* [Blog](https://www.paloaltonetworks.com/blog)
* [Security Operations](https://www.paloaltonetworks.com/blog/security-operations/)
* [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/)
* Building a Cyber Immune C...

# Building a Cyber Immune Company Culture with Cortex XSOAR and SecurityAdvisor

[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.paloaltonetworks.com%2Fblog%2Fsecurity-operations%2Fsecurity-advisor-xsoar%2F)  
[](https://twitter.com/share?text=Building+a+Cyber+Immune+Company+Culture+with+Cortex+XSOAR+and+SecurityAdvisor&url=https%3A%2F%2Fwww.paloaltonetworks.com%2Fblog%2Fsecurity-operations%2Fsecurity-advisor-xsoar%2F)  
[](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.paloaltonetworks.com%2Fblog%2Fsecurity-operations%2Fsecurity-advisor-xsoar%2F&title=Building+a+Cyber+Immune+Company+Culture+with+Cortex+XSOAR+and+SecurityAdvisor&summary=&source=)  
[](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www.paloaltonetworks.com/blog/security-operations/security-advisor-xsoar/&ts=markdown)  
\[\](mailto:?subject=Building a Cyber Immune Company Culture with Cortex XSOAR and SecurityAdvisor)  
Link copied  
By [Emily Laufer](https://www.paloaltonetworks.com/blog/author/emily-laufer/?ts=markdown "Posts by Emily Laufer") and [Marya Munir](https://www.paloaltonetworks.com/blog/author/marya-munir/?ts=markdown "Posts by Marya Munir")  
Apr 09, 2021  
3 minutes  
[Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown)  
[Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown)  
[automate security training modules](https://www.paloaltonetworks.com/blog/tag/automate-security-training-modules/?ts=markdown)  
[automated security training](https://www.paloaltonetworks.com/blog/tag/automated-security-training/?ts=markdown)  
[automated security training response](https://www.paloaltonetworks.com/blog/tag/automated-security-training-response/?ts=markdown)  
[Compliance](https://www.paloaltonetworks.com/blog/tag/compliance/?ts=markdown)  
[Cortex XSOAR Marketplace](https://www.paloaltonetworks.com/blog/tag/cortex-xsoar-marketplace/?ts=markdown)  
[end-user awareness](https://www.paloaltonetworks.com/blog/tag/end-user-awareness/?ts=markdown)  
[reduce cyber risk](https://www.paloaltonetworks.com/blog/tag/reduce-cyber-risk/?ts=markdown)  
[security analysts](https://www.paloaltonetworks.com/blog/tag/security-analysts/?ts=markdown)  
[Security Automation](https://www.paloaltonetworks.com/blog/tag/security-automation/?ts=markdown)  
[security awareness](https://www.paloaltonetworks.com/blog/tag/security-awareness/?ts=markdown)  
[security operations](https://www.paloaltonetworks.com/blog/tag/security-operations/?ts=markdown)  
[SecurityAdvisor](https://www.paloaltonetworks.com/blog/tag/securityadvisor/?ts=markdown)  
[SOAR content](https://www.paloaltonetworks.com/blog/tag/soar-content/?ts=markdown)  
[SOAR end-user security training](https://www.paloaltonetworks.com/blog/tag/soar-end-user-security-training/?ts=markdown)  
[SOAR playbooks](https://www.paloaltonetworks.com/blog/tag/soar-playbooks/?ts=markdown)  
[SOC](https://www.paloaltonetworks.com/blog/tag/soc/?ts=markdown)  
[strong passwords](https://www.paloaltonetworks.com/blog/tag/strong-passwords/?ts=markdown)  
[user training](https://www.paloaltonetworks.com/blog/tag/user-training/?ts=markdown)

In a survey by the Ponemon Institute, human error is rated as the #1 threatening factor by CISOs. Human actions can unwittingly lead to security compromises through issues like weak passwords, phishing links, using public WiFi, and visiting risky applications or websites.

Most enterprises use cookie-cutter approaches, sending all employees the same phishing simulation or quarterly training. While it can be helpful and informative, this training doesn't occur often enough for employees to remember what exactly to do during a critical moment. This broadcast approach doesn't yield information beyond how many people participated in a 10 minute exercise, making it hard for CISOs to pinpoint the effectiveness of such training efforts or highlight at-risk users.

