System complexity & age
Knowledge gaps
Integration & infrastructure
Operational risks
User & business experience
Organisational readiness