SOC Process List

This is a working inventory of the processes a mature SOC needs, grouped by domain. Each entry is marked [DEV] where a documented process exists and [GAP] where one is required but not yet written. The value of an inventory like this is not the list — it is that the gaps become countable.

1. Data and document governance #

• Document Management Process [GAP]
• Document Retention Process [DEV]
• Document Classification Process [DEV]
• Information Classification Process [DEV]
• Data Handling and Privacy Process [GAP]
• Data Protection Process [DEV]
• Protection of Personal Data Process [DEV] — near-duplicate of the above; recommend merging
• Content Management Process [GAP] — no clear child process yet

2. Identity and access #

• Identity and Access Management Process [GAP]
• Password Management Process [DEV]
• Secure Network Access Process [DEV]