Orchestrating Organizational Change: Dr. John Kotter’s Eight Steps for Leading Successful Change
Why Organizational Transformation Requires Leadership, Employee Engagement, and a Structured Change Management Process
John C. Blackshire, Jr. Corporate Compliance Seminars (CCS) | Management, Leadership, and Professional Development
Organizations are constantly being challenged to change.
Artificial intelligence is transforming business processes. Cybersecurity threats are forcing organizations to rethink information security. New regulations require updated policies and internal controls. Competition demands greater efficiency, while employees must adapt to new technologies, organizational structures, and management expectations.
Yet many organizations struggle to implement change successfully.
Management announces a new initiative, establishes a project team, communicates the objectives, and expects employees to adopt the new approach.
Several months later, the organization discovers that employees are still following the old procedures, managers are resisting implementation, and the expected benefits have not materialized.
The problem is often not the proposed change itself.
The problem is that management has failed to lead the human and organizational processes necessary to make the change successful.
One of the most influential frameworks for addressing this challenge is Dr. John P. Kotter’s Eight-Step Process for Leading Change.
Kotter, a Harvard Business School professor and internationally recognized authority on leadership and organizational transformation, introduced his original eight-step framework in Leading Change, published in 1996. The methodology has subsequently evolved into eight interconnected accelerators for organizational change.
The central lesson remains highly relevant: Successful organizational change requires more than a management directive. It requires urgency, leadership, a shared vision, broad participation, and reinforcement of new behaviors.
Corporate Compliance Seminars (CCS) explores these principles in its Orchestrating Organizational Change CPE Event, a practical two-CPE program designed for managers, internal auditors, control professionals, and organizational leaders.
Why Organizational Change Is So Difficult
Organizations are composed of people, processes, technologies, policies, and established ways of working.
Over time, employees develop habits and expectations about how work should be performed.
Managers establish departmental priorities and reporting relationships.
Information systems are configured to support existing workflows.
Performance measures and incentives reinforce current practices.
A significant organizational change can disrupt all these elements.
For example, implementing a new enterprise resource planning system may require changes in purchasing, Accounts Payable, inventory management, financial reporting, and internal controls.
The technical installation may be successful while the organizational transformation fails.
Employees may not understand why the system is necessary. Managers may be reluctant to give up established processes. Training may be insufficient, and legacy procedures may remain in use.
Kotter's model addresses these challenges by recognizing that successful transformation requires coordinated leadership and sustained employee engagement.
Understanding Kotter's Eight Steps
Kotter's current Eight-Step Process for Leading Change includes:
Step | Change leadership objective |
1. Create a Sense of Urgency | Establish why change is necessary now |
2. Build a Guiding Coalition | Assemble credible leaders and change advocates |
3. Form a Strategic Vision | Define the desired future and supporting initiatives |
4. Enlist a Volunteer Army | Build broad employee commitment |
5. Enable Action by Removing Barriers | Eliminate obstacles preventing progress |
6. Generate Short-Term Wins | Demonstrate visible results early |
7. Sustain Acceleration | Use momentum to expand and deepen change |
8. Institute Change | Embed new behaviors in organizational culture |
Although commonly described as eight steps, Kotter's updated framework emphasizes that the activities can reinforce one another and operate concurrently.
Let's examine each step and its practical application.
Step 1: Create a Sense of Urgency
Why must the organization change now?
One of the greatest obstacles to organizational transformation is complacency.
Employees and managers may recognize that improvements are possible but see no compelling reason to act immediately.
Statements such as "We have always done it this way" or "Our existing process works well enough" are common.
Kotter emphasizes the importance of creating a genuine sense of urgency.
Management must explain why maintaining the status quo creates risks or causes the organization to miss important opportunities.
For example, a financial institution may need to modernize its fraud detection systems because criminals are increasingly using artificial intelligence and sophisticated social engineering.
Management should explain the emerging threats, limitations of existing controls, and benefits of a stronger fraud prevention program.
A compelling case for change should answer three questions:
What is happening in our operating environment?
Why is the current approach no longer sufficient?
What will happen if we fail to respond?
Urgency should be supported by credible evidence rather than exaggerated threats.
Practical example
An organization discovers that vendor banking-information changes are not independently authenticated.
Rather than simply issuing a new policy, management explains the risk of fraudulent payment diversion, the potential financial consequences, and the importance of protecting vendor relationships.
Employees understand why the new procedures matter.
That understanding creates a foundation for change.
Step 2: Build a Guiding Coalition
Change cannot depend on one executive
Significant organizational transformation requires leadership across departments and organizational levels.
