This case study is based on a real engagement. I have explicit permission to share the lessons learned on the condition that the organisation remains anonymous. For that reason, identifying details have been deliberately obscured.