Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

How Oneida Nation Modernized Security Operations with Cortex XSIAM

Palo Alto Networks
07/15/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


but locally around here in the state of Wisconsin as well. So we want to ensure that we're very well protecting our people, our culture, and our digital assets. I currently provide IT services for all of Oneida Nation, which is about 17,000 tribal members. All of the technology across Oneida Nation is protected by Palo Alto Networks. Everything from our gaming systems, the slots, our sports betting, to the education, the high schools, the elementary, as well as our health clinics. Prior to partnering with XIM and Palo Alto Networks, I had some concerns of our visibility into our network to be able to be a lot more efficient and proactive on our security. We didn't have a lot of good metrics on our incidents and our response times. We definitely have those metrics now. We have up to 43 seconds to close open incidents, as well as the tracking of total incidents and alerts that are coming in. XIM has helped us consolidate a lot of different features without having multiple different tools. Palo Alto is able to combine those together, and we're able to work within a single platform. XIM has definitely had some measurable impacts, not only of cost savings of up to 20% or more on our data ingestion. The AI analytics within XIM have actually been an excellent help. Fighting AI with AI is definitely a big thing. Being able to automate and correlate a lot of alerts together, so instead of having 50 alerts, we can correlate them into one or two simple alerts that are tied together. It saves a lot of time and provides us a lot of good feedback and a lot of better information for investigations. The other things that may be considered minutiae are done through AI, and our personnel are available for our customers and the nation at large in protecting our digital assets and our people and our culture. We're looking forward to continue to grow with Palo Alto Networks and continue to mature so that way we're always staying up with the ever-changing threat landscape. Palo Alto Networks

TL;DR

  • Oneida Nation deployed Cortex XSIAM to protect 17,000 tribal members across gaming, education, and healthcare operations with comprehensive security coverage.
  • The platform reduced incident closure time to 43 seconds and delivered over 20% cost savings on data ingestion through consolidation.
  • AI-powered alert correlation transforms 50 individual alerts into one or two actionable incidents, dramatically improving investigation efficiency.

Summary

This customer story features Oneida Nation's security transformation through their partnership with Palo Alto Networks and deployment of Cortex XSIAM. The tribal organization, responsible for protecting 17,000 members and diverse operations spanning gaming systems, education facilities, and health clinics, faced significant challenges with network visibility and incident response metrics before implementing XSIAM. The platform has delivered measurable improvements including 43-second incident closure times, over 20% cost savings on data ingestion, and dramatic alert consolidation through AI-powered correlation. The security team highlights how automation handles routine tasks, freeing personnel to focus on protecting the nation's digital assets, people, and cultural heritage. The deployment demonstrates XSIAM's value in consolidating multiple security tools into a single platform while providing the analytics and automation capabilities needed to address the evolving threat landscape facing tribal nations.

Chapters

0:00 - Tribal Security Challenges
0:15 - Oneida Nation IT Overview
0:35 - Pre-XSIAM Visibility Concerns
0:57 - Platform Consolidation Benefits
1:13 - AI Analytics and Automation
1:46 - Future Partnership Growth

Key Quotes

0:09 "We want to ensure that we're very well protecting our people, our culture, and our digital assets."
1:07 "XIM has definitely had some measurable impacts, not only of cost savings of up to 20% or more on our data ingestion."
1:18 "Fighting AI with AI is definitely a big thing."

FAQ

What types of systems does Oneida Nation protect with Palo Alto Networks?

Oneida Nation uses Palo Alto Networks to protect their entire technology infrastructure, including gaming systems (slots and sports betting), educational facilities (high schools and elementary schools), and health clinics serving their 17,000 tribal members.

How has XSIAM improved Oneida Nation's security operations metrics?

Before XSIAM, the team lacked visibility and metrics on incidents and response times. After deployment, they achieved 43-second incident closure times, gained comprehensive tracking of total incidents and alerts, and realized over 20% cost savings on data ingestion.


Categories:
  • » Data Protection » Backup & Recovery
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Customer Story
  • Security Operations
  • AI & Machine Learning
  • Data Protection
  • Cortex XSIAM
  • Security Operations Center
  • Tribal Nation Cybersecurity
  • AI-Powered Security Analytics
  • Alert Correlation and Automation
  • Tool Consolidation
  • Incident Response Metrics
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: How Oneida Nation Modernized Security Operations with Cortex XSIAM

              XStreaminars (watch here)

              • Jul
                28

                Illumio + Netskope: Zero Trust in the Age of AI Autonomy

                07/28/202601:00 PM ET
                • Jul
                  29

                  Ask Your Cloud Anything: Unlocking Governance Silos in your Environments

                  07/29/202601:00 PM ET
                  More events

                  Industry Events (watch there)

                  • Jul
                    22

                    Insights from Attackers During the FIFA World Cup: A HUMAN Dialogue

                    07/22/202601:00 PM ET
                    • Aug
                      19

                      Becoming Agent Ready: Insights from Cyera's Expertise

                      08/19/202612:00 PM ET
                      More events

                      Upcoming Webinar Calendar

                      • 07/21/2026
                        04:00 AM
                        07/21/2026
                        Strategies for Managing AI Governance and Securing App-to-LLM API Traffic
                        https://www.truthinit.com/index.php/channel/1967/strategies-for-managing-ai-governance-and-securing-app-to-llm-api-traffic/
                      • 07/22/2026
                        06:30 AM
                        07/22/2026
                        Insights and Strategies for Effective Data Privacy and Protection
                        https://www.truthinit.com/index.php/channel/2000/insights-and-strategies-for-effective-data-privacy-and-protection/
                      • 07/22/2026
                        01:00 PM
                        07/22/2026
                        Insights from Attackers During the FIFA World Cup: A HUMAN Dialogue
                        https://www.truthinit.com/index.php/channel/2029/insights-from-attackers-during-the-fifa-world-cup-a-human-dialogue/
                      • 07/28/2026
                        01:00 PM
                        07/28/2026
                        Illumio + Netskope: Zero Trust in the Age of AI Autonomy
                        https://www.truthinit.com/index.php/channel/2031/illumio-netskope-zero-trust-in-the-age-of-ai-autonomy/
                      • 07/29/2026
                        04:00 AM
                        07/29/2026
                        Real-Time Strategies for Safeguarding Against Prompt Injections
                        https://www.truthinit.com/index.php/channel/1968/real-time-strategies-for-safeguarding-against-prompt-injections/
                      • 07/29/2026
                        01:00 PM
                        07/29/2026
                        Ask Your Cloud Anything: Unlocking Governance Silos in your Environments
                        https://www.truthinit.com/index.php/channel/2048/ask-your-cloud-anything-unlocking-governance-silos-in-your-environments/
                      • 08/19/2026
                        12:00 PM
                        08/19/2026
                        Becoming Agent Ready: Insights from Cyera's Expertise
                        https://www.truthinit.com/index.php/channel/2036/becoming-agent-ready-insights-from-cyeras-expertise/
                      • 09/02/2026
                        12:00 PM
                        09/02/2026
                        Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                        https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                      • 09/30/2026
                        04:00 AM
                        09/30/2026
                        AI Command Center: Optimizing Visibility and Control in Your Operations
                        https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                      Truth in IT
                      • Sponsor
                      • About Us
                      • Terms of Service
                      • Privacy Policy
                      • Contact Us
                      • Preference Management
                      Desktop version
                      Standard version