[{"data":1,"prerenderedAt":1330},["ShallowReactive",2],{"sc:header-data-ja":3,"sc:footer-data-ja":489,"post-ja--posts-2026-09-21-red-tenant-dark-tenant-cio-1ccdc83a29f2b5":519,"authors_data":749,"content-ja-list-7b291c2dd91a4":1103,"authors_data:Jan Geisbauer":1324},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"ja":13},{"title":14,"url":15,"alt":16},"ホーム","/ja","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"ja":21},{"title":22,"description":23},"Workplace","Microsoft 365を基盤に、スマートで安全な、柔軟性の高いワークプレイスを実現します。最新のテクノロジーとアイデンティティサービスが一つにつながります。",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"ja":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"ja":34},{"title":35,"url":36},"Managed Intune","/ja/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"ja":40},{"title":41,"url":42},"Managed Entra","/ja/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"ja":46},{"title":47,"url":48},"Managed Workplace","/ja/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"ja":52},{"title":53,"url":54},"Consulting Services","/ja/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"ja":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"ja":64},{"title":65,"url":66},"Microsoft Entra Suite","/ja/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"ja":70},{"title":71,"url":72},"Microsoft Intune","/ja/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"ja":76},{"title":77,"url":78},"Microsoft Windows","/ja/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"ja":82},{"title":83,"url":84},"Windows 365 Cloud PC","/ja/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"ja":88},{"title":89,"url":90},"Cloud Workplace Foundation","/ja/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"ja":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"ja":100},{"title":101,"url":102},"Microsoft 365 Copilot","/ja/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"ja":106},{"title":107,"url":108},"Teams","/ja/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"ja":112},{"title":113,"url":114},"SharePoint & Power Platform","/ja/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"ja":118},{"title":119,"url":120},"Exchange Online","/ja/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"ja":124},{"title":125,"url":126},"Information Protection & Compliance","/ja/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"ja":130},{"title":131,"description":132},"Azure","Azureで成長を後押しします。IaaSとPaaSによって、クラウドのコストを下げ、効率を高め、イノベーションを進めます。",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"ja":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"ja":142},{"title":143,"url":144},"Azure Managed Services","/ja/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"ja":148},{"title":149,"url":150},"Azure Consulting","/ja/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"ja":154},{"title":155},"シナリオ",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"ja":160},{"title":161,"url":162},"クラウドを計画する","/ja/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"ja":166},{"title":167,"url":168},"クラウドへ移行する","/ja/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"ja":172},{"title":173,"url":174},"ビジネスを刷新する","/ja/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"ja":178},{"title":179,"url":180},"VMware戦略を立て直す","/ja/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"ja":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"ja":190},{"title":191,"url":192},"Azure Foundation","/ja/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"ja":196},{"title":197,"url":198},"Azure AI Foundation","/ja/azure/azure-ai-foundation",{"name":86,"languages":200},{"ja":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"ja":205},{"title":206,"url":207},"Azure Data Foundation","/ja/azure/azure-data-foundation",{"name":188,"languages":209},{"ja":210},{"title":211,"url":212},"Azure Container Foundation","/ja/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"ja":216},{"title":217,"url":218},"Managed Dark Tenant","/ja/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"ja":222},{"title":223,"url":224},"Cloud Adoption Framework","/ja/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"ja":228},{"title":229,"url":230},"Cloud Competence Center","/ja/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"ja":234},{"title":235,"description":236,"emergency":237},"Security","受賞歴のある24時間365日のManaged Service、インシデント対応、最新水準の保護で、クラウドの安全を見守り、インフラを守ります。",{"text":238,"href":239,"skin":240,"icon":241},"サイバー攻撃の渦中ですか？","/ja/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"ja":249},{"title":250,"url":251},"Managed Red Tenant","/ja/security/managed-red-tenant",{"name":214,"languages":253},{"ja":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"ja":259},{"title":260,"url":261},"Sentinel Data Lake","/ja/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"ja":265},{"title":266,"url":267},"Security Consulting","/ja/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"ja":274},{"title":275,"url":276},"Cloud Security Operations