Or one.

Or none. That's the thing - that "pick two" saying actually applies only to competent practitioners. Actually getting two is the best case scenario!

I have seen projects where the implementers happily go way over time, way over budget, and fail to deliver anything at all.