A CEO may authorize a major initiative, but successful implementation depends on managers, supervisors, technical specialists, and employees who understand the work.
Kotter calls for a guiding coalition—a group of influential individuals committed to leading and coordinating the change.
An effective coalition should include people with complementary expertise, credibility, leadership ability, and organizational influence.
For example, an organization implementing AI-enabled financial analytics might establish a coalition consisting of:
Chief Financial Officer.
Information Technology leadership.
Operational managers.
Information Security personnel.
Human Resources representatives.
Employees with relevant technical expertise.
The coalition should share a commitment to the initiative and understand its intended benefits.
The role of internal audit
Internal auditors may provide independent insights concerning risks, control implications, and governance requirements.
However, management should own the transformation.
Internal Audit must preserve its independence and avoid assuming operational responsibility for designing or implementing controls it may subsequently evaluate.
Step 3: Form a Strategic Vision
Employees need to understand the destination
A major change initiative requires a clear description of the future state.
Management should explain what the organization is trying to accomplish and how the proposed changes support its strategic objectives.
A vague statement such as "We are modernizing our operations" is not sufficient.
Employees need to understand what will be different and why the changes are beneficial.
A stronger vision might be: "Within 12 months, our organization will implement a fully documented vendor onboarding and payment process that reduces manual errors, strengthens fraud prevention, and improves payment processing efficiency."
That statement identifies a direction and desired outcomes.
Management can then establish supporting initiatives, performance measures, and implementation milestones.
A strategic vision should be understandable, achievable, and connected to organizational priorities.
It should also help employees recognize how their work contributes to the transformation.
Step 4: Enlist a Volunteer Army
Employees must become participants, not just recipients
One of Kotter's most important insights is that organizational change cannot succeed through executive direction alone.
Employees must become active participants.
The phrase "volunteer army" describes a broad network of people who choose to contribute because they understand and support the opportunity.
This does not mean organizational changes are optional.
It means successful implementation depends on genuine engagement rather than mere compliance with instructions.
Management should communicate the vision repeatedly, invite employee participation, encourage questions, and create opportunities for people to contribute ideas.
Employees often understand operational problems that senior executives do not see.
Their knowledge can improve the design and implementation of new processes.
Practical example
A company introducing a new expense reporting system invites employees from several departments to participate in pilot testing.
Participants identify workflow problems, recommend improvements, and help train colleagues.
Their involvement improves the system and builds organizational support.
The employees become advocates for change rather than passive recipients of a management directive.
Step 5: Enable Action by Removing Barriers
Management must eliminate obstacles to implementation
Even employees who support change may be unable to act because of organizational barriers.
These barriers may include outdated policies, inadequate technology, insufficient training, conflicting performance measures, or supervisors who resist the initiative.
Kotter emphasizes removing obstacles that prevent employees from contributing to the transformation.
Management should ask:
Do employees have the authority necessary to implement the change?
Are existing policies inconsistent with the new approach?
Are managers reinforcing or obstructing the initiative?
Are employees receiving adequate training?
Are performance measures encouraging old behaviors?
Are the necessary resources available?
Consider an organization that wants to automate its purchasing process.
If employees are still required to obtain multiple paper approvals before using the new system, the organization may have created a technological improvement without changing the underlying workflow.
Management must align processes, policies, responsibilities, and technology with the desired future state.
Step 6: Generate Short-Term Wins
Early success builds confidence
Major organizational changes may require months or years to complete.
Employees can become discouraged when progress is difficult to observe.
Kotter recommends generating meaningful short-term wins that demonstrate the benefits of the transformation.
These wins should be measurable, credible, and directly related to the strategic vision.
For example, an organization implementing stronger Accounts Payable controls might initially focus on its highest-risk vendors.
Within 60 days, management could demonstrate that all banking-information changes for those vendors are being independently authenticated.
That achievement provides evidence that the new process is working.
Short-term wins can strengthen employee confidence, increase management support, and justify continued investment.
However, organizations should avoid celebrating activity as though it were an outcome.
Completing a training program is an accomplishment.
Demonstrating that employees consistently apply the new procedures is stronger evidence of successful change.
Step 7: Sustain Acceleration
Do not declare victory too early
One of the greatest dangers in organizational change is losing momentum after initial improvements.
Management may announce that the project is complete because a new system has been installed or a new policy has been approved.
But employees may still be learning the process, operational problems may remain unresolved, and important controls may not yet be effective.
Kotter emphasizes using early successes to accelerate additional improvements.
Management should continue removing barriers, expanding successful practices, addressing resistance, and measuring performance.
