SOAR is used to automatically detect known bad traffic and implement a series of preapproved steps to alleviate the need of more workers. There are many tools that perform this function.
https://www.fortinet.com/resources/cyberglossary/what-is-soar
Tool Examples:
https://geekflare.com/best-soar-tools/
SCAP automates vulnerability management and policy compliance evaluation. It was developed by RHEL and the US Gov't to automate the implementation of STIGs. It scans for those STIGs/VULNs and will patch them automatically based on the defined rules implemented. It was originally a single tool that is now a suite that covers different areas of concern.
https://www.youtube.com/watch?v=5PA9r9oaHUY
Ultimately, SOAR is a conceptualization that many tools are built for while SCAP is a Tool Suite that has a much smaller scope and almost completely different purpose.

Risk acceptance is the decision to accept the risk's consequences when mitigation, transfer, or avoidance are not feasible or cost-effective. It is chosen when the residual risk aligns with the organization's risk appetite. This step occurs after thoroughly assessing other options.

Implement a continuous monitoring policy. A continuous monitoring policy is a set of procedures and tools that enable an organization to detect and respond to unauthorized or anomalous activities on its network in real time or near real time. A continuous monitoring policy can help identify rogue access points as soon as they appear on the network, rather than waiting for quarterly or monthly scans. A continuous monitoring policy can also help improve the overall security posture and compliance of the organization by providing timely and accurate information about its network assets, vulnerabilities, threats, and incidents.