While there is no universal template, a good way to approach security planning is to list and describe: