The overarching architecture that specifies the parts offering SOC functionality and how they interact is known as a SOC framework. In other words, a monitoring system that tracks and logs security events should serve as the foundation of a SOC framework.