Security Operation Center (SOC) is an integral information security management unit established based on information security incident response and information security-related laws and regulations. However, the effectiveness of unit setting or task outsourcing is often challenging to quantify. The framework may be a guide for enterprises to understand what tasks the information security operation center should complete and how to complete these tasks and shape the hard-to-understand words and sentences written in black and white on the specification into more specific functions that can be implemented, and with the measurement of maturity, You can even understand the blueprint for future development.