ACOM CO., LTD., a leader in the loan and credit card industry, adopted remote work during the COVID-19 pandemic and made a strategic shift from traditional perimeter-based security to Zero Trust architecture. To ensure a consistent level of security both inside and outside the company, Acom evaluated multiple vendors and chose the cloud-native security platform Netskope for its ability to deliver a complete Zero Trust solution in a single product. After going live in 2024, the company succeeded in both improving user convenience and enhancing protection against data leaks—contributing to a stronger security posture that supports Acom’s mission to “fully protect customer information.”
Founded in 1936, Acom upholds the core principle of “customer-first” under its philosophy of “a circle of trust.” The company operates loan and credit card services, credit guarantees, and embedded finance in Japan, while expanding loan operations across Asia as part of its global strategy. It has also led innovation in customer experience, such as developing automated contract machines.
Regardless of changes in the business landscape, Acom remains committed to delivering happiness to all stakeholders—a commitment rooted in mutual trust. Security plays a crucial role in maintaining this “circle of trust,” and the pandemic dramatically reshaped how the company approached it.
Masatoshi Shimbo, Deputy General Manager of the Infrastructure Team in Acom’s Systems Operation Department, explains “Before COVID-19, PCs were restricted to in-office use and could not be taken offsite. To enable remote work during the pandemic, we rapidly implemented a VPN-based solution. But as VPN vulnerabilities became a target of cyberattacks, we replaced it—yet continued to rely on traditional firewall-based perimeter defense. Looking beyond the pandemic, we began exploring Zero Trust in 2021 to build a security framework suitable for the hybrid work era.”
Other vendors required additional tools to fill functionality gaps. Netskope, on the other hand, offered centralized visibility and management of internet traffic.
On the aim of adopting Zero Trust, Shimbo explains, “We wanted to break away from perimeter-based defense by managing security at the same level inside and outside the organization.”
In evaluating solutions, the team prioritized the ability to integrate various web security functions—previously spread across multiple tools. They needed to cover essential capabilities such as Secure Web Gateway (SWG) to secure internet access and Remote Browser Isolation (RBI) to separate internet and internal networks. After narrowing down potential vendors and conducting PoCs (proof of concept), Acom found that only Netskope met all the requirements.
“Being able to consolidate existing security features into a single platform was a major advantage,” says Shimbo. “Other vendors required additional tools to fill functionality gaps. Netskope, on the other hand, offered centralized visibility and management of internet traffic. It also included new capabilities like Cloud Access Security Broker (CASB) for monitoring and controlling cloud service usage, and Data Loss Prevention (DLP) to identify, monitor, and protect sensitive data—features we had not previously deployed. The unified console made configuration easy, and the ability to realize SASE (Secure Access Service Edge) in a single product was highly valued.”
In November 2022, Acom chose Netskope not only for its capabilities but also for its cost advantages over renewing existing solutions. “Our leadership also showed strong interest in Zero Trust,” adds Shimbo.
Our previous third-party remote browser had a slow launch time and rendering issues, which users complained about. Now, those complaints have completely disappeared.
Hiroshi Nishikawa, Section Manager in the Infrastructure Team, explains the deployment process, “During implementation, we tested whether the cloud services used in daily operations were accessible through Netskope. When issues arose, we adjusted settings and fine-tuned Netskope to resolve them.”
By the end of 2023, Netskope-powered Zero Trust had been fully rolled out to all internal and external OA (Office Automation) devices, and was in use by all employees. The company also transitioned completely to Netskope during a scheduled refresh of its on-prem security appliances. By January 2025, the Zero Trust environment was fully established.
More than a year since implementation, Acom has begun seeing tangible benefits.
Masahiko Okugawa, Senior Chief in the Infrastructure Team, shares, “Our previous third-party remote browser had a slow launch time and rendering issues, which users complained about. Now, those complaints have completely disappeared. We also use Cloud Firewall to allow access to rich content only for authorized users.”
Operationally, routing internet traffic through Netskope helped avoid bottlenecks caused by centralized traffic, resulting in improved response times without compromising safety. “By using the Internet via Netskope, we have been able to improve response times as well as ensure safety. In addition, by consolidating our existing security products, we have been able to reduce operational and maintenance labor and eliminate the need for capacity management, thereby improving the efficiency of operational management and reducing total costs,” says Nishikawa.
By using the Internet via Netskope, we have been able to improve response times as well as ensure safety.
Shimbo highlights how Netskope has supported both operational efficiency and compliance for the information management team, “Previously, monitoring outbound information from company-issued PCs required manual access log reviews, which was time-consuming. Now, DLP makes it easy to check and search through a dashboard. CASB also lets us see file names uploaded to the cloud, which strengthens our data leak prevention.”
Acom is fully compliant with PCI DSS, the international security standard for protecting credit card member information. “This Zero Trust implementation has reinforced our framework for fully protecting customer information,” says Shimbo.
Looking ahead, Shimbo shares the next steps, “We’ve successfully moved beyond perimeter-based security. Our next goal is microsegmentation—dividing the network into smaller segments to boost security. We also want to use Netskope to enable granular user-level controls. With a secure foundation in place, we aim to leverage the latest technologies like AI in a timely manner to enhance competitiveness and customer satisfaction.”
Backed by Zero Trust, Acom’s dual approach of defense and innovation will continue to strengthen its “circle of trust.”