Which type of security document is written with specific step-by-step details?

A process describes a series of related actions or steps at a higher, often cross-functional level without the granular step-by-step detail that defines a procedure.

A procedure is the most specific type of security document, providing detailed, sequential steps that a user must follow to complete a task. Unlike policies (which state rules) or processes (which describe workflows at a higher level), procedures leave no ambiguity about exactly how an action must be performed. This level of detail makes them the authoritative reference for repeatable operational tasks.

A policy defines organizational rules, requirements, and acceptable behavior but does not contain specific how-to instructions.

Paradigm is a conceptual model or framework, not a recognized category of security documentation.