizations may appoint product managers without giving them decision authority. Automation programs may measure headcount reduction but ignore service quality and employee redeployment. Other failures arise from treating culture as a slogan, underestimating middle-management influence, ignoring informal workarounds, and communicating only positive results. Legacy programs often fail because they attempt a “big bang” replacement, preserve unclear requirements, or fail to fund decommissioning. Data and AI initiatives can produce harm when training data are unrepresentative, model limitations are hidden, or users cannot challenge outcomes. The remedy is not additional bureaucracy in every case. It is disciplined proportionality: clear outcomes, explicit decision rights, evidence-based investment, independent challenge for material risks, strong technical practices, and continuous learning. Emerging DirectionsTransformation is increasingly shaped by composable architectures, internal developer platforms, cloud-native services, edge computing, generative AI, autonomous operations, digital twins, and increasingly distributed work. These developments may improve adaptability but also increase dependency, attack surface, data complexity, and governance demands. Generative AI in particular requires attention to provenance, confidentiality, hallucination, intellectual property, bias, evaluation, and human accountability. The strategic question is not which emerging technology should be adopted first. It is which organizational capability should be strengthened, what evidence would justify adoption, and what safeguards are necessary. Future-ready governance will combine experimentation with institutional memory, automated controls with human judgment, and rapid delivery with resilience and public legitimacy. Best Practices for Transformation GovernanceEffective practice generally includes the following: - Define transformation in terms of measurable organizational outcomes.
- Maintain a portfolio view of products, platforms, experiments, modernization, and retirement.
- Match governance intensity to uncertainty, impact, and risk.
- Give multidisciplinary product teams durable ownership and clear decision rights.
- Embed security, privacy, accessibility, and compliance into delivery practices.
- Use experiments with explicit hypotheses, evidence thresholds, and stopping rules.
- Modernize legacy systems incrementally when replacement risk is high.
- Involve users, operational staff, and affected communities in design and evaluation.
- Fund capability development and credible workforce transitions.
- Measure adoption, technical health, benefits, resilience, and unintended consequences.
- Treat failed experiments as learning when they are responsibly designed.
- Make ethical assumptions, limitations, dependencies, and uncertainty visible.
Chapter SummaryDigital transformation is a strategic redesign of organizational value creation and operating capability, not merely a technology installation. Its governance requires a portfolio perspective that coordinates products, platforms, experiments, foundational investments, modernization, and retirement. Agile and product models support continuous learning and durable ownership, while DevSecOps integrates delivery, security, privacy, and operational responsibility. Experimentation creates evidence under uncertainty, and automation must be preceded by process understanding and proportional risk analysis. Legacy modernization is a socio-technical undertaking involving data, rules, people, architecture, and service continuity. Transformation succeeds only when leadership, culture, workforce capability, incentives, and user participation develop alongside technology. Outcome-based measurement should connect delivery flow and technical health with adoption and strategic impact. Ethical, regulatory, security, accessibility, and resilience concerns must be designed into transformation rather than added at the end. Key TermsDigitization: Conversion of analog information into digital form. Digitalization: Use of digital technology to improve an existing activity or process. Digital transformation: Organizational redesign that uses digital capabilities to change value creation, operations, or institutional behavior. Transformation portfolio: Coordinated collection of initiatives, products, platforms, experiments, and capability investments. Product operating model: Organization of enduring multidisciplinary teams around user or business outcomes. Platform team: Team that provides reusable technical or organizational capabilities to other teams. Agile: An adaptive approach based on incremental delivery, collaboration, feedback, and reprioritization. DevOps: Integration of development and operations through shared responsibility and automation. DevSecOps: Extension of DevOps that embeds security, privacy, and compliance throughout delivery. Experimentation: Structured testing of hypotheses to obtain evidence under uncertainty. Minimum viable product: Limited product or service designed to generate validated learning with controlled exposure. Technical debt: Future cost and risk created by expedient or insufficient technical decisions. Legacy system: Existing technology and associated institutional knowledge that constrain or support current operations. Encapsulation: Exposing selected legacy functions through interfaces while reducing direct dependence on the old system. Automation: Use of technology to perform tasks or decisions with limited human intervention. Benefits realization: Disciplined process of defining, measuring, and assigning responsibility for expected outcomes. Change readiness: Degree to which people, processes, leadership, and capabilities are prepared for change. Responsible innovation: Innovation governed to account for ethical, social, legal, safety, and environmental consequences. Outcome metric: Measure of achieved value or impact rather than merely completed activity. Guardrail: Explicit boundary that permits decentralized action while controlling material risk. Review QuestionsShort Answer Questions1. Distinguish digitization, digitalization, and digital transformation. 