For example, after implementing improved vendor authentication controls, management might expand the initiative to duplicate vendor detection, automated exception reporting, and continuous monitoring of vendor master file changes.
The initial success becomes the foundation for additional improvements.
Organizational change should not stop when a project milestone is achieved. It should continue until the intended operational results are consistently realized.
Step 8: Institute Change
Make the new approach part of organizational culture
The final step involves embedding successful changes into the organization's normal way of operating.
Employees should no longer view the new process as a temporary project or special initiative.
It should become part of established expectations, training, performance management, policies, and internal controls.
For example, a company that introduces stronger vendor authentication procedures should incorporate those requirements into employee onboarding, written procedures, supervisory reviews, and ongoing monitoring.
Management should also explain how the new practices contributed to improved results.
This helps employees understand why the change should continue.
Sustained change requires alignment among leadership behavior, organizational culture, operating processes, and accountability.
Without that reinforcement, employees may gradually return to previous practices.
The Eight Steps in Practice: Implementing an AI Initiative
Consider an organization introducing artificial intelligence to support financial analysis, audit analytics, and operational reporting.
Kotter's framework can guide the transformation.
Kotter step | Example AI implementation activity |
Create urgency | Explain competitive, productivity, and risk management reasons for adopting AI |
Build coalition | Establish a management-led team representing Finance, IT, Security, HR, and Operations |
Form vision | Define approved AI applications, expected benefits, and governance requirements |
Enlist volunteers | Recruit employees to participate in controlled pilot projects |
Remove barriers | Provide training, approved tools, data access rules, and appropriate controls |
Generate wins | Demonstrate measurable improvements in selected reporting processes |
Sustain acceleration | Expand successful use cases and refine governance practices |
Institute change | Integrate AI governance, training, monitoring, and performance expectations into normal operations |
The technology is only one component of the transformation.
Leadership, employee acceptance, governance, and operational integration determine whether the initiative produces lasting value.
Overcoming Management Denial and Resistance to Change
Resistance to change is not always irrational.
Employees and managers may have legitimate concerns about cost, workload, job security, operational disruption, or whether the proposed solution will work.
However, management denial can also prevent organizations from recognizing serious problems.
Leaders may minimize control weaknesses, dismiss emerging risks, or resist changes that challenge established authority.
One useful communication approach is SPIN questioning, developed by Neil Rackham.
SPIN stands for Situation, Problem, Implication, and Need-Payoff.
This methodology can complement Kotter's change process by helping individuals understand why change is necessary.
Situation questions
How does the existing process operate?
What systems, personnel, and procedures are involved?
Problem questions
Where are employees experiencing difficulties?
Which controls are ineffective?
What problems have occurred?
Implication questions
What happens if the problem continues?
How could the weakness affect financial performance, compliance, customers, or organizational objectives?
Need-Payoff questions
What would improve if the problem were corrected?
How would the organization benefit from a more effective process?
SPIN questioning helps management and employees examine problems constructively.
It is particularly useful when introducing changes resulting from internal audit findings, risk assessments, or compliance reviews.
Rather than simply telling managers what to do, the approach helps them recognize the problem and participate in developing a solution.
Organizational Change and the COSO Internal Control Framework
Organizational transformation should also be evaluated from an internal control perspective.
Major changes can create new risks even when they are intended to improve efficiency.
For example, implementing a new financial system may affect segregation of duties, transaction approvals, access controls, financial reporting, and monitoring activities.
The COSO Internal Control–Integrated Framework provides a useful structure for considering these risks.
The five components are:
Control Environment.
Risk Assessment.
Control Activities.
Information and Communication.
Monitoring Activities.
Management should assess how the proposed transformation affects each component.
A new system should not be considered successful merely because it processes transactions more quickly.
Management must also determine whether it supports reliable information, effective risk management, and appropriate internal controls.
Kotter's framework helps leaders manage the human and organizational aspects of transformation.
COSO helps management evaluate the internal control implications.
Together, they provide complementary perspectives.
What Is Internal Audit's Role in Organizational Change?
Internal auditors frequently identify the need for organizational improvement.
Audit findings may reveal ineffective processes, inadequate controls, outdated technology, or weaknesses in governance.
However, Internal Audit should not become the owner of management's corrective actions.
The first and second lines of the organization generally possess deeper operational knowledge and are responsible for managing risks and implementing controls.
Internal Audit should independently assess the risks associated with the transformation, evaluate the adequacy of controls, and report significant concerns.
Where an audit finding identifies a weakness, management should develop a Management
Action Plan describing the corrective actions, responsible owner, and implementation deadline.
Internal Audit should then evaluate whether the proposed actions adequately address the risk and independently confirm implementation.
