Practical steps before scope, risk and SoA.