Basically the template just helps you identify security risks and you have to come up with solutions to rectify them.