Kotter's methodology can help management successfully execute these action plans.
For example, a significant audit finding involving weak cybersecurity controls may require more than updating a policy.
Management may need to establish urgency, secure executive support, involve employees, remove implementation barriers, demonstrate early results, and institutionalize stronger security practices.
This is organizational change management in action.
Beyond Kotter: Other Change Management Frameworks
Kotter's Eight-Step Process is a major focus of the CCS program, but it is not the only useful approach.
The Orchestrating Organizational Change event also introduces other established models.
Prosci ADKAR Model: Focuses on individual change through Awareness, Desire, Knowledge, Ability, and Reinforcement.
Lewin's Change Management Model: Describes change through Unfreeze, Change, and Refreeze.
McKinsey 7-S Framework: Examines alignment among strategy, structure, systems, shared values, skills, style, and staff.
Bridges' Transition Model: Focuses on the psychological adjustments individuals experience during change.
These models address different dimensions of transformation.
Kotter provides an organization-wide leadership process, while ADKAR places greater emphasis on individual adoption.
Lewin offers a broad view of moving from an existing state to a new one.
McKinsey's 7-S Framework helps evaluate organizational alignment, and Bridges' model addresses the human transition.
Managers can use these approaches together when appropriate rather than treating them as mutually exclusive alternatives.
Seven Common Reasons Organizational Change Fails
Organizations frequently encounter predictable implementation problems.
No compelling urgency. Employees do not understand why the change is necessary.
Weak leadership commitment. Executives announce the initiative but do not actively support it.
Unclear vision. Employees cannot explain what the organization is trying to achieve.
Insufficient employee engagement. The initiative is imposed without meaningful participation.
Organizational barriers remain. Policies, systems, incentives, or managers prevent progress.
No measurable early results. Employees lose confidence because benefits are not visible.
Failure to institutionalize change. The organization returns to previous practices after the project ends.
Kotter's model provides a practical way to address these challenges.
How Should Management Measure Change Success?
Management should establish meaningful measures before implementing a major transformation.
The appropriate measures depend on the initiative.
Examples include:
Measurement area | Potential indicators |
Employee adoption | Percentage of affected employees consistently using the new process |
Operational efficiency | Processing time, cost per transaction, rework |
Internal control effectiveness | Control exceptions, unresolved deficiencies |
Training effectiveness | Demonstrated competency and successful application |
Financial performance | Cost savings, avoided losses, productivity improvements |
Stakeholder satisfaction | Employee and customer feedback |
Sustainability | Continued performance after project completion |
Management should distinguish implementation milestones from actual outcomes.
Installing software is a milestone.
Achieving sustained improvements in processing accuracy, productivity, and control effectiveness is an outcome.
Conclusion: Organizational Change Must Be Led, Not Merely Announced
Successful organizational change requires more than a good strategy or new technology.
It requires leadership capable of helping employees understand the need for change, participate in the transformation, overcome obstacles, and adopt new ways of working.
Dr. John Kotter's Eight-Step Process provides a structured framework for accomplishing these objectives.
The model begins with urgency and a guiding coalition.
It progresses through a strategic vision, broad participation, and the removal of barriers.
It builds momentum through short-term wins and sustained acceleration.
Finally, it emphasizes making the new behaviors part of the organization's culture.
or executives, managers, internal auditors, and control professionals, the lesson is clear:
An organization does not achieve meaningful change simply because management announces a new direction. It achieves change when people understand the need, support the objectives, and consistently operate in the new way.
That is the difference between announcing organizational change and successfully orchestrating it.
Earn 2 CPE Credits: Orchestrating Organizational Change
Corporate Compliance Seminars offers Orchestrating Organizational Change, an interactive professional development program focused on proven methods for leading and sustaining organizational transformation.
The event examines Kotter's Eight-Step Change Model along with ADKAR, Lewin's Change Management Model, McKinsey's 7-S Framework, and Bridges' Transition Model.
Participants will explore practical approaches to creating urgency, building leadership coalitions, communicating a strategic vision, engaging employees, overcoming resistance, generating short-term wins, and embedding change into organizational culture.
Program details
CPE credits: 2
Field of study: Business Management & Organization
Program level: Basic
Prerequisites: None
Format: Live, interactive, group internet-based training
Private group training: Available for teams of two or more
This program is particularly relevant to executives, managers, internal auditors, compliance professionals, risk managers, and organizational leaders responsible for implementing change.
Learn more and register:
Visit Corporate Compliance Seminars for additional professional education in leadership, internal auditing, internal controls, risk management, and organizational improvement.
Comments