Let's see: A risk and impact analysis, a requirement check, a capacity audit, a full blown security audit, a data retention policy, a storage size study, a ton

Let's see: A risk and impact analysis, a requirement check, a capacity audit, a full blown security audit, a data retention policy, a storage size study, a ton of policies to fill in so you get a dns name, a financial audit, setup of a new bookkeeping post so all these activities have somewhere to book their time, a project for that post, a language and style audit, a translation study to decide nothing needs a translation, ... I easily see more than 100 people working on this.