Check out the “Defensive Security Handbook” from O’Reilly. It has some technical stuff, but it’s a lot more about policy and documentation.

Side Bonus of Book: made me much more organized as a person in my life in general

https://www.amazon.com/Defensive-Security-Handbook-Practices...

NOTE: This book / the principles applies whether you manage your own infrastructure or just run off of web apps.