Change Management

Technology Is Easy. Transformation Is About People.

Lessons from legacy modernisation programs — where architecture, governance, and security are only half the story. The other half is people.

Every legacy modernisation conversation starts the same way: a whiteboard, a target architecture, and a diagram full of boxes with names like "microservices" and "serverless" and "event-driven." It's the easiest part of the whole program, and also the part everyone wants to talk about.

Having taken systems from monolithic Core Java and on-premise MySQL to AWS Serverless — and having done the same, years earlier, moving hospital information systems between platforms without ever taking clinical operations offline — I can say with some confidence that the architecture diagram is rarely where these programs succeed or fail.

Technology is often the easier part. Transformation is about people.

An organization can purchase the best software. It can hire talented developers. It can move applications to the cloud and implement modern tools. But none of these investments automatically create transformation. Real transformation happens when people change the way they think, work, collaborate, and solve problems.

The migration plan is the real deliverable

A target architecture tells you where you're going. It says almost nothing about how you get there without breaking what's already running.

Legacy systems are rarely modernised in one clean cutover. They're modernised in a sequence — which module moves first, what stays on the old platform while the new one is proven, how data stays consistent across both during the transition, and what the rollback plan looks like if something goes wrong at 2 a.m. during a peak period.

I've found that the migration sequencing takes longer to get right than the target design itself — and that's exactly as it should be. Getting it wrong doesn't show up as a bad diagram. It shows up as an outage.

Governance decides whether "temporary" becomes permanent

Every modernisation program creates a period where two systems exist at once. That period is where technical debt is either contained or quietly made permanent.

Without clear governance — who owns which system during the transition, what the exit criteria are for retiring the old platform, what "done" actually means — that temporary dual-running state has a way of becoming the new normal. I've seen "we'll decommission that in a quarter" turn into eighteen months, simply because nobody was accountable for closing it out.

Governance, in practice, is unglamorous: a decommissioning checklist, a named owner, a review cadence, a hard date. None of it appears in the architecture diagram. All of it determines whether the diagram ever becomes reality.

Operational readiness is not the same as "it works in staging"

A modernised system that passes every test case can still fail its first real day in production, because testing rarely reproduces the actual conditions that matter — traffic spikes, partial failures, monitoring gaps, an on-call engineer seeing an unfamiliar alert for the first time.

Before any platform I've modernised went fully live, the questions that mattered most weren't about the code:

  • Do we have monitoring and alerting for the new system, not just the old one?
  • Does the support team know how to triage an incident on the new architecture?
  • Have we load-tested at the traffic levels we actually see during peak campaigns, not average ones?
  • Is there a tested rollback path, or only a theoretical one?

A system that's architecturally elegant but operationally unready isn't modernised. It's just risk with better documentation.

Security has to move with the architecture, not after it

New architecture usually means a new attack surface — new APIs, new integration points, new identity and access patterns, cloud infrastructure with different default assumptions than an on-premise data centre. Treating security as a review that happens near the end of a migration, rather than a design input from the start, is one of the most common ways these programs quietly create new vulnerabilities while fixing old technical debt.

All of this — sequencing, governance, operational readiness, security — is real work, and it's why modernisation programs take the shape they do on a project plan. But none of it is actually the hardest part. The hardest part is what happens next.

Technology can be implemented. Change must be accepted.

Implementing a new system is usually a project. It has requirements, timelines, budgets, developers, testing, and deployment plans. But changing the way people work is very different.

People may be comfortable with existing processes, even when those processes are inefficient. A new system may be faster. An automated process may reduce manual work. A digital platform may provide better visibility. Yet people may still prefer the old way.

Why? Because change creates uncertainty. People may wonder:

  • Will I be able to learn this new system?
  • Will automation affect my role?
  • Why do we need to change something that is already working?
  • What happens if the new process fails?
  • Will this make my work more difficult?

These questions are natural. This is why digital transformation cannot be treated as only a technology project. It is also a people and change management journey — and it's the part most modernisation plans give the least attention to, even though it's usually what determines whether the new platform is actually adopted or quietly worked around.

Communication is a critical part of transformation

A successful transformation does not begin with a system going live. It begins with communication. People should understand what is changing, why it is changing, how it will affect the current process, what benefits it will bring, and what support will be available during the transition.

In my experience, communication is not something that should happen only at the beginning of a project. It needs to continue throughout the journey. Regular updates, discussions, demonstrations, feedback sessions, and training can make a significant difference.

Transformation should not feel like something being forced on people. People should feel that they are part of the journey.

Leadership is about creating confidence

During periods of change, people look to leadership for confidence. They want clarity. They want direction. They want to know that someone understands the challenges they are facing.

A technology leader's role is not only to select the right platform or architecture. Leadership also means helping teams navigate uncertainty. Sometimes a transformation initiative will not go exactly as planned — there may be delays, unexpected technical issues, resistance from users, even failures. This is where leadership becomes important. Instead of focusing only on what went wrong, we need to ask: what did we learn, what can we improve, how can we move forward?

Transformation requires a culture where people are not afraid to identify problems. Because problems that are hidden do not disappear. They simply become bigger.

The best ideas often come from the people doing the work

Transformation should not always be designed only from the top. The people who work with a process every day often understand its challenges better than anyone else. They know where time is being wasted, which steps create unnecessary work, and what customers or internal teams struggle with.

Before automating or redesigning a process, we should listen to the people involved. Technology should solve real problems, not create new ones. When employees are involved in the transformation process, they are also more likely to support the change — they become contributors rather than simply users who are asked to adapt.

Transformation requires both technology and empathy

Technology leaders often focus on systems, architecture, security, scalability, and performance. These are important. But transformation also requires something equally important: empathy.

A new system may be technically excellent but still fail if users find it difficult to use. An automated process may be efficient but create frustration if it does not consider real-world requirements. The question should not only be "can we build this?" It should also be "will this genuinely help the people who use it?"

That difference can determine whether a transformation succeeds or fails.

My perspective

After working across different technology environments and transformation initiatives, I have come to believe that technology is only one part of the equation. Technology provides the tools. Processes provide the structure. But people create the transformation.

Digital transformation is not about replacing people with technology. It is about empowering people with better technology, removing unnecessary complexity, and creating better experiences — helping organizations become more adaptable, and helping people embrace change with confidence.

You can buy technology. You can build software. You can automate processes. But you cannot simply install transformation. Transformation happens when people believe in the change, understand the purpose, and become part of the journey.

The diagram gets you funding. The people get you a system anyone actually trusts.