Security Model used to develop policies

I’ve been task with the development of computer security policies and wondered if anyone had found a good security model to use as a guide. I’m looking for something will provide information on best practices

Any and all information shared will be greatly appreciated.