One more thing to have, which seems obvious, but is also worth mentioning here: a Security Configuration Guide. Basically, one guide that explains all the secu

One more thing to have, which seems obvious, but is also worth mentioning here: a Security Configuration Guide. Basically, one guide that explains all the security features, how they work, when they should be used, associated configuration settings, what defaults are, what other possible values are, known gotchas, how to verify security features are working correctly, which ports and protocols are used and when they're used (so that a firewall admin can setup accordingly), etc.