The hard kind of change is fixing a policy or process that is broken. It's easy to take a policy or process that is working well and change it so it works less well.
Links to more on this topic: