---
title: 10 Lessons Learned About Change Resistance for Cybersecurity
description: This article outlines best practices for overcoming resistance and paving a faster path to success.
---

[KiZAN Blog ](https://www.kizan.com/blog)

# [10 Lessons Learned About Change Resistance for Cybersecurity](https://www.kizan.com/blog/10-lessons-learned-about-overcoming-zero-trust-change-resistance)

 Written by [Cliff Embry](https://www.kizan.com/blog/author/cliff-embry) | Sep 15, 2022 7:00:00 PM

One of the largest hurdles to cybersecurity change for any organization is resistance. This article outlines best practices for overcoming resistance and paving a faster path to success.

Over the years, I have worked with hundreds of customers to implement change and have rarely been the one to communicate those changes to end users. I was “fortunate” to work in the background and let either the customer handle change management processes or leverage KiZAN’s [Employee Engagement Group](https://www.kizan.com/eeg-home) to champion the change with the customer. However, recent projects have necessitated my direct involvement with change management processes. Here are my lessons learned...so far!

 

## The necessity of effective change management for security initiatives

 

KiZAN has ongoing internal projects to implement additional security controls for everyone at our company. As new Microsoft technology is released, we are expected to adopt it. The catch is that I know almost everyone at the company. I’ve been here for nearly 15 years. This makes me think about the projects differently because I’m speaking directly to the consumer of cybersecurity changes. And as one could expect, I feel their pain more when I’m not the man behind the curtain.

I talk to my co-workers about their pain. I try to strategize solutions for said pain and in doing so, I have come to realize that even when I think I’m speaking in “plain English,” I am not “communicating.” I’m speaking about technology. I’m speaking about “How” and the most obvious (*to me*) “Why’s.”

I received feedback that my message came across as:

 

> *“We are going to leverage technology X’s blank capabilities to do something with something.”*

This is an actual email I received from one of my co-workers:

 

> *“Hey Cliff, I have 0 knowledge about what you discussed. It was a fantastic presentation and I’m wowed with your knowledge. I NEVER use my cell phone for work. EVER. Can’t get to emails…nothing. Do I need to do anything?”*

I know this person and have worked with them for years. I’m glad they felt they could reach out and it has most certainly opened my eyes. So, I contacted our [Employee Engagement Group](https://www.kizan.com/eeg-home), who are Prosci certified, to ask them “How can I communicate better, reduce friction, and successfully roll out new security features?” This is what I learned

 

## Top 10 tactics for Managing Resistance (By Prosci) and interpreted by me:

 

1. Listen and understand objectives
2. Focus on the ‘what’ and let go of the ‘how’
3. Remove Barriers
4. Provide simple, clear choices and consequences
5. Create hope
6. Show the benefits in a real and tangible way
7. Make a personal appeal
8. Convert the strongest dissenters
9. Demonstrate consequences
10. Provide Incentives

I've been working on a 10-piece puzzle with 4.5 pieces. Although the deployment is underway, because it is still in a pilot mode, I still have a chance to adopt some of these tactics and ease the transition for my co-workers, and quite frankly, many friends.

Prior to this project, I had zero interest in change management. Now I can honestly say I’m intrigued and will continue to work with our [Employee Engagement Group](https://www.kizan.com/eeg-home) to put a KiZAN spin on our internal security adoption.

## Organizational Change Management

Understand key concepts | Identify effective tools and processes | Educate key stakeholders

 

[Learn More

](https://info.kizan.com/organizational-change-management)

<https://www.kizan.com/advanced-analytics-group-home>

 

KiZAN is a Microsoft National Solutions Provider with numerous gold and silver Microsoft competencies, including gold data analytics. Our primary offices are located in Louisville, KY, and Cincinnati, OH, with additional sales offices located in Tennessee, Indiana, Michigan, Pennsylvania, Florida, North Carolina, South Carolina, Georgia and Texas.

[View full post](https://www.kizan.com/blog/10-lessons-learned-about-overcoming-zero-trust-change-resistance)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Cliff Embry"
  },
  "dateModified" : "2022-09-15T19:29:55.339Z",
  "datePublished" : "2022-09-15T19:00:00Z",
  "headline" : "10 Lessons Learned About Change Resistance for Cybersecurity",
  "image" : {
    "@type" : "ImageObject",
    "height" : 1035,
    "url" : "https://2059240.fs1.hubspotusercontent-na1.net/hubfs/2059240/10%20Lessons%20Learned%20About%20Change%20Resistance%20for%20Cybersecurity.jpg",
    "width" : 2000
  },
  "mainEntityOfPage" : "https://www.kizan.com/blog/10-lessons-learned-about-overcoming-zero-trust-change-resistance",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/2059240/KiZAN_logoBlueOrgDot120px.png",
      "width" : 124.0
    },
    "name" : "KiZAN Blog"
  }
}
```