You have been employed by an organisation to introduce controls over systems development and acquisition. Such controls were previously non-existent. You decide to take the following steps to remedy the situation.

Steps:

1. Draw up a strategy for future systems development.

2. Do a survey to estimate the size of the problem (eg incompatibility of different makes of computer).

3. Lay down organisation-wide standards, with the active support of senior management, for equipment and software acquisition.

4. Develop procedures to ensure that capital expenditure on information technology is authorised centrally.

Which of the following is the logical order in which you should proceed?