Case Study: Advanced Info Service achieves faster, automated incident response and reduced MTTR with Palo Alto Networks' Cortex XSOAR

Advanced Info Service transforms Security Operations Centre with scalable, automated processes to boost incident response management

Advanced Info Service (AIS) is Thailand’s leading mobile operator with over 42 million subscribers. As its business and customer-facing services grew, AIS struggled with a traditional SIEM and fragmented security tools that generated high incident volumes, long response times, and difficulty meeting SLAs—especially as regional ransomware attacks highlighted the need for stronger, trackable incident management and customer-facing security services.

AIS deployed Palo Alto Networks’ Cortex XSOAR in December 2019 to provide ticketing, orchestration and automated playbooks, integrating existing SIEMs and tools. The platform centralized incident workflows, enabled playbook-driven automation and analyst collaboration, and delivered faster detection and response (minutes vs. days), fewer false positives, prioritized incident scoring, SLA tracking, and reduced repetitive tasks—while positioning AIS to adopt further Palo Alto solutions and offer managed security services.

Advanced Info Service

Sanjay Thomas

Chief Information Officer