QLDBusiness StudiesSyllabus dot point

Topic 2: Transformation, innovation and managing risk during change

Business transformation strategies, innovation (incremental and disruptive, product and process innovation), risk management during transformation (identification, assessment, treatment, monitoring) and the role of corporate social responsibility in transformation decisions

A focused answer to the QCE Business Unit 4 dot point on transformation, innovation and risk management. Business transformation strategies, types of innovation (incremental v disruptive, product v process), the four-step risk-management process, and CSR considerations, with worked Australian examples from Atlassian, Telstra and Cochlear.

Generated by Claude OpusReviewed by Better Tuition Academy9 min answerUpdated 2026-05-20

Have a quick question? Jump to the Q&A page

What this dot point is asking

QCAA wants you to know the major transformation strategies, the types of innovation, the risk-management process, and the role of CSR in transformation decisions. The EA frequently uses a stimulus business in transformation and asks for analysis or recommendation.

The answer

Business transformation

Transformation is a major, often multi-year, change to a business's operations, capability, business model or market position. Transformation goes deeper than incremental change; it usually involves restructuring, technology investment, cultural change and the redesign of core processes.

Common transformation triggers (covered in the repositioning dot point):

Technological disruption.
Sustainability and regulatory pressure.
Competitive shifts.
Major M&A or divestment.
Strategic re-orientation by new leadership.

Transformation typically involves several work-streams running in parallel - technology, operations, culture, customer experience, finance - coordinated under a transformation program governance.

Innovation

Innovation is the creation of value through new products, processes or business models.

Incremental v disruptive

Incremental innovation. Small, continuous improvements to existing products or processes. Builds on the existing business model. Low risk, predictable returns. Common in mature industries.

Example: Cochlear's continuous improvement of cochlear implants. Each generation adds features within the existing architecture. The cumulative effect is significant performance gain.

Disruptive innovation. A new product, process or business model that significantly changes how value is delivered. Often opens new markets or fundamentally alters existing ones. Higher risk, potentially much higher returns. New entrants are usually the source of disruption.

Example: Atlassian's no-sales-team SaaS model disrupted traditional enterprise-software sales. Generative AI (post-2022) is disrupting many established workflows.

Product v process

Product innovation. New or significantly improved products. Cochlear's new implant generations are product innovation.

Process innovation. New or significantly improved ways of producing or delivering products. Coles's automated distribution centres are process innovation that supports the existing product range.

Most large transformations involve both.

Innovation strategies

Common Australian approaches.

In-house R&D. Cochlear, CSL, Atlassian all run significant in-house R&D investment.
R&D partnerships. Industry-research-organisation (IRO) partnerships, university collaborations (CSIRO, ATSE).
Open innovation. Inviting external innovators to contribute. Atlassian's open marketplace for Jira and Confluence plugins (Atlassian Marketplace) is a successful example.
Acquisition. Buying innovative startups. Macquarie's acquisitions across the energy-transition sector exemplify this approach.
Innovation labs and accelerators. Dedicated internal innovation units. NAB, Telstra, ANZ all run innovation labs.

Risk management during transformation

Risk is the chance of something happening that affects business objectives. Transformations are particularly risky because they involve simultaneous change across multiple dimensions.

The four-step process (drawn from AS/NZS ISO 31000 Risk Management).

1. Risk identification

Systematically list the risks. Common transformation risk categories:

Financial. Capex overrun, revenue shortfall, working-capital strain.
Operational. Execution failure, supply-chain disruption, quality issues.
People. Key-staff loss, cultural damage, skill gaps.
Reputational. Brand damage, customer loss, media backlash.
Legal and regulatory. Compliance breach, contract dispute, regulator action.
Technology. Project failure, integration issues, cyber breach.
Market. Competitor response, demand softness.

2. Risk assessment

Evaluate each risk on likelihood (probability) and impact (consequence). A risk heat map plots likelihood against impact, prioritising the high-high quadrant.

