GRC Recommended Implementation Sequence

Hello, 

I recall having seen a slide with the recommended implementation sequence for governance, risk and compliance based on a "maturity model" with foundation, crawl, walk, run, fly. Does anyone have this slide to share? Or similar methodology? 

Kind regards, 

Thijs