Security Planning : An Applied Approach