Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

How Oneida Nation Modernized Security Operations with Cortex XSIAM

Palo Alto Networks
07/15/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


but locally around here in the state of Wisconsin as well. So we want to ensure that we're very well protecting our people, our culture, and our digital assets. I currently provide IT services for all of Oneida Nation, which is about 17,000 tribal members. All of the technology across Oneida Nation is protected by Palo Alto Networks. Everything from our gaming systems, the slots, our sports betting, to the education, the high schools, the elementary, as well as our health clinics. Prior to partnering with XIM and Palo Alto Networks, I had some concerns of our visibility into our network to be able to be a lot more efficient and proactive on our security. We didn't have a lot of good metrics on our incidents and our response times. We definitely have those metrics now. We have up to 43 seconds to close open incidents, as well as the tracking of total incidents and alerts that are coming in. XIM has helped us consolidate a lot of different features without having multiple different tools. Palo Alto is able to combine those together, and we're able to work within a single platform. XIM has definitely had some measurable impacts, not only of cost savings of up to 20% or more on our data ingestion. The AI analytics within XIM have actually been an excellent help. Fighting AI with AI is definitely a big thing. Being able to automate and correlate a lot of alerts together, so instead of having 50 alerts, we can correlate them into one or two simple alerts that are tied together. It saves a lot of time and provides us a lot of good feedback and a lot of better information for investigations. The other things that may be considered minutiae are done through AI, and our personnel are available for our customers and the nation at large in protecting our digital assets and our people and our culture. We're looking forward to continue to grow with Palo Alto Networks and continue to mature so that way we're always staying up with the ever-changing threat landscape. Palo Alto Networks

TL;DR

  • Oneida Nation deployed Cortex XSIAM to protect 17,000 tribal members across gaming, education, and healthcare operations with comprehensive security coverage.
  • The platform reduced incident closure time to 43 seconds and delivered over 20% cost savings on data ingestion through consolidation.
  • AI-powered alert correlation transforms 50 individual alerts into one or two actionable incidents, dramatically improving investigation efficiency.

Summary

This customer story features Oneida Nation's security transformation through their partnership with Palo Alto Networks and deployment of Cortex XSIAM. The tribal organization, responsible for protecting 17,000 members and diverse operations spanning gaming systems, education facilities, and health clinics, faced significant challenges with network visibility and incident response metrics before implementing XSIAM. The platform has delivered measurable improvements including 43-second incident closure times, over 20% cost savings on data ingestion, and dramatic alert consolidation through AI-powered correlation. The security team highlights how automation handles routine tasks, freeing personnel to focus on protecting the nation's digital assets, people, and cultural heritage. The deployment demonstrates XSIAM's value in consolidating multiple security tools into a single platform while providing the analytics and automation capabilities needed to address the evolving threat landscape facing tribal nations.

Chapters

0:00 - Tribal Security Challenges
0:15 - Oneida Nation IT Overview
0:35 - Pre-XSIAM Visibility Concerns
0:57 - Platform Consolidation Benefits
1:13 - AI Analytics and Automation
1:46 - Future Partnership Growth

Key Quotes

0:09 "We want to ensure that we're very well protecting our people, our culture, and our digital assets."
1:07 "XIM has definitely had some measurable impacts, not only of cost savings of up to 20% or more on our data ingestion."
1:18 "Fighting AI with AI is definitely a big thing."

FAQ

What types of systems does Oneida Nation protect with Palo Alto Networks?

Oneida Nation uses Palo Alto Networks to protect their entire technology infrastructure, including gaming systems (slots and sports betting), educational facilities (high schools and elementary schools), and health clinics serving their 17,000 tribal members.

How has XSIAM improved Oneida Nation's security operations metrics?

Before XSIAM, the team lacked visibility and metrics on incidents and response times. After deployment, they achieved 43-second incident closure times, gained comprehensive tracking of total incidents and alerts, and realized over 20% cost savings on data ingestion.


Categories:
  • » Data Protection » Backup & Recovery
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Customer Story
  • Security Operations
  • AI & Machine Learning
  • Data Protection
  • Cortex XSIAM
  • Security Operations Center
  • Tribal Nation Cybersecurity
  • AI-Powered Security Analytics
  • Alert Correlation and Automation
  • Tool Consolidation
  • Incident Response Metrics
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: How Oneida Nation Modernized Security Operations with Cortex XSIAM

              XStreaminars (watch here)

              • Aug
                27

                Becoming Agent Ready with Cyera: Essential Strategies and Insights

                08/27/202601:00 PM ET
                • Sep
                  03

                  Verge.io: Can You Afford Your Next Storage Refresh?

                  09/03/202601:00 PM ET
                  More events

                  Industry Events (Sponsor Hosted)

                  • Aug
                    27

                    Summer of Satori: FunFoneFarm's Transformation of Fraud into Seamless Integration

                    08/27/202601:00 PM ET
                    • Sep
                      23

                      Understanding Invisible Data Risks and Enhancing Your Protection Strategies

                      09/23/202601:00 PM ET
                      More events

                      Upcoming Webinar Calendar

                      • 08/27/2026
                        01:00 PM
                        08/27/2026
                        Becoming Agent Ready with Cyera: Essential Strategies and Insights
                        https://www.truthinit.com/index.php/channel/2081/becoming-agent-ready-with-cyera-essential-strategies-and-insights/
                      • 08/27/2026
                        01:00 PM
                        08/27/2026
                        Summer of Satori: FunFoneFarm's Transformation of Fraud into Seamless Integration
                        https://www.truthinit.com/index.php/channel/2086/summer-of-satori-funfonefarms-transformation-of-fraud-into-seamless-integration/
                      • 09/02/2026
                        12:00 PM
                        09/02/2026
                        Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                        https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                      • 09/03/2026
                        01:00 PM
                        09/03/2026
                        Verge.io: Can You Afford Your Next Storage Refresh?
                        https://www.truthinit.com/index.php/channel/2082/verge-io-can-you-afford-your-next-storage-refresh/
                      • 09/23/2026
                        01:00 PM
                        09/23/2026
                        Understanding Invisible Data Risks and Enhancing Your Protection Strategies
                        https://www.truthinit.com/index.php/channel/2087/understanding-invisible-data-risks-and-enhancing-your-protection-strategies/
                      • 09/30/2026
                        04:00 AM
                        09/30/2026
                        AI Command Center: Optimizing Visibility and Control in Your Operations
                        https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                      • 11/19/2026
                        01:00 PM
                        11/19/2026
                        360View: Govern, Secure & Recover Your Microsoft 365 Environment
                        https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
                      Truth in IT
                      • Sponsor
                      • About Us
                      • Terms of Service
                      • Privacy Policy
                      • Contact Us
                      • Preference Management
                      Desktop version
                      Standard version