2. What is the strategic purpose of a transformation portfolio? 3. How does DevSecOps differ from conventional security review at the end of development? 4. Why can legacy modernization not be treated as a purely technical migration? 5. What is meant by an outcome metric? Long Answer Questions1. Explain how a product operating model changes funding, accountability, team design, and governance. 2. Discuss the role of experimentation in digital innovation, including hypotheses, evidence thresholds, and ethical safeguards. 3. Compare the principal legacy-modernization strategies and explain when different strategies may be appropriate. 4. Analyze the relationship between organizational culture, leadership behavior, workforce capability, and transformation outcomes. 5. Develop a governance approach for a transformation portfolio that includes cybersecurity, privacy, architecture, benefits realization, and risk management. Analytical / Application Questions1. An organization has high release frequency but rising incidents, security vulnerabilities, and user dissatisfaction. Diagnose the problem and propose a revised measurement and governance approach. 2. A public agency wants to automate eligibility decisions using machine learning. Design an evaluation framework addressing data quality, fairness, explainability, human oversight, accessibility, and accountability. 3. A bank proposes a complete replacement of its core system in one release. Using the chapter's concepts, assess the proposal and recommend a sequenced modernization strategy. 22. Multiple Choice Questions with AnswersQuestion 1Which situation best represents digital transformation rather than simple digitalization? A. Scanning paper invoices into PDF files B. Automating approval routing for an existing process C. Redesigning the operating model around continuously delivered, data-enabled customer services D. Replacing desktop computers with newer models Correct Answer: C. Redesigning the operating model around continuously delivered, data-enabled customer services Question 2What is the primary governance advantage of viewing transformation as a portfolio? A. It guarantees that every initiative will succeed B. It coordinates strategic value, dependencies, capacity, and risk across initiatives C. It eliminates the need for project management D. It permits all teams to select unrelated technologies Correct Answer: B. It coordinates strategic value, dependencies, capacity, and risk across initiatives Question 3A product operating model primarily organizes work around: A. Temporary project budgets B. Vendor contracts C. Permanent functional departments D. Enduring user or business outcomes Correct Answer: D. Enduring user or business outcomes Question 4Which practice most clearly reflects DevSecOps? A. Conducting one security audit after deployment B. Leaving security decisions exclusively to a separate compliance department C. Embedding automated security checks and shared security responsibility throughout delivery D. Delaying testing until requirements are fully frozen Correct Answer: C. Embedding automated security checks and shared security responsibility throughout delivery Question 5What makes an experiment strategically useful? A. It has a large budget and extensive documentation B. It tests an explicit hypothesis with defined evidence and a decision rule C. It guarantees a positive result before implementation D. It avoids user involvement to reduce complexity Correct Answer: B. It tests an explicit hypothesis with defined evidence and a decision rule Question 6Why might encapsulating a legacy system be preferable to immediate replacement? A. It removes all technical debt instantly B. It allows selected capabilities to be reused while reducing direct dependence and transition risk C. It guarantees that the legacy system will never need retirement D. It eliminates the need for data governance Correct Answer: B. It allows selected capabilities to be reused while reducing direct dependence and transition risk Question 7An automated benefits decision produces errors for unusual household arrangements. What is the most responsible immediate response? A. Scale the system because average accuracy is acceptable B. Remove all human review to improve efficiency C. Restrict the system to decision support and require appropriate human review D. Hide the error pattern until the next budget cycle Correct Answer: C. Restrict the system to decision support and require appropriate human review Question 8Which measure is most directly an outcome measure rather than a delivery measure? A. Number of features released B. Number of sprint meetings completed C. Percentage of planned tasks closed D. Reduction in customer processing time with maintained service quality Correct Answer: D. Reduction in customer processing time with maintained service quality Question 9Why can culture not be changed effectively through slogans alone? A. Culture is unrelated to leadership behavior B. Shared practices are reinforced by incentives, decisions, resources, and responses to failure C. Employees never influence transformation D. Technology automatically determines organizational behavior Correct Answer: B. Shared practices are reinforced by incentives, decisions, resources, and responses to failure Question 10Which governance principle is most appropriate for transformation initiatives? A. Apply identical approval procedures regardless of risk B. Remove governance from experimental work entirely C. Match governance intensity to uncertainty, impact, and risk D. Allow only executives to make all implementation decisions Correct Answer: C. Match governance intensity to uncertainty, impact, and risk
|