Spelling out acronyms is generally a good idea. In the world I used to work in SOC is an acronym for System On a Chip. After briefly looking at the Deloitte paper I see that it's Security Operations Center. Which begs the question - has Deloitte ever written anything that is worth wading through the corporate speak.