Most organizations skip straight to step 5.
Buy a tool.
Hope it creates ownership, standards, and discipline.
It never does.
Still seeing this.