Policy Management first. As without Policy there wont be any success with the Program.
After this I will focus on Program Management followed by Communication & Education Management
Vendor Management, because we rely on a 3rd party to manage a specific process, so it is very important to have an effective way to control and monitor the outcome.