State outlines Web security review