Netskope is recognized as a Leader again in the Gartner® Magic Quadrant™ for SASE Platforms and Security Service Edge
Fukuoka Jisho Co., Ltd., guided by its philosophy of “For an Exciting Fukuoka,” leads redevelopment and urban development projects including Canal City Hakata. The company’s DX Promotion Department, which manages IT infrastructure for seven group companies including subsidiaries, decided to move away from perimeter-based defense — which trusted connections based on location and destination — toward zero trust. It adopted Netskope as its cloud-first SSE (Security Service Edge) solution, using a single, consistent policy to gain visibility into and control over access to cloud services, the web, and internal systems. After restructuring its partner arrangement to establish stable operations, and carefully accounting for the needs of varied business lines such as its hotel operations, Fukuoka Jisho rolled out the platform across all seven group companies while minimizing disruption. Today, the company maintains the same level of security and convenience regardless of where employees work.
Fukuoka Jisho Co., Ltd. is a comprehensive developer guided by the corporate philosophy of “For an Exciting Fukuoka.” The company plans, develops, and operates a wide range of real estate — office buildings and commercial facilities such as Canal City Hakata, as well as hotels, logistics facilities, and residences. It manages more than 10% of Fukuoka’s office floor space, making it a driving force behind the region’s urban development.
The DX Promotion Department manages IT infrastructure across seven group companies, including subsidiaries. “Our mission is to provide an environment where employees can focus on the work of building our city,” says Takeharu Terashi, Section Manager of the DX Promotion Department. The department is organized into an IT Systems team and a Business Efficiency team, with the IT Systems team responsible for operating IT infrastructure and security across the group.
The spread of COVID-19 drove a sharp increase in employees accessing internal systems and cloud services from outside the office. As users and data extended beyond the corporate network, it became clear that the traditional approach of defending a fixed network perimeter could no longer provide consistent security. Fukuoka Jisho therefore set out to modernize the network and security supporting remote access. “We wanted to create an environment where employees could work outside the office with confidence, while also reducing the operational burden of our on-premises systems,” Terashi says. “So we decided to move to the cloud and to zero trust in stages.”
We valued its design philosophy, which assumes that business runs on cloud services.
In selecting its new platform, Fukuoka Jisho compared several products. Looking back on why it chose Netskope, Terashi says, “We valued its design philosophy, which assumes that business runs on cloud services.” While some products still leaned heavily on continued on-premises operation, Netskope consolidates the multiple security functions needed for cloud and web access onto a single platform to deliver SSE — an architecture that embodied the cloud-first design the company was looking for. “The fact that it let us build an environment that wouldn’t easily fall back on-premises matched the direction we wanted to take,” Terashi says.
On functionality, the company valued the ability to identify cloud services and control access not just by tenant or instance, but at the API level. “For example, we can let employees use only the Slack workspace the company has approved, while allowing them to view messages but restricting posting — that kind of fine-grained control,” Terashi explains. “We saw it as a capability we’d need in the future, and that’s part of why we chose Netskope.”
The decision was reinforced by App Catalog (formerly the Netskope Cloud Confidence Index), which assesses and surfaces the risk of cloud services. “We were fielding a steady stream of requests to adopt new cloud services, and vetting the safety of each one individually was a heavy burden,” Terashi explains. “Using Netskope’s risk assessments let us cut that effort dramatically.” This also gave Fukuoka Jisho a way to identify and curb shadow IT — unauthorized cloud services — while easing the burden on the administrators who decide what to approve.
Netskope lets us connect to the Active Directory server even before a user signs in, securing the communication authentication requires — which let us roll out to group companies smoothly.
In the early stages of deployment, Fukuoka Jisho prioritized shifting the point of traffic inspection and control from a data-center-centric architecture to each employee’s device, planning to design detailed policies in a later phase. But controlling access to on-premises file servers took far longer than expected, and operations struggled to get on track for some time. “Restructuring our partner arrangement resolved an issue that had gone unsolved for more than a year,” recalls Yusuke Nishikubo, Senior Expert in the DX Promotion Department.
From the second year of deployment onward, Fukuoka Jisho accelerated its rollout to group companies. Takehisa Kitahara of the DX Promotion Department, explains how Netskope’s pre-logon user mode solved an authentication problem that arose from retiring the company’s closed network during PC kitting. “Netskope lets us connect to the Active Directory server even before a user signs in, securing the communication authentication requires — which let us roll out to group companies smoothly,” Kitahara says.
The rollout to each company was also designed to minimize the burden on the field. Fukuoka Jisho moved away from having group companies procure PCs individually, standardizing instead on centralized kitting by the DX Promotion Department. The company also explained to users that Netskope inspects and visualizes network traffic, which helped raise security awareness. For its hotel business, which operates 24 hours a day, 365 days a year, Fukuoka Jisho is preparing a policy to restrict uploads to unauthorized cloud storage. To limit the impact on frontline staff, it plans to first validate the policy with hotel managers who don’t handle front-desk duties, then gradually extend it to front-desk staff.
The biggest change is that we can now maintain the same level of security no matter where someone is working.
On the impact of deploying Netskope, Nishikubo says, “We’ve put in place the core services needed to achieve zero trust. The biggest change is that we can now maintain the same level of security no matter where someone is working.” That impact can be seen from three perspectives: administrators, operations staff, and end users.
From an administrator’s perspective, Fukuoka Jisho can now see access to cloud services and the web, strengthening governance. “We used to assume that being inside the closed network meant we were safe,” Nishikubo explains. “By shifting to a model that verifies and controls access starting from the device itself, we can maintain security whether someone is inside or outside the office.”
From an operations perspective, Fukuoka Jisho retired its VPN — which carried vulnerability risk and was cumbersome to connect to — along with the legacy mechanism for reaching file servers from outside the network, and now manages access control policy centrally through Netskope. “We’ve seen fewer inquiries about accessing internal systems, and users no longer have to deal with connecting to a VPN,” Nishikubo says.
From a user’s perspective, there are no longer systems that only work from inside the office; employees can access Box, Microsoft 365, and other services the same way regardless of location. “Success, for us, is that users can keep working without having to think about it,” Nishikubo says. “We’ve also stopped getting questions about how to access internal systems from outside.”
At the same time, greater visibility under zero trust means more to keep an eye on. “With perimeter-based defense, there was a single line to defend,” Nishikubo notes. “With zero trust, every device and service needs continuous verification and authorization, so the number of places we need to watch multiplies.” This is, in part, the result of being able to see risks that were previously difficult to detect. Fukuoka Jisho is addressing the resulting increase in monitoring and operational work through its partner’s managed services.
Looking ahead, the company’s focus is on balancing the use of generative AI with security governance. Fukuoka Jisho already provides several generative AI services to all employees. “We want to think more concretely about how to manage AI agents as non-human identities,” Terashi says. Kitahara, for his part, would like to see better searchability for technical documentation tailored to specific use cases, clearer guidance on which features are available under the company’s current licenses, and an environment where the impact of policy changes can be safely tested.
Fukuoka Jisho will continue to advance its security foundation, built around Netskope One SSE, to support the growth of the diverse businesses behind its urban development work.