HIGH      | Low priority  | Moderate  | TOP PRIORITY
          |               | priority  |
IMPACT    |---------------|-----------|------------
MOD       | Low priority  | Moderate  | High priority
          |               | priority  |
          |---------------|-----------|------------
LOW       | Monitor       | Low       | Moderate
          |               | priority  | priority
          ----------------------------- 
          LOW             MOD          HIGH
                 LIKELIHOOD

3. Risk treatment

Decide how to respond.

Avoid. Do not proceed with the change. Used for risks where the cost of any treatment exceeds the benefit of the change.
Reduce (mitigate). Implement controls that lower the likelihood or impact. Most transformation risks are reduced through good project management, phased rollout, contingency planning.
Transfer. Insurance, contractual transfer to a third party, or outsourcing the risk-bearing function.
Accept. Do nothing because the cost of treatment exceeds the cost of the risk. Used for low-likelihood-low-impact risks.

4. Risk monitoring

Track risks through the transformation. New risks emerge; existing risks change. Regular reporting to a steering committee or the board.

CSR in transformation decisions

Transformation decisions affect stakeholders beyond shareholders. CSR considerations include:

Employees. Redundancy, retraining, redeployment, change-management support. The Closing Loopholes Acts 2023-2024 affect how restructure can be implemented.
Suppliers. Continued business, fair payment, transparency about changes.
Customers. Continuity of service, communication about changes, support during transitions.
Community. Local economic impact, Indigenous-employment commitments, environmental impact.
Environment. Emissions, waste, water use of the transformed operation.

A transformation that maximises short-term shareholder return at the expense of stakeholders often fails on reputational grounds (the Banking Royal Commission cases) or legal grounds (the Qantas baggage-handler outsourcing).

A transformation that genuinely considers stakeholder interests typically takes longer but produces more durable change.

Worked Australian example: Telstra T25

Transformation: Multi-year strategic reset (2022-2025) under CEO Vicki Brady. Components include InfraCo separation, product simplification, digital channel rebuild, cost-out, and workforce restructure (2,800 redundancies announced 2024).
Innovation: Largely process innovation (digital channels, cloud platforms) plus selective product innovation (5G use cases). Less disruption to the existing customer-base business model.
Risk management: Significant risk profile - workforce disruption, customer-experience disruption during migrations, regulator scrutiny, share-price impact. Risk treatments include phased rollout, dual-running, customer-communication, structured consultation with the CEPU union, and continuous board reporting.
CSR: Workforce redundancy managed with extended notice, retraining options and outplacement support. Community impact in regional Australia (where Telstra is a major employer) managed through targeted communication.
Progress: Approximately on track midway through, with key customer-experience and platform-migration milestones remaining.

Worked example

"Recommend a transformation strategy for a Brisbane-based traditional retail business of 50 employees facing online-disruption pressure. Identify the major risks and propose treatments. (8 marks)"

Plan. Cover the transformation strategy, the innovation type, the risk-management approach and the CSR considerations.

Transformation strategy. Move from a pure physical-retail model to an omnichannel model combining physical store, online, and click-and-collect. Invest in technology (e-commerce platform, inventory-management integration, customer-data platform). Re-skill staff for the omnichannel customer journey. Rebalance store footprint - smaller stores with more digital integration.

Innovation type. Largely process innovation (the products being sold may remain the same, but the way they are sold transforms). Some product innovation where the business curates a differentiated range that distinguishes it from generic online competitors.

Risk management.

Identification: capex strain ( $150-$ 250k for e-commerce build, training, inventory-management upgrade), customer confusion during transition, staff resistance, supply-chain disruption when adding online channel, cybersecurity risk on the new e-commerce platform.

Assessment: capex strain and staff resistance assessed as the highest combined likelihood-impact for a 50-person business.

Treatment: phase the investment over 18-24 months to spread capex; secure a 12-month working-capital facility from the bank for cash buffer; run extensive staff consultation and training; partner with a managed-services provider for cybersecurity rather than building in-house; pilot the omnichannel model on a small product subset before broader rollout.

