Cybersecurity risk assessment

I'm trying to conduct a cybersecurity risk assessment for our organisation and produce an analysis paper that will guide the next couple of years' IT Workplan.

I'm hoping to add a network diagram with comments on how security is managed for all components, SaaS products and their security and all the hardware (servers, phones, etc) we have in the organisation.

Is there a template or a popular documented process that I can follow/adopt?

I've had a look at SANS and …

assessment cybersecurity cybersecurity risk cybersecurity risk assessment risk risk assessment