SecurityAdvisor's integrated content pack for Cortex XSOAR, now available in the Marketplace, provides users with the ability to automate security awareness in real-time. This integration with SecurityAdvisor's [personalized security awareness platform](https://www.securityadvisor.io/cybersecurity-aware-culture) delivers a measurable reduction in security incidents through personalized coaching for each employee, teaching them how to identify and remediate cyberattacks.

The Cortex XSOAR content pack is designed to enable security teams to automate real-time delivery of relevant security training modules to end-users when an exploit is discovered or an incident occurs. For example, when the SOC detects a user clicking on a link in a phishing email, Cortex XSOAR will automatically trigger an anti-phishing training module directly to the employee to prevent future incidents.

The [training platform](https://www.securityadvisor.io/products) integrates seamlessly with an organization's existing security infrastructure including endpoint security, threat intelligence, and cyber attack response services. With a single click from the Cortex XSOAR Marketplace, businesses of all sizes can transform employees into the strong foundation of a sound security posture.

Benefits include:

* Improvement to overall security posture by providing just-in-time coaching to end users about threats that are relevant to them
* Reduction in the number of security events within an organization as employees become more aware of cyber risks
* Access to an extensive library of cyber-security awareness micro modules and related reporting including executive dashboards and department trends
* Phishing simulation engine with a robust template library and customizable pages

**Case Study:**

![Case study overview. The integration between Palo Alto Networks’ Cortex XSOAR and SecurityAdvisor delivers a unique automated and event triggered approach created for SOC teams to build cyber-immunity across an organization with less overhead.](https://www.paloaltonetworks.com/blog/wp-content/uploads/2021/04/word-image-22.png)

In addition to training employees, the integration between Cortex XSOAR and SecurityAdvisor yields measurable outcomes that CISO's can use to justify the investments made. The training delivered by SecurityAdvisor's platform is quick, relevant, and has shown to reduce incidents from targeted users by 90% due to better security awareness and hygiene. The integration between Palo Alto Networks' Cortex XSOAR and SecurityAdvisor delivers a unique automated and event triggered approach created for SOC teams to build cyber-immunity across an organization with less overhead.

**Learn More**

Join us on April 29 at 9:00 AM PST for the "[Cortex® XSOAR Marketplace Top Use Cases Webinar](https://register.paloaltonetworks.com/cortexxsoarmarketplacetopusecaseswebinar-april2920)," to discover how to leverage SecurityAdvisor with Cortex XSOAR to automate the delivery of real-time security awareness training to end users. We will discuss best practices and provide you a live demo of the pack. Save your seat today!

*** ** * ** ***

## Related Blogs

### [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown)

[#### Mitigate Risk and Increase Identity Awareness with Cortex XSOAR and SailPoint](https://www.paloaltonetworks.com/blog/security-operations/sailpoint-xsoar-partnership/)

### [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown)

[#### Protect Your Network from IoT Devices By Using Cortex XSOAR and Sepio Systems](https://www.paloaltonetworks.com/blog/security-operations/security-operations-sepiosystems-xsoar/)

### [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown)

[#### Automate Gurucul Behavior Analytics Threat Detection and Response Workflows](https://www.paloaltonetworks.com/blog/security-operations/automate-gurucul-behavior-analytics-threat-detection-and-response-workflows/)

### [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown)

[#### Alert Investigation and Response Just Got Easier with the Digital Shadows Threat Intelligence Pack Available Now via the Cortex XSOAR Marketplace](https://www.paloaltonetworks.com/blog/security-operations/alert-investigation-and-response-just-got-easier-with-the-digital-shadows-threat-intelligence-pack-available-now-via-the-cortex-xsoar-marketplace/)

### [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown)

[#### Accelerate Detection and Response with Cortex XSOAR and LogPoint](https://www.paloaltonetworks.com/blog/security-operations/accelerate-detection-and-response-with-cortex-xsoar-and-logpoint/)

### [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/security-operations/category/use-cases/?ts=markdown)

[#### Auto-Quarantine Phishing Threats with Cortex XSOAR and Cofense Vision](https://www.paloaltonetworks.com/blog/security-operations/auto-quarantine-phishing-threats-with-cortex-xsoar-and-cofense-vision/)

### Subscribe to Security Operations Blogs!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
![spinner](https://www.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up  
Please enter a valid email.  
By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.  
This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply.  
{#footer} {#footer}

## Products and Services

* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)

* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)

* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)

* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)

* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)

* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)

* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)

* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)

* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)

* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)

* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)

* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)

* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)

* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)

## Company

* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)

## Popular Links

* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)

Copyright © 2026 Palo Alto Networks. All Rights Reserved

* [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* EN  
  Select your language