Which type of security document is written with specific step-by-step details?

A process describes the overall workflow or series of related activities at a higher level of abstraction and does not contain the granular step-by-step detail that characterizes a procedure.

A procedure is a detailed, action-oriented document that tells personnel exactly how to carry out a specific task, including the precise sequence of steps, tools to use, and expected outcomes. Unlike a policy, which states what must be done, a procedure specifies how it must be done with enough granularity to ensure consistent execution. This specificity makes procedures essential for tasks like incident response, backup operations, and access provisioning.

A policy is a high-level document that defines organizational rules, goals, and requirements but intentionally avoids step-by-step operational detail.

Paradigm is not a recognized category of security documentation; it refers broadly to a model or framework of thinking rather than a specific document type.