Information security change in the workplace.

Company or use one that you are familiar with that has experienced information security change in the workplace. What information assurance change occurred, and were there any barriers to the change faced by the organization? Finally, what are the best practices when managing change?