Wave 0 sequence: Security, GRC, Cost and Value, Licence, then Adoption. Steady before scale.