Use Security Release template for security patch scenario. It includes typical steps for planning, developing, testing and rolling out security patches in the IT Environment
<ObjectTemplate ID="SecurityReleaseChangeRequest" TypeID="SMChange!System.WorkItem.ChangeRequestProjection">
<Property Path="$Target/Property[Type='WorkItem!System.WorkItem']/Title$">Security Release</Property>
<Property Path="$Target/Property[Type='CoreChange!System.WorkItem.ChangeRequest']/TemplateId$">MajorChangeRequest</Property>
<Property Path="$Target/Property[Type='CoreChange!System.WorkItem.ChangeRequest']/Category$">$MPElement[Name='ChangeCategoryEnum.Major']$</Property>
<Object Path="$Target/Path[Relationship='CoreActivity!System.WorkItemContainsActivity' SeedRole='Source' TypeConstraint='CoreActivity!System.WorkItem.Activity.ManualActivity']$">
<Property Path="$Target/Property[Type='WorkItem!System.WorkItem']/Title$">Plan Security Patch Release</Property>
<Property Path="$Target/Property[Type='CoreActivity!System.WorkItem.Activity']/SequenceId$">0</Property>
</Object>
<Object Path="$Target/Path[Relationship='CoreActivity!System.WorkItemContainsActivity' SeedRole='Source' TypeConstraint='CoreActivity!System.WorkItem.Activity.ManualActivity']$">
<Property Path="$Target/Property[Type='WorkItem!System.WorkItem']/Title$">Develop Security Patch Release</Property>
<Property Path="$Target/Property[Type='CoreActivity!System.WorkItem.Activity']/SequenceId$">1</Property>
</Object>
<Object Path="$Target/Path[Relationship='CoreActivity!System.WorkItemContainsActivity' SeedRole='Source' TypeConstraint='CoreActivity!System.WorkItem.Activity.ManualActivity']$">
<Property Path="$Target/Property[Type='WorkItem!System.WorkItem']/Title$">Security Patch Release Acceptance Testing</Property>
<Property Path="$Target/Property[Type='CoreActivity!System.WorkItem.Activity']/SequenceId$">2</Property>
</Object>
<Object Path="$Target/Path[Relationship='CoreActivity!System.WorkItemContainsActivity' SeedRole='Source' TypeConstraint='CoreActivity!System.WorkItem.Activity.ReviewActivity']$">
<Property Path="$Target/Property[Type='WorkItem!System.WorkItem']/Title$">Release Readiness Review</Property>
<Property Path="$Target/Property[Type='CoreActivity!System.WorkItem.Activity.ReviewActivity']/ApprovalCondition$">$MPElement[Name='CoreActivity!ApprovalEnum.Unanimous']$</Property>
<Property Path="$Target/Property[Type='CoreActivity!System.WorkItem.Activity']/SequenceId$">3</Property>
</Object>
<Object Path="$Target/Path[Relationship='CoreActivity!System.WorkItemContainsActivity' SeedRole='Source' TypeConstraint='CoreActivity!System.WorkItem.Activity.ManualActivity']$">
<Property Path="$Target/Property[Type='WorkItem!System.WorkItem']/Title$">Rollout Planning/Preparation</Property>
<Property Path="$Target/Property[Type='CoreActivity!System.WorkItem.Activity']/SequenceId$">4</Property>
</Object>
<Object Path="$Target/Path[Relationship='CoreActivity!System.WorkItemContainsActivity' SeedRole='Source' TypeConstraint='CoreActivity!System.WorkItem.Activity.ManualActivity']$">
<Property Path="$Target/Property[Type='WorkItem!System.WorkItem']/Title$">Release Deployment</Property>
<Property Path="$Target/Property[Type='CoreActivity!System.WorkItem.Activity']/SequenceId$">5</Property>
</Object>
<Object Path="$Target/Path[Relationship='CoreActivity!System.WorkItemContainsActivity' SeedRole='Source' TypeConstraint='CoreActivity!System.WorkItem.Activity.ManualActivity']$">
<Property Path="$Target/Property[Type='WorkItem!System.WorkItem']/Title$">Post-Implementation Review</Property>
<Property Path="$Target/Property[Type='CoreActivity!System.WorkItem.Activity']/SequenceId$">6</Property>
</Object>
</ObjectTemplate>