> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/copy-content/copy-cspm-configurations.md).

# Copy CSPM configurations

### Rules

When you copy **Rules** in the Upgrade Helper, the following actions occur:

* Prisma Cloud Custom Policies (Config, Attack Path, and Data) are copied as Detection Rules in Cortex Cloud.
* The enabled/disabled state of the default policies is also applied to the corresponding Detection Rules in Cortex Cloud.

#### Verify copied rules

After you follow the steps listed in **Copy configurations**, navigate to **Posture Management** → **Rules & Policies** → **Rules** → **Cloud Security** to view the list of rules that were copied.

### Custom policies

When you copy **Custom Policies** in the Upgrade Helper, the Prisma Cloud Custom Alert Rules are copied as Policies in Cortex Cloud.

#### Verify copied policies

After you follow the steps listed in **Copy configurations**, navigate to **Posture Management** → **Rules & Policies** → **Policies** → **Cloud Security** to view the list of policies that were copied.

When verifying the list of policies, note the following details:

* The policy name will have a **prisma\_cloud\_copy** suffix.
* To verify that the **prisma\_cloud\_alert\_rule** label was added to your policies, click the three dots next to **Create Policy** and select **Labels** from under **Add Columns**.
* Click on a policy to view its details and review the issues that were generated.

| Alert Rule name in Prisma Cloud                    | Result after copying to Cortex Cloud                                                               |
| -------------------------------------------------- | -------------------------------------------------------------------------------------------------- |
| Alert rule default config or attack                | Policies are created                                                                               |
| Alert rule custom config or attack path            |                                                                                                    |
| Alert rule with custom compliance standard filter  |                                                                                                    |
| Alert rule with Email and Slack notification setup |                                                                                                    |
| Alert rule without Email notification setup        |                                                                                                    |
| Alert rule with CIEM policies                      | <p>Policies are not created:</p><ul><li>IAM policy</li><li>Attack path with CIEM finding</li></ul> |
| Alert rule with network or audit event policies    | <p>Policies are not created:</p><ul><li>Network</li><li>Audit event</li><li>Anomaly</li></ul>      |

### Automation rules

When you copy **Automation Rules** in the Upgrade Helper, the Prisma Cloud Notifications are copied as Automation Rules in Cortex Cloud.

You can copy Prisma Cloud notifications that were configured for:

* Alert rules with default Config or Attack Path policies
* Alert rules with Slack and Email notification setup

#### Verify copied notifications

After you follow the steps listed in **Copy configurations**, navigate to **Investigation & Response** → **Automation** → **Automation Rules** to view the list of notifications that were copied.

The notification type is Email and has a **prisma\_cloud\_copy** suffix. You can view the corresponding Policy ID and the email recipient.

| Alert rule in Prisma Cloud                             | Notification channels configured for alert rule in Prisma Cloud | Result after copying to Cortex Cloud  |
| ------------------------------------------------------ | --------------------------------------------------------------- | ------------------------------------- |
| Alert rule with default Config or Attack Path policies | Email                                                           | Automation rule is created with Email |
| Alert rule with Slack and Email                        | Slack and Email                                                 |                                       |
| Alert rule with no Email                               | Slack                                                           | Automation rule is not created        |
| Alert rule with custom Config or Attack Path policies  | Not applicable                                                  |                                       |

### Custom compliance standards

When you copy **Custom Compliance Standards** in the Upgrade Helper, the Prisma Cloud Custom Compliance Standards are copied to Cortex Cloud.

#### Verify copied compliance standards

After you follow the steps listed in **Copy configurations**, navigate to **Posture Management** → **Compliance** → **Standards** to view the list of custom compliance standards that were copied.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/copy-content/copy-cspm-configurations.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.