Business Transformation Framework

A business transformation framework is only useful if it reflects the realities organisations actually face — not the realities of five years ago. In 2026, that means integrating AI adoption, EU regulatory compliance, and disciplined portfolio management into a coherent approach.

Most frameworks fail for the same reason: they describe a destination without describing the decisions. They tell you to “align strategy and execution” without saying who decides what, in which order, and what gets stopped to make room. The framework below is deliberately built around those decisions, because that is where transformations actually stall.

The Oosterwal Business Transformation Framework

Oosterwal Consultancy works with a practical, structured approach to business transformation that addresses four interconnected dimensions:

Customers & Services — What do you offer, to whom, and through which channels? How does AI change what is possible and expected?
Processes & Organisation — Which processes need to change, who owns the change, and how is adoption governed?
Information & Applications — What data infrastructure and tooling supports the transformation? How are AI systems integrated responsibly?
Technology & Compliance — What infrastructure is needed, and what regulatory frameworks apply — including ISO standards and the EU AI Act?

These four dimensions are not worked on in sequence. They are interdependent, and the framework makes those interdependencies visible and manageable.

That interdependence is the part most transformation plans underestimate. A new customer proposition that nobody owns operationally becomes a marketing promise. A process redesign without the data to support it becomes a manual workaround. An AI system introduced without a compliance view becomes a liability the moment it touches a hiring, credit or safety decision. The framework’s job is not to keep these four dimensions separate but to force the conversation about where they collide.

What each dimension asks of you

Customers & Services — the honest question is not what you could offer, but what you can deliver consistently. Ambition here is cheap; capacity is not.
Processes & Organisation — every redesigned process needs a named owner who can decide, not merely coordinate. Transformation without decision rights is a reporting exercise.
Information & Applications — decisions are only as good as the data underneath them. Before automating a process, establish whether the data it runs on is trustworthy enough to act on.
Technology & Compliance — treat regulation as a design input, not a review gate at the end. Retrofitting compliance is where budgets disappear.

How the framework runs in practice

A framework that only exists as a diagram changes nothing. In practice the approach runs as a repeating cycle rather than a one-off programme:

Baseline — map every running initiative, its cost, its owner and its intended outcome in one view. Most organisations discover here that they have more in flight than they can deliver well.
Prioritise — score initiatives against strategy, value and risk using a decision model everyone has agreed on in advance, so the choices survive the next budget conversation.
Decide — make explicit stop, continue and accelerate calls. The stopping is the hard part, and it is what frees the capacity everything else depends on.
Deliver — sequence what survives into a realistic, capacity-aware roadmap with clear ownership per workstream.
Review — a monthly portfolio rhythm and a quarterly re-prioritisation, so the framework keeps working after the consultant leaves.

The cadence matters more than the artefacts. Organisations that install a monthly steering rhythm and hold to it outperform organisations with better documentation and no rhythm.

Why AI Makes This More Complex — and More Urgent

AI adoption accelerates the need for a structured transformation approach. Organisations that deploy AI without addressing process redesign, data governance, and organisational change will see limited returns and increased risk.

The pattern is consistent: a tool is selected, a pilot impresses in a demo, and then nothing scales. The process around the tool was never redesigned, ownership after the pilot was never assigned, and nobody can say whether the output is reliable enough to act on. The technology was rarely the constraint.

The EU AI Act adds a further layer: risk classification, transparency obligations, and conformity requirements that affect how AI systems are designed, documented, and operated. This is not a legal formality — it reshapes how transformation programmes must be structured.

The phasing matters for planning. The Act entered into force on 1 August 2024. Prohibited practices and AI literacy obligations have applied since 2 February 2025, obligations for general-purpose AI models since 2 August 2025, and the bulk of the framework applies from 2 August 2026, with some obligations later still. Any transformation programme running through this period should treat those dates as fixed points in its roadmap rather than as someone else’s problem.

Through ProcesAIsering.nl, we integrate AI adoption directly into the transformation framework — practically, not theoretically. See AI Process Implementation for how that works as an engagement.

ISO Certification as a Transformation Accelerator

ISO standards — particularly ISO 27001 (information security), ISO 9001 (quality), and ISO 42001 (AI management) — provide governance structures that support sustainable transformation. Organisations that pursue certification alongside transformation benefit from forced clarity: documented processes, clear ownership, and an external validation of what they have built.

The accelerator effect is often underestimated. A certification deadline creates something transformation programmes usually lack: a external, non-negotiable date that forces decisions which would otherwise be deferred. Ownership gets assigned because an auditor will ask who owns it. Processes get documented because evidence is required. Risks get quantified because the standard demands it. Used well, the audit becomes the forcing function that makes the transformation real.

Used badly, it becomes documentation theatre — a binder that satisfies an auditor and changes nothing. The difference lies in whether the management system describes how the organisation actually works, or how someone once wrote that it should.

ISO-Ready.nl guides organisations through certification efficiently, without unnecessary overhead. See ISO & Compliance Readiness for the engagement model.

Portfolio Management: The Governance Layer

Business transformation initiatives do not exist in isolation. They compete for budget, capacity, and leadership attention alongside operational priorities. Without a portfolio management framework, the most important initiatives are often the ones that get deprioritised under pressure.

The mechanism is predictable. Operational urgency always speaks louder than strategic importance, so the initiative with a deadline beats the initiative with a destination. Over a few quarters, an organisation can be extremely busy and structurally stationary. Portfolio governance is what prevents that — not by adding reporting, but by making the trade-offs explicit and forcing them to be decided rather than drifted into.

Our transformation approach includes explicit portfolio governance — so that the right initiatives move forward with the right resources, in the right order. Read more in effective portfolio management, or see Digital Portfolio Control as a service.

Five Benefits of a Structured Transformation Approach

Alignment — Strategy, portfolio, and operations point in the same direction
Transparency — Stakeholders understand what is happening and why
Compliance readiness — ISO and EU AI Act requirements are addressed structurally, not as an afterthought
Predictable delivery — Governance prevents surprises
Durability — Change sticks because it is embedded in processes and ownership, not dependent on individuals

When this framework is not the right answer

A framework is not free. It costs meeting time, decision energy and a degree of formality that smaller changes do not justify. This approach is worth the overhead when several initiatives run in parallel, when business and IT are pulling in different directions, or when compliance obligations are approaching. It is not worth it for a single well-defined project with one clear owner and a short runway — there, a framework mostly adds ceremony.

It also does not work without senior sponsorship. If leadership will not make the stop decisions, no governance layer can compensate. That is the one prerequisite worth being honest about before starting.

Where to start

Most organisations do not need a full programme to begin. They need one honest baseline of what is currently running, and one round of prioritisation with the people who can actually decide. That is usually enough to reveal whether the problem is strategy, capacity or governance.

A Strategic Diagnostic Session is designed for exactly that first step. For longer engagements, see Interim Transformation Leadership, or browse Cases & Experience for how this has played out in practice at organisations including Alliander, Vodafone and Hans Anders.