SIEM focuses on collecting and managing security data, while SOAR takes the data output from the SIEM and determines what actions should be taken in response.