Typically: current state analysis, identification and prioritization of use cases, data maturity assessment, target architecture and platform choice, risk/ethics/GDPR, and a KPI-based roadmap.