Center","/ja/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"ja":280},{"title":281,"url":282},"Global Secure Access","/ja/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"ja":286},{"title":287,"url":288},"MyWorkID","/ja/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"ja":295},{"title":296,"url":297},"Preventive Services","/ja/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"ja":301},{"title":302,"url":303},"Data Security Service","/ja/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"ja":307},{"title":308,"url":309},"Security Copilot Agents","/ja/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"ja":313},{"title":314,"url":315},"NIS2を技術で実装する","/ja/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"ja":319},{"title":320,"description":321},"製品","完全に安全で100%クラウドネイティブなMicrosoft環境のためのCompanion製品です。協働、ネットワーク認証、ソフトウェア管理を強化します。",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"ja":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","クラウドベースのソフトウェア配布",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"ja":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","クラウドからの証明書配布",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"ja":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Office 365のデータをローカルで利用",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"ja":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","サーバー間のデータ移行",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"ja":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Microsoft 365向けのTerraform Provider",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"ja":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","ネットワークの認証",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"ja":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Microsoft Teamsで連絡先を探す",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"ja":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilotのリアルタイム監視",{"name":396,"languages":397},"casestudies",{"ja":398},{"title":399,"url":400,"description":401},"導入事例","/ja/casestudies","当社はクラウドの先駆者として、包括的なクラウドソリューションを提供するMicrosoftのトップパートナーです。ブループリントに基づくアプローチとInfrastructure as Codeの知見が土台にあります。",{"name":403,"languages":404,"children":407},"company",{"ja":405},{"title":406,"description":401},"会社",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"ja":411},{"title":412},"会社概要",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"ja":417},{"title":418,"url":419},"Facts & Figures","/ja/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"ja":423},{"title":424,"url":425},"お問い合わせと拠点","/ja/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"ja":429},{"title":430,"url":431},"スイスのglueckkanja","/ja/company/switzerland",{"name":433,"languages":434},"austria",{"ja":435},{"title":436,"url":437},"オーストリアのglueckkanja","/ja/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"ja":441},{"title":442},"キャリア",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"ja":447},{"title":448,"url":449},"採用情報","/ja/career",{"name":451,"languages":452},"company-young-professionals",{"ja":453},{"title":454,"url":455},"Young Professionals","/ja/young-professionals",{"name":457,"languages":458},"company-jobs",{"ja":459},{"title":460,"url":461},"募集職種","/ja/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"ja":465},{"title":466},"最新情報",[468,474],{"name":469,"languages":470},"company-blog",{"ja":471},{"title":472,"url":473},"ブログ","/ja/blog",{"name":469,"languages":475},{"ja":476},{"title":477,"url":478},"イベント","/ja/events",[480],{"name":481,"languages":482},"career-meta",{"ja":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"ja":487},{"title":488,"url":425,"active":484},"お問い合わせ",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksJa":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"プライバシーポリシー","/ja/privacy",{"title":514,"url":515},"運営者情報","/ja/imprint",{"title":517,"url":518},"Cookieなし","/ja/cookies",{"id":520,"title":521,"author":522,"body":524,"cta":494,"description":636,"eventid":494,"extension":644,"hideInRecent":484,"layout":645,"meta":646,"moment":650,"navigation":325,"path":741,"seo":742,"stem":743,"tags":744,"webcast":484,"__hash__":748},"content_ja/posts/2026-09-21-red-tenant-dark-tenant-cio.md","管理業務と日常業務を1台のPCで。Game Overです。",[523],"Jan Geisbauer",{"type":525,"value":526,"toc":635},"minimal",[527,532,536,539,542,545,548,551,553,556,560,562,569,580,583,586,590,592,600,606,609,611,614,621,629,632],[528,529,531],"h2",{"id":530},"_1台のpc2つのタブ1回のクリック","1台のPC、2つのタブ、1回のクリック",[533,534,535],"p",{},"{: .h3-font-size}",[533,537,538],{},"このシナリオは地味で、だからこそ危険です。管理者がいつものオフィス用ノートPCに向かっています。左のブラウザタブにはMicrosoft 365管理センターが開かれ、グローバル管理者権限とIntune管理者権限もそのままです。右のタブでは「無料ツール」をダウンロードします。Invoice_2026.pdf.exeです。1回のクリック、PowerShellのペイロード、永続化の確立、そして権限昇格が走ります。Tier 0、つまり企業ITの心臓部への道が開きます。",[533,540,541],{},"Game Overです。",[533,543,544],{},"MITRE ATT&CKは現在、エンタープライズ環境向けに222のテクニックと475のサブテクニックを記載しています。あわせて700近い既知の経路が、権限を昇格し、横方向に移動し、企業の最も機微な資産に到達するために存在します。攻撃者に必要なのはそのうち1つだけです。そして当社が支援するインシデント対応の大半で、同じパターンが現れます。