Monitoring: monthly steering meetings; quarterly board (or owner) review; KPI tracking on online conversion, store-foot-traffic and customer-acquisition cost.

CSR considerations. Stable employment commitment - redundancies avoided where possible, with staff retrained for omnichannel roles instead. Local-supplier relationships maintained where possible. Sustainable packaging for the new online channel.

Outcome assessment. The transformation is necessary - the pure-physical-retail model faces structural pressure. The phased, risk-managed approach gives the business a path to a sustainable omnichannel future with manageable execution risk.

Past exam questions, worked

Real questions from past QCAA papers on this dot point, with our answer explainer.

2024 QCAA6 marksDistinguish between incremental and disruptive innovation. Use Australian examples for each.

Show worked answer →

A 6-mark answer needs both types, the contrast, and an example for each.

Incremental innovation: Small, continuous improvements to existing products or processes. Builds on the existing business model. Low risk, predictable returns, common in mature industries.
Disruptive innovation: A new product, process or business model that significantly changes how value is delivered, often opening new markets or fundamentally altering existing ones. Higher risk, potentially much higher returns, and can render incumbent players obsolete.
Contrast: Incremental improves the curve; disruptive shifts to a new curve. Incumbents are good at incremental innovation; new entrants are usually the source of disruption.
Australian examples

Incremental: Cochlear's continuous improvement of cochlear implants - each generation (Nucleus 7, Nucleus 8, future Nucleus 9) adds features (faster sound processing, better battery life, Bluetooth connectivity) within the existing implant-and-sound-processor architecture. The cumulative effect is significant performance improvement; each step is incremental.

Disruptive: Atlassian's no-sales-team SaaS model in the early 2000s was disruptive to traditional enterprise-software sales. Customers self-served online without needing a sales-engineer engagement; the price point was a fraction of traditional enterprise software. The model disrupted the industry and the competitors (BMC, IBM, HP) had to respond. Modern AI integration (Atlassian Rovo, 2024-2025) is the next wave of disruption Atlassian is leading.

Markers reward (1) clear definitions of both, (2) the contrast (improve v shift), (3) real Australian examples for each.

2023 QCAA5 marksExplain the four-step risk management process for a business undergoing transformation.

Show worked answer →

A 5-mark answer needs all four steps, the meaning, and a worked example.

The four-step process (drawn from AS/NZS ISO 31000 Risk Management)
1. Risk identification: Systematically list the risks the transformation could face - financial (capex overrun, revenue shortfall), operational (execution failure, supply-chain disruption), people (key-staff loss, cultural damage), reputational (brand damage, customer loss), legal (regulatory breach, contract dispute), technology (project failure, cyber breach), market (competitor response).
2. Risk assessment: Evaluate each risk on likelihood and impact. A heat map plots likelihood (low/medium/high) against impact (low/medium/high), prioritising the high-likelihood-high-impact risks.
3. Risk treatment: Decide how to respond - avoid (do not proceed with the change), reduce (mitigate the risk through specific controls), transfer (insurance, contractual transfer to a third party), accept (do nothing because the cost of treatment exceeds the cost of the risk).
4. Risk monitoring: Track the risks through the transformation. New risks emerge; existing risks change. Regular reporting to a steering committee or the board.
Worked example: Coles automated DC rollout (2023-2024)

Identification: capex overrun, schedule delay, workforce disruption, supply-chain failure during cutover, union dispute, Ocado-grid integration failure.

Assessment: workforce disruption and supply-chain cutover failure assessed as highest combined likelihood-impact.

Treatment: phased cutover (Kemps Creek first, Truganina later); extensive union consultation and redeployment; dual-running of manual and automated DCs during transition; voluntary redundancy; business-interruption insurance.

Monitoring: weekly steering committee during cutover; monthly board reporting; post-implementation review.

Markers reward (1) all four steps named, (2) brief description of each, (3) a worked example showing the process in action.