SQL Server 2014 SP2 - What should be the sequence to apply SP3, CU & Security Patches

Hi,

I have SQL Server 2014 SP2. I need to apply SP3, CUs & Security patches to it. What should be the sequence? Is the below correct sequence: 1) Apply SP3, 2) Apply CU3 3) Apply 4505422 Security Update for SQL Server 2014 SP3 CU3 GDR:July 9,2019 CVE-2019-1068.