メールを読み、ウェブを閲覧し、Teamsでチャットしていたのと同じ端末で管理業務が行われていた、というものです。",[533,546,547],{},"「Assume Breach」を本気で受け止めるなら、そしてNIS2のもとではほかに選択肢はほとんどありませんが、居心地の悪い帰結を受け入れる必要があります。同じPCに載せてはいけないものがある、ということです。中途半端な分離は分離ではありません。",[528,549,550],{"id":550},"なぜ思いつきやすい答えでは足りないのか",[533,552,535],{},[533,554,555],{},"よくある反射的な答えは誰もが知っています。踏み台サーバーはどうでしょうか。侵害されたクライアントからのリバースプロキシのトンネルが1本あれば、攻撃者は踏み台をそのまま通り抜けます。同じマシン、同じブラウザ、同じリスクです。自社テナント内に従来型の特権アクセス管理（PAM）を構築するのはどうでしょうか。するとすぐに問いが立ちます。その管理環境を管理するのは誰か、という問いです。保護される管理用ワークステーションが、保護対象と同じテナントの中に存在するなら、作ったのは壁ではなく円です。ではオフィス用ノートPCから使う仮想デスクトップは。それはノートPCのキーロガーをそのまま引き継ぎます。画面は仮想でも、打鍵は本物です。ゼロトラストは、管理業務と日常業務が1台の端末を共有した時点で終わります。",[528,557,559],{"id":558},"managed-red-tenantアーキテクチャとしての分離","Managed Red Tenant：アーキテクチャとしての分離",[533,561,535],{},[533,563,564,565,568],{},"まさにここに",[566,567,250],"a",{"href":251},"（MRT）が入ります。管理業務専用の、完全にコードで管理され、徹底的にハードニングされたテナント環境です。Tier 0の作業には、マネージドサービスとして運用される特権アクセスワークステーション（PAW）が用意されており、物理的に独立した端末としてハードニングされたハードウェアPAWがあります。Tier 1の作業にはVAW、すなわちAzure Virtual Desktopをベースとする仮想アクセスワークステーションを使います。到達できるのは準拠デバイスからのみ、FIDO2のみ、条件付きアクセスのもとでのみです。さらに利便性のために、特別かつ最大限に安全な設定を施したiPadを組み合わせます。",[570,571,573],"div",{"style":572},"grid-column: content",[533,574,575],{},[576,577],"img",{"alt":578,"src":579},"2つのテナントの模式的な比較。左は管理用ワークステーションPAW、VAW、iPAWを備えた遮蔽空間としてのManaged Red Tenant、右はインターネット、メール、Teams、SharePointが通り抜けられる間取りとして描かれた本番テナント、その間には途切れのない赤い仕切り壁","https://res.cloudinary.com/c4a8/image/upload/blog/pics/game-over-1.jpg",[533,581,582],{},"ただしCIOにとっての決定的な論点は技術ではなく、運用モデルです。Red Tenantへのあらゆる変更はConfiguration as CodeとしてCI/CDパイプラインを通り、お客様の明示的な承認を経てはじめてデプロイされます。この共同責任の原則は、マネージドサービスを購入する立場なら誰もが問うべき問いに答えます。サービス事業者自身が侵害されたらどうなるのか、という問いです。答えは、何も起きない、です。お客様の承認がなければ、Red Tenantでは設定が1行も変わりません。管理レイヤーはお客様のリスクゾーンの外側にあり、拒否権はお客様の手に残ります。",[533,584,585],{},"運用上の利点は二重です。第一に、めったに得られない切れ味の分離が生まれます。本番環境への正当な管理アクセスは、定義上すべてMRTのマシンから来ます。それ以外はすべて攻撃です。これはSOCにノイズのないシグナルを与え、誤検知をより分ける代わりに即座に対応できるようにします。第二に、オフィス環境への攻撃が成功した場合でも、立ちはだかるのは段差ではなく壁です。侵害されたオフィス用ノートPCから、机の上に別の端末として置かれたハードウェアPAWへ跳ぶのは、攻撃者にとって極めて困難か、不可能です。",[528,587,589],{"id":588},"それでも起きてしまったらextra-life","それでも起きてしまったら。Extra Life",[533,591,535],{},[533,593,594,595,599],{},"経験を積んだCIOなら誰もが知っています。100パーセントの安全は存在しません。Assume Breachとは、自社の防御が破られることも計画に織り込むという意味でもあります。",[566,596,598],{"href":597},"/ja/posts/2026-03-20-stryker-attack-intune-privilege","2026年3月のStryker事案","は、その境目がいかに細いかを示しました。侵害されたIntune管理者アカウント1つで、79か国のデバイスを消去するには十分でした。今日のランサムウェアグループは、バックアップやActive Directory、つまり復旧に必要なまさにそのシステムを狙い撃ちします。そこから即興を始める側、つまり暗号化されたファイルサーバーを抱え、機能するIDを持たず、コミュニケーション基盤の代わりに電話連絡網しかない側は、企業が止まったまま何日も何週間も失います。",[533,601,602,603,605],{},"Red Tenantが「Game Over」になるのを防ぐものだとすれば、",[566,604,217],{"href":218},"はExtra Lifeです。平常時は静止していて、有事に起動される、準備済みの復旧環境です。24時間365日の緊急連絡番号への1本の電話が、災害復旧プロセスを開始します。仮想のウォールームが、侵害された可能性のある本番環境とは独立して、主要な関係者全員との安全なコミュニケーションを直ちに確立します。Dark TenantはInfrastructure as Codeとして構築されているため、重要な復旧プロセスはすべて事前定義され自動化されています。Active DirectoryやIDといったシステムの根幹をなす要素は、ストレスのなかで場当たり的に組み上げられるのではなく、きれいに復元されます。その結果が、数時間から数日というRecovery Time Objective（RTO）と、定義されたRecovery Point Objective（RPO）です。即興の復旧が実務でたびたび要する数週間ではありません。",[528,607,608],{"id":608},"二重のレジリエンス",[533,610,535],{},[533,612,613],{},"Red TenantとDark Tenantは2つの異なる問いに答えており、その2つが揃ってはじめて全体像になります。Red Tenantが答えるのは、侵害されたクライアントが侵害されたドメインになることをどう防ぐか、という問いです。Dark Tenantが答えるのは、それでも起きてしまったときにどう動き続けるか、という問いです。一方は壁であり、もう一方は救助ネットです。",[533,615,616,617,620],{},"オーストリアの企業には",[566,618,619],{"href":315},"規制面の側面","が加わり、それは間もなく非常に具体的になります。2026年10月1日に施行されるNISG 2026により、およそ4,000社のオーストリア企業が証明可能なサイバーセキュリティ義務の対象となります。リスク管理、事業継続、緊急時計画、危機管理が明示的に含まれます。管理アクセスがアーキテクチャとして隔離されていること、そして有事に備えてテスト済みで自動化された復旧環境が用意されていることを監督機関に説明できる企業は、啓発研修と希望的観測に言及する企業とは別の議論をすることになります。",[570,622,623],{"style":572},[533,624,625],{},[576,626],{"alt":627,"src":628},"NIS2第21条2項のリスク対策の表。行はIncident Handling、Business Continuity、Supply Chain Security、Security in Network and Information Systems、Effectiveness of Cybersecurity Risk Management Measures、Human Resources Security and Access Control、Multifactor Authentication、列のManaged Red TenantとManaged Dark Tenantにチェックマークが入っている","https://res.cloudinary.com/c4a8/image/upload/blog/pics/game-over-2.jpg",[533,630,631],{},"いずれのサービスも当社はマネージドサービスとして運用しており、担当チームはBSI認定のAPT対応事業者として、すでに火の手が上がっている現場の反対側に定期的に立ち、その経験を直接アーキテクチャへ還元しています。お客様にはDAX上場企業も重要インフラ事業者も含まれます。",[533,633,634],{},"同じPCに載せてはいけないものがあります。そしてGame Overを許容できない企業があります。であれば、壁とExtra Lifeを用意するほうがよいでしょう。",{"title":636,"searchDepth":637,"depth":637,"links":638},"",2,[639,640,641,642,643],{"id":530,"depth":637,"text":531},{"id":550,"depth":637,"text":550},{"id":558,"depth":637,"text":559},{"id":588,"depth":637,"text":589},{"id":608,"depth":637,"text":608},"md","post",{"lang":647,"seoTitle":648,"titleClass":649,"date":650,"categories":651,"blogtitlepic":652,"socialimg":653,"customExcerpt":654,"keywords":655,"asideNav":656,"contactInContent":671,"maxContent":484,"published":325,"scripts":740},"ja","Managed Red TenantとManaged Dark Tenant：CIOのための管理分離と復旧","h2-font-size","2026-09-21",[235],"head-game-over-en.jpg","/blog/heads/head-game-over-en.jpg","CIOにとってテナントが1つでは足りない理由と、2つ目がめったに検討されない理由。Managed Red Tenantは管理業務をオフィス環境からアーキテクチャとして分離し、Managed Dark Tenantは防御が破られてもなお組織が動き続けられるようにします。それが運用モデル、SOCのシグナル、そしてNISG 2026による証明義務にとって何を意味するのかを解説します。","Managed Red Tenant, Managed Dark Tenant, Privileged Access Workstation, PAW, Tier 0, Assume Breach, ゼロトラスト, Microsoft 365 災害復旧, Recovery Time Objective, NISG 2026, NIS2 オーストリア, Configuration as Code, Infrastructure as Code, APT対応, CIO Kongress",{"menuItems":657},[658,660,663,666,669],{"href":659,"text":531},"#_1台のpc2つのタブ1回のクリック",{"href":661,"text":662},"#なぜ思いつきやすい答えでは足りないのか","思いつきやすい答え",{"href":664,"text":665},"#managed-red-tenantアーキテクチャとしての分離","アーキテクチャとしての分離",{"href":667,"text":668},"#それでも起きてしまったらextra-life","Extra Life",{"href":670,"text":608},"#二重のレジリエンス",{"quote":325,"infos":672},{"bgColor":673,"color":674,"boxBgColor":491,"boxColor":674,"headline":488,"subline":675,"level":528,"textStyling":676,"flush":677,"person":678,"form":693},"var(--color-gk-dark-blue)","var(--color-gk-white)","Managed Red TenantとManaged Dark Tenantが自社の環境でどう噛み合うかを知りたいですか。ご連絡いただければ、お客様のケースを具体的に検討します。","text-light","justify-content-end",{"image":679,"cloudinary":325,"alt":680,"name":523,"quotee":523,"quoteeTitle":681,"quote":682,"detailsHeader":683,"details":684},"/people/people-jan-geisbauer-csoc.jpg","glueckkanjaのHead of Security、Jan Geisbauerのポートレート","Head of Security","中途半端な分離は分離ではありません。管理業務がメールやブラウザと同じ端末で動いているなら、たった1回のクリックがTier 0へのアクセスを左右します。当社はまさにこの隙間を、啓発ではなくアーキテクチャで塞ぎます。","ご連絡を\u003Cbr />お待ちしています。",[685,689],{"text":492,"href":686,"details":687,"icon":688},"tel:+49 69 4005520","今すぐ電話する","site/phone",{"text":690,"href":691,"icon":692},"sales@glueckkanja.com","mailto:sales@glueckkanja.com","site/mail",{"ctaText":694,"cta":695,"method":645,"action":697,"fields":698},"送信",{"skin":696},"primary on-surface","/send",[699,703,708,711,715,720,725,727,730,733,736,738],{"type":700,"id":701,"value":702},"hidden","_next","successful",{"label":704,"type":705,"id":706,"required":325,"requiredMsg":707},"お名前*","text","name","お名前を入力してください。",{"label":709,"type":705,"id":403,"required":325,"requiredMsg":710},"会社名*","会社名を入力してください。",{"label":712,"type":713,"id":713,"required":325,"requiredMsg":714},"メールアドレス*","email","メールアドレスを入力してください。",{"label":716,"type":717,"id":718,"required":484,"requiredMsg":719},"お問い合わせ内容","textarea","message","メッセージを入力してください。",{"label":721,"type":722,"id":723,"required":325,"requiredMsg":724},"ご入力いただいた情報は、お問い合わせの対応と回答のために当社で保存されます。データ保護に関する詳細は\u003Ca href=\"/ja/privacy\">プライバシーポリシー\u003C/a>をご覧ください。","checkbox","dataprotection","同意を確認してください",{"type":700,"id":726,"value":235},"_topic",{"type":700,"id":728,"value":729},"_location","AT",{"type":700,"id":731,"value":732},"_subject","Form: Blog Red Tenant Dark Tenant CIO | JA",{"type":700,"id":734,"value":735},"inbox_key","gkgab-contact-form",{"type":700,"id":737},"_gotcha",{"type":700,"id":739},"jsonData",{"form":325},"/posts/2026-09-21-red-tenant-dark-tenant-cio",{"title":521,"description":636},"posts/2026-09-21-red-tenant-dark-tenant-cio",[235,745,746,747],"Privileged Access","Zero Trust","NIS2","lpbOk3lCjLGcHF6A302G0oWn4WuGOO7_NClNVSJoxjc",{"id":750,"extension":751,"meta":752,"stem":8,"__hash__":1102},"authors_data/authors.json","json",{"path":753,"Fritz Zurhorst":754,"Alexander Schlindwein":760,"Sophie Luna":766,"Nadine Klein":774,"Karsten Kleinschmidt":780,"Julian Wendt":788,"Holger Bunkradt":793,"Ralf Mania":799,"Oliver Kieselbach":805,"Steffen Schwerdtfeger":811,"Gunnar Winter":819,"Jan Petersen":824,"Thorsten Kunzi":829,"Moritz Pohl":833,"Thorben Pöschus":838,"Christoph Hannebauer":844,"Marco Scheel":848,"Christopher Brumm":853,"Florian Klante":860,"Niklas Bachmann":865,"Nils Krautkrämer":870,"Patrick Treptau":876,"Peter Beckendorf":881,"Patrick Sobau":886,"Jörg Wunderlich":891,"Michael Breither":895,"Christian Kanja":900,"Zeba Hoffmann":906,"Jochen Fröhlich":911,"Jan Geisbauer":915,"Gerrit Reinke":926,"Christian Kordel":932,"Stephan Wälde":936,"Carolin Kanja":941,"Adrian Ritter":947,"Marvin Bangert":952,"Thorsten Pickhan":958,"Christian Lorenz":964,"Denis Böhm":969,"Fabian Bader":974,"Juan Jose Fernandez Perez":980,"Mahschid Sayyar":985,"Benjamin Dassow":990,"Markus Walschburger":995,"Jonathan Haist":1000,"Daniel Rohregger":1005,"Thomas Naunheim":1010,"Florian Stöckl":1015,"Pascal Asch":1020,"Markus Kättner":1025,"Anna Ulbricht":1032,"Annette Brauns":1039,"body":1045,"title":1101},"/authors",{"display_name":755,"avatar":756,"permalink":757,"linkedin":758,"imageOffsetTop":759},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":761,"avatar":762,"permalink":763,"twitter":764,"linkedin":765},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":767,"avatar":768,"permalink":769,"twitter":770,"linkedin":771,"imageOffsetLeft":772,"imageOffsetTop":773},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":775,"avatar":776,"permalink":777,"twitter":778,"linkedin":779,"imageOffsetTop":759},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":781,"avatar":782,"permalink":783,"twitter":784,"linkedin":785,"imageOffsetTop":786,"imageOffsetLeft":787},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":789,"avatar":790,"permalink":791,"linkedin":792},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":794,"avatar":795,"permalink":796,"linkedin":797,"twitter":798},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":800,"avatar":801,"permalink":802,"linkedin":803,"twitter":804},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":806,"avatar":807,"permalink":808,"linkedin":809,"twitter":810},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":812,"avatar":813,"permalink":814,"linkedin":815,"twitter":816,"imageOffsetTop":817,"imageOffsetLeft":818},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":820,"avatar":821,"permalink":822,"twitter":770,"linkedin":823},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":825,"avatar":826,"permalink":827,"twitter":770,"linkedin":828},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":830,"avatar":831,"permalink":832,"twitter":770,"linkedin":823,"imageOffsetTop":759},"Thorsten Kunzi","people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":834,"avatar":835,"permalink":836,"twitter":770,"linkedin":837},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":839,"avatar":840,"permalink":841,"twitter":842,"linkedin":843},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":845,"avatar":846,"permalink":847,"twitter":770,"linkedin":823,"imageOffsetTop":759},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":849,"avatar":850,"permalink":851,"twitter":852,"linkedin":852},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":854,"avatar":855,"permalink":856,"twitter":857,"linkedin":858,"imageOffsetTop":859},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":861,"avatar":862,"permalink":863,"linkedin":864,"twitter":770},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":866,"avatar":867,"permalink":868,"linkedin":869,"twitter":770},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":871,"avatar":872,"permalink":873,"twitter":874,"linkedin":875},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":877,"avatar":878,"permalink":879,"linkedin":880,"twitter":770},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":882,"avatar":883,"permalink":884,"linkedin":885,"twitter":770,"imageOffsetTop":759},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":887,"avatar":888,"permalink":889,"linkedin":890,"twitter":770},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":892,"avatar":893,"permalink":894,"twitter":770},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":896,"avatar":897,"permalink":898,"twitter":770,"linkedin":899},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":901,"avatar":902,"permalink":903,"twitter":904,"linkedin":905},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":907,"avatar":908,"permalink":909,"linkedin":910,"twitter":770},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":912,"avatar":913,"permalink":914,"twitter":770,"linkedin":823},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":523,"avatar":916,"permalink":917,"twitter":918,"linkedin":918,"imageOffsetTop":759,"socials":919},"people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[920,923],{"text":921,"href":922},"Blog","https://emptydc.com",{"text":924,"href":925},"Podcast","https://hairlessinthecloud.com",{"display_name":927,"avatar":928,"permalink":929,"twitter":930,"linkedin":931},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":933,"avatar":934,"permalink":935,"twitter":770,"linkedin":823},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":937,"avatar":938,"permalink":939,"twitter":940,"linkedin":823},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":942,"avatar":943,"permalink":944,"twitter":945,"linkedin":946},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":948,"avatar":949,"permalink":950,"twitter":951,"linkedin":951},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":953,"avatar":954,"permalink":955,"twitter":956,"linkedin":957},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":959,"avatar":960,"permalink":961,"twitter":962,"linkedin":963},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":965,"avatar":966,"permalink":967,"linkedin":968,"twitter":770},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":970,"avatar":971,"permalink":972,"linkedin":973,"twitter":770},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":975,"avatar":976,"permalink":977,"linkedin":978,"twitter":979},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":981,"avatar":982,"permalink":983,"linkedin":984},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":986,"avatar":987,"permalink":988,"linkedin":989},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":991,"avatar":992,"permalink":993,"linkedin":994},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":996,"avatar":997,"permalink":998,"linkedin":999},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1001,"avatar":1002,"permalink":1003,"linkedin":1004,"imageOffsetTop":759},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1006,"avatar":1007,"permalink":1008,"linkedin":1009,"imageOffsetTop":759},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1011,"avatar":1012,"permalink":1013,"linkedin":1014,"imageOffsetTop":859},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1016,"avatar":1017,"permalink":1018,"linkedin":1019,"imageOffsetTop":859},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1021,"avatar":1022,"permalink":1023,"linkedin":1024,"imageOffsetTop":859},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1026,"avatar":1027,"permalink":1028,"linkedin":1029,"imageOffsetTop":1030,"imageOffsetLeft":1031},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1033,"avatar":1034,"permalink":1035,"linkedin":1036,"imageOffsetTop":1037,"imageOffsetLeft":1038},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1040,"avatar":1041,"permalink":1042,"linkedin":1043,"imageOffsetTop":1044,"imageOffsetLeft":786},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1046,"Alexander Schlindwein":1047,"Sophie Luna":1048,"Nadine Klein":1049,"Karsten Kleinschmidt":1050,"Julian Wendt":1051,"Holger Bunkradt":1052,"Ralf Mania":1053,"Oliver Kieselbach":1054,"Steffen Schwerdtfeger":1055,"Gunnar Winter":1056,"Jan Petersen":1057,"Thorsten Kunzi":1058,"Moritz Pohl":1059,"Thorben Pöschus":1060,"Christoph Hannebauer":1061,"Marco Scheel":1062,"Christopher Brumm":1063,"Florian Klante":1064,"Niklas Bachmann":1065,"Nils Krautkrämer":1066,"Patrick Treptau":1067,"Peter Beckendorf":1068,"Patrick Sobau":1069,"Jörg Wunderlich":1070,"Michael Breither":1071,"Christian Kanja":1072,"Zeba Hoffmann":1073,"Jochen Fröhlich":1074,"Jan Geisbauer":1075,"Gerrit Reinke":1079,"Christian Kordel":1080,"Stephan Wälde":1081,"Carolin Kanja":1082,"Adrian Ritter":1083,"Marvin Bangert":1084,"Thorsten Pickhan":1085,"Christian Lorenz":1086,"Denis Böhm":1087,"Fabian Bader":1088,"Juan Jose Fernandez Perez":1089,"Mahschid Sayyar":1090,"Benjamin Dassow":1091,"Markus Walschburger":1092,"Jonathan Haist":1093,"Daniel Rohregger":1094,"Thomas Naunheim":1095,"Florian Stöckl":1096,"Pascal Asch":1097,"Markus Kättner":1098,"Anna Ulbricht":1099,"Annette Brauns":1100},{"display_name":755,"avatar":756,"permalink":757,"linkedin":758,"imageOffsetTop":759},{"display_name":761,"avatar":762,"permalink":763,"twitter":764,"linkedin":765},{"display_name":767,"avatar":768,"permalink":769,"twitter":770,"linkedin":771,"imageOffsetLeft":772,"imageOffsetTop":773},{"display_name":775,"avatar":776,"permalink":777,"twitter":778,"linkedin":779,"imageOffsetTop":759},{"display_name":781,"avatar":782,"permalink":783,"twitter":784,"linkedin":785,"imageOffsetTop":786,"imageOffsetLeft":787},{"display_name":789,"avatar":790,"permalink":791,"linkedin":792},{"display_name":794,"avatar":795,"permalink":796,"linkedin":797,"twitter":798},{"display_name":800,"avatar":801,"permalink":802,"linkedin":803,"twitter":804},{"display_name":806,"avatar":807,"permalink":808,"linkedin":809,"twitter":810},{"display_name":812,"avatar":813,"permalink":814,"linkedin":815,"twitter":816,"imageOffsetTop":817,"imageOffsetLeft":818},{"display_name":820,"avatar":821,"permalink":822,"twitter":770,"linkedin":823},{"display_name":825,"avatar":826,"permalink":827,"twitter":770,"linkedin":828},{"display_name":830,"avatar":831,"permalink":832,"twitter":770,"linkedin":823,"imageOffsetTop":759},{"display_name":834,"avatar":835,"permalink":836,"twitter":770,"linkedin":837},{"display_name":839,"avatar":840,"permalink":841,"twitter":842,"linkedin":843},{"display_name":845,"avatar":846,"permalink":847,"twitter":770,"linkedin":823,"imageOffsetTop":759},{"display_name":849,"avatar":850,"permalink":851,"twitter":852,"linkedin":852},{"display_name":854,"avatar":855,"permalink":856,"twitter":857,"linkedin":858,"imageOffsetTop":859},{"display_name":861,"avatar":862,"permalink":863,"linkedin":864,"twitter":770},{"display_name":866,"avatar":867,"permalink":868,"linkedin":869,"twitter":770},{"display_name":871,"avatar":872,"permalink":873,"twitter":874,"linkedin":875},{"display_name":877,"avatar":878,"permalink":879,"linkedin":880,"twitter":770},{"display_name":882,"avatar":883,"permalink":884,"linkedin":885,"twitter":770,"imageOffsetTop":759},{"display_name":887,"avatar":888,"permalink":889,"linkedin":890,"twitter":770},{"display_name":892,"avatar":893,"permalink":894,"twitter":770},{"display_name":896,"avatar":897,"permalink":898,"twitter":770,"linkedin":899},{"display_name":901,"avatar":902,"permalink":903,"twitter":904,"linkedin":905},{"display_name":907,"avatar":908,"permalink":909,"linkedin":910,"twitter":770},{"display_name":912,"avatar":913,"permalink":914,"twitter":770,"linkedin":823},{"display_name":523,"avatar":916,"permalink":917,"twitter":918,"linkedin":918,"imageOffsetTop":759,"socials":1076},[1077,1078],{"text":921,"href":922},{"text":924,"href":925},{"display_name":927,"avatar":928,"permalink":929,"twitter":930,"linkedin":931},{"display_name":933,"avatar":934,"permalink":935,"twitter":770,"linkedin":823},{"display_name":937,"avatar":938,"permalink":939,"twitter":940,"linkedin":823},{"display_name":942,"avatar":943,"permalink":944,"twitter":945,"linkedin":946},{"display_name":948,"avatar":949,"permalink":950,"twitter":951,"linkedin":951},{"display_name":953,"avatar":954,"permalink":955,"twitter":956,"linkedin":957},{"display_name":959,"avatar":960,"permalink":961,"twitter":962,"linkedin":963},{"display_name":965,"avatar":966,"permalink":967,"linkedin":968,"twitter":770},{"display_name":970,"avatar":971,"permalink":972,"linkedin":973,"twitter":770},{"display_name":975,"avatar":976,"permalink":977,"linkedin":978,"twitter":979},{"display_name":981,"avatar":982,"permalink":983,"linkedin":984},{"display_name":986,"avatar":987,"permalink":988,"linkedin":989},{"display_name":991,"avatar":992,"permalink":993,"linkedin":994},{"display_name":996,"avatar":997,"permalink":998,"linkedin":999},{"display_name":1001,"avatar":1002,"permalink":1003,"linkedin":1004,"imageOffsetTop":759},{"display_name":1006,"avatar":1007,"permalink":1008,"linkedin":1009,"imageOffsetTop":759},{"display_name":1011,"avatar":1012,"permalink":1013,"linkedin":1014,"imageOffsetTop":859},{"display_name":1016,"avatar":1017,"permalink":1018,"linkedin":1019,"imageOffsetTop":859},{"display_name":1021,"avatar":1022,"permalink":1023,"linkedin":1024,"imageOffsetTop":859},{"display_name":1026,"avatar":1027,"permalink":1028,"linkedin":1029,"imageOffsetTop":1030,"imageOffsetLeft":1031},{"display_name":1033,"avatar":1034,"permalink":1035,"linkedin":1036,"imageOffsetTop":1037,"imageOffsetLeft":1038},{"display_name":1040,"avatar":1041,"permalink":1042,"linkedin":1043,"imageOffsetTop":1044,"imageOffsetLeft":786},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1104,"authors":1311},[1105,1121,1135,1140,1156,1169,1182,1195,1207,1223,1237,1252,1270,1281,1295],{"id":1106,"title":1107,"author":1108,"cta":494,"description":636,"hideInRecent":484,"layout":645,"meta":1109,"moment":1113,"path":1114,"stem":1115,"tags":1116,"webcast":484},"content_ja/posts/2026-09-22-end-of-mfa-sms.md","MFA向けSMSの終わり",[781],{"lang":647,"date":650,"categories":1110,"blogtitlepic":1111,"customExcerpt":1112},[235],"head-conditional-access.jpg","企業がいまフィッシング耐性のある、できるだけパスワードレスな認証方式へ移行すべき理由。","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[235,1117,1118,1119,1120],"Authentication","Microsoft Entra ID","MFA","Passkeys",{"id":1122,"title":1123,"author":1124,"cta":494,"description":636,"hideInRecent":484,"layout":645,"meta":1125,"moment":650,"path":1129,"stem":1130,"tags":1131,"webcast":484},"content_ja/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix。ユーザー自身がエクスプロイトになるとき、そしてそれを止める方法",[755,775],{"lang":647,"date":650,"categories":1126,"blogtitlepic":1127,"customExcerpt":1128},[235],"head-clickfix.jpg","ClickFixはユーザーを自分自身への攻撃者に変えます。偽のCAPTCHA、コピー＆ペースト、そして悪意あるコードがメモリ上で走り、ディスクには何も残りません。Microsoft Defenderがこの攻撃をどう検知するのか、検知はどこで限界に達するのか、そしてRunMRUハントと4つの防御レイヤーでその隙間をどう埋めるのかを解説します。","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1132,1133,1134],"Defender","SOC","Endpoint Security",{"id":520,"title":521,"author":1136,"cta":494,"description":636,"hideInRecent":484,"layout":645,"meta":1137,"moment":650,"path":741,"stem":743,"tags":1139,"webcast":484},[523],{"lang":647,"date":650,"categories":1138,"blogtitlepic":652,"customExcerpt":654},[235],[235,745,746,747],{"id":1141,"title":1142,"author":1143,"cta":494,"description":1144,"hideInRecent":484,"layout":645,"meta":1145,"moment":1146,"path":1151,"stem":1152,"tags":1153,"webcast":484},"content_ja/posts/2026-08-08-isg-germany-2026.md","4度のLeader。ISGドイツ調査2026のglueckkanja",[942],"ISGは今年、調査の名称を変更しました。Microsoft Cloud EcosystemはMicrosoft AI and Cloud Ecosystemになり、名称とともに評価の尺度も移りました。問われるのはもはや、誰がMicrosoftプラットフォームを導入したかではなく、誰がCopilot、エージェント、AIワークロードを制御可能なかたちで運用しているかです。この新しい尺度によって当社の位置づけが変わることはありませんでした。ISG Provider Lens®調査ドイツ2026は、当社を4つのクアドラントでLeaderに位置づけています。Microsoft Productivity and Business Process ServicesとAzure Managed Servicesの、それぞれLarge MarketとMid Marketです。2021年、2023年、2024年、2025年に続き、ドイツでは5回目のLeader評価となります。スイスでのLeaderクアドラント入りはその2週間前でした。",{"lang":647,"date":1146,"categories":1147,"blogtitlepic":1149,"customExcerpt":1150},"2026-08-08",[1148],"Corporate","head-isg-de-2026.png","ISG Provider Lens®調査2026は、ドイツにおいてglueckkanjaを4つのクアドラントでLeaderに位置づけました。Microsoft Productivity and Business Process ServicesとAzure Managed Servicesの、それぞれLarge MarketとMid Marketです。調査の名称はMicrosoft AI and Cloud Ecosystemに変わり、評価の尺度も移りました。AIとエージェントのワークロードを制御可能なかたちで運用できるかが問われています。","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1154,1155],"Award","ISG",{"id":1157,"title":1158,"author":1159,"cta":494,"description":1160,"hideInRecent":484,"layout":645,"meta":1161,"moment":1162,"path":1166,"stem":1167,"tags":1168,"webcast":484},"content_ja/posts/2026-07-31-isg-switzerland-2026.md","Rising StarからLeaderへ。ISGスイス調査2026のglueckkanja",[942],"2024年に当社はglueckkanja Switzerland AGを設立し、ベルンのBahnhofplatz 10bにあるzentroomにオフィスを構えました。2025年、ISGはスイス市場で当社をRising Starに位置づけました。アナリストがLeaderクアドラントへの躍進を見込むベンダーという位置づけです。その躍進がいま記録されました。ISG Provider Lens®調査2026は、スイスにおいて当社をMicrosoft AI and Cloud Ecosystemクアドラントの、Azure Managed Services領域とMicrosoft Productivity and Business Process Services領域でLeaderに位置づけています。",{"lang":647,"date":1162,"categories":1163,"blogtitlepic":1164,"customExcerpt":1165},"2026-07-31",[1148],"head-isg-ch-2026.png","ISG Provider Lens®調査2026は、スイスにおいてglueckkanjaをMicrosoft AI and Cloud Ecosystemクアドラントの、Azure Managed Services領域とMicrosoft Productivity and Business Process Services領域でLeaderに位置づけました。ベルンでの市場参入から2年、Rising Star選出から1年でのことです。","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1154,1155],{"id":1170,"title":1171,"author":1172,"cta":494,"description":636,"hideInRecent":484,"layout":645,"meta":1173,"moment":1174,"path":1178,"stem":1179,"tags":1180,"webcast":484},"content_ja/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak。OpenAI／Hugging Faceの事案が示すこと、示さないこと",[523],{"lang":647,"date":1174,"categories":1175,"blogtitlepic":1176,"customExcerpt":1177},"2026-07-24",[235],"head-outbreak.jpg","AIエージェントがテスト環境から脱出し、ゼロデイを見つけ、別の企業をハッキングする。映画の脚本のようですが、2026年7月に実際に起きました。冷静に位置づける時期です。少しの心理学、2人のセキュリティ専門家、そしてそれが自社の防御にとって何を意味するのかという問いとともに。","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1181,1133,746],"AI",{"id":1183,"title":1184,"author":1185,"cta":494,"description":1186,"hideInRecent":484,"layout":645,"meta":1187,"moment":1188,"path":1192,"stem":1193,"tags":1194,"webcast":484},"content_ja/posts/2026-07-22-isg-cybersecurity-2026.md","LeaderそしてRising Star。ISGサイバーセキュリティ調査2026のglueckkanja",[942],"新たに加わったクアドラントで、いきなりLeaderになりました。ISG Provider Lens®調査「Cybersecurity – Services and Solutions 2026」は、ドイツの中堅中小企業向けNext-Gen SOC/MDR Services分野でglueckkanjaをLeaderと位置づけています。Next-Gen SOC/MDR Servicesの全体市場では、ISGは当社をRising Starに選出しました。つまり、今後12か月から24か月のうちにLeaderクアドラントへ躍進するとアナリストが見込むベンダーだということです。",{"lang":647,"date":1188,"categories":1189,"blogtitlepic":1190,"customExcerpt":1191},"2026-07-22",[1148],"head-isg-cybersecurity-2026.png","ISG Provider Lens®調査 Cybersecurity 2026は、glueckkanjaをNext-Gen SOC/MDR Services（Midmarket）クアドラントのLeaderに選出しました。Next-Gen SOC/MDR Servicesの全体市場では、当社はRising Starです。ISGは当社の平均を上回る成長、Microsoftセキュリティに関する深い専門性、そしてドイツ国内から提供する24時間365日のSOCを評価しています。","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1154,1155,235],{"id":1196,"title":1197,"author":1198,"cta":494,"description":1199,"hideInRecent":484,"layout":645,"meta":1200,"moment":1201,"path":1204,"stem":1205,"tags":1206,"webcast":484},"content_ja/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity：AIが実際に働くために本当に必要なもの",[942],"ある製造業の企業が、14,000あるSKUのうちどれが実際に利益を生んでいるのかを知りたいと考えました。答えは3つのシステムの中にありますが、それらは一度もデータを1件たりともやり取りしたことがありません。少し前までは、その答えを得るのに3つの部門、2週間、そして相当な善意が必要でした。2026年初頭からは、AIがこの問いに数分で答えられます。データを走査し、関連を結び、推奨を出す。ただし、アクセスできることが前提です。",{"lang":647,"date":1201,"categories":1202,"blogtitlepic":1203},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1181,131],{"id":1208,"title":1209,"author":1210,"cta":494,"description":1211,"hideInRecent":484,"layout":645,"meta":1212,"moment":1213,"path":1217,"stem":1218,"tags":1219,"webcast":484},"content_ja/posts/2026-07-01-onboarding-process.md","契約書にサインしたあと：当社のオンボーディングはこう進みます",[1033],"オンボーディングは実際どう進むのですか。応募者との会話で繰り返し受ける質問です。オンボーディングがぎくしゃくした経験を持つ人が少なくないからでしょう。だからこそ当社は、最初から安心してもらうことを大切にしています。",{"lang":647,"date":1213,"categories":1214,"blogtitlepic":1215,"customExcerpt":1216},"2026-07-01",[1148],"Onboarding_Blogheader","契約書にサインが済み、大きな一歩は終わりました。では、ここからどうなるのでしょうか。PreBoardingからチームでの最初の1週間まで、当社のオンボーディングの舞台裏をご案内します。","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1220,1221,1222],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1224,"title":1225,"author":1226,"cta":494,"description":1227,"hideInRecent":484,"layout":645,"meta":1228,"moment":1229,"path":1233,"stem":1234,"tags":1235,"webcast":484},"content_ja/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner：当社もその一員です",[942],"Microsoftのパートナーエコシステムには数多くの表彰がありますが、Frontier Partner Badgeはその成り立ちにおいて他の称号と一線を画します。申請することはできず、Microsoft側の主導で、ごく限られたパートナーに授与されます。対象となるには、1つの領域で秀でるのではなく、複数の領域で同時に実力を示さなければなりません。Microsoftが確認するのは、Cloud & AI Platforms、AI Business Solutions、そしてSecurityにおける実証済みの能力です。つまり対象は、AIを既存のITへの後付けではなく、IDからエンドポイント、そして本番のAI運用までを貫くアーキテクチャの帰結として捉えている企業です。",{"lang":647,"date":1229,"categories":1230,"blogtitlepic":1231,"customExcerpt":1232},"2026-06-26",[1148],"head-frontier-partner-badge.jpg","最近、Microsoft AI Cloud Partner Programに新たな最高位の称号としてFrontier Partner Badgeが設けられました。Microsoftがこれを授与するのは、ワークプレイスからクラウドプラットフォーム、セキュリティ、そしてAIアプリケーションそのものに至るまで、Microsoftスタック全体でAIプロジェクトを確実に届けられると実績で示した、世界でもごく限られたパートナーだけです。DACH圏でこのグループに属するのは数社にすぎず、当社はそのうちの1社です。","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1154,1236,1181],"Microsoft Partner",{"id":1238,"title":1239,"author":1240,"cta":494,"description":1241,"hideInRecent":484,"layout":645,"meta":1242,"moment":1243,"path":1247,"stem":1248,"tags":1249,"webcast":484},"content_ja/posts/2026-06-09-vair-run.md","チャリティのために160キロ",[1040],"日曜の