What is the correct sequence of SOC Workflow?