13.1 Change Management as Risk Management and the Two-Step Assessment

The final syllabus area covers what the change manager actually produces: impact assessment, resistance management and change analytics. It opens with a framing that is worth taking seriously.

Change management as risk management

Change management is an important risk management strategy.

That single sentence changes how the discipline should be positioned in an organisation. Change management is often presented as the soft complement to project delivery — the people bit, funded if there is money left. Framing it as risk management puts it where it belongs: as the activity that protects the investment.

CM3 explains the mechanism. Effective change teams will seek to understand the organisational context for change and adapt accordingly. This involves balancing the relationship between:

• Planned outcomes
• The risks of not achieving desired benefits
• The effect on business-as-usual stability

That third element is the one project governance usually omits. A change can deliver its outcomes and still damage the organisation, if the disruption to business as usual costs more than the benefit is worth or arrives at a moment the organisation cannot absorb it. Assessing impact is how you find that out before it happens rather than afterwards.

This is also a practical argument a change manager can use with a sponsor. "Impact assessment is how we find out whether this destabilises operations" is a proposition executives fund. "Impact assessment helps us understand the people side" is not.

The two-step assessment

Assessing change impact and severity is a two-step process:

Step 1 — Categorise and identify the impacts

The first step is to categorise and identify the impacts from the viewpoint of the organization and stakeholder. The change team uses this information to determine gaps or barriers to achieving the end outcome.

Note both viewpoints — organisation and stakeholder. An impact that is trivial from the organisation's perspective can be substantial from a stakeholder's, and vice versa. Assessing from only one viewpoint produces a systematically distorted picture.

Note also the purpose: identifying gaps or barriers to achieving the end outcome. Impact assessment is not an inventory exercise. It exists to reveal what stands between here and the outcome, which is why it feeds directly into the change plan.

Step 1 has four sub-steps, covered in the next two sections:

1. Categorising change impacts
2. Identifying impact areas
3. Undertaking a gap analysis
4. Determining impact profiles

Step 2 — Define the severity

The second step is to define the severity of these impacts for each of the stakeholder groups. You should consider the environment and change maturity of the organization as part of this.

Severity is assessed per stakeholder group, not for the change as a whole. The same change can be a minor adjustment for one group and a fundamental disruption for another, and averaging the two produces a number that describes nobody's experience.

Step 2 has three sub-steps:

1. Categorising costs
2. Determining organisational factors
3. Determining stakeholder factors

Why severity is assessed separately from impact

The separation matters. Impact describes what changes. Severity describes how much that change matters, given the organisation's environment and change maturity and the stakeholder group's situation.

The same impact carries different severity in different contexts. Replacing a familiar system is a moderate impact everywhere; its severity is far higher in an organisation with a poor history of change, low change maturity, and a workforce already absorbing two other initiatives. That is why organisational factors and stakeholder factors form the second step rather than being folded into the first.

The practical output of the two steps together is a prioritised picture: which groups are most severely affected, what stands between them and the outcome, and therefore where change effort should concentrate. Change plans built without it distribute effort evenly across a population whose needs are not even, which is why so much change activity lands where it is not needed and misses where it is.

Impact, severity and the minimum viable change

The assessment also informs prioritisation of the change work itself. When assessing the impact and severity of each idea, it is important to review the cost against the value obtained from implementing the change, and this supports good prioritisation and informs the Minimum Viable Change Process. Impact assessment is therefore not only about protecting stakeholders; it is how the change manager decides where to spend a finite change budget.

Positioning the assessment with a sponsor

Impact assessment is often the first substantial ask a change manager makes, and it is frequently refused because of how it is framed. Two framings behave very differently.

"We need to assess the people impact of the change" invites the response that the organisation already knows who is affected, and that the assessment is process for its own sake.

"We need to establish which groups this destabilises, how severely, and what that does to operational capacity during the transition" invites a different response, because it is a question about business risk that the sponsor is accountable for and cannot currently answer.

The second framing is also more honest about what the assessment produces. Its outputs are decisions: whether the delivery strategy is survivable for a particular group, whether the sequencing needs to change, where support resource must concentrate, and — occasionally — whether the change should proceed on the proposed timescale at all.

That last possibility is what gives the assessment its value. An impact assessment that could never change the plan is documentation. One that could is risk management, which is exactly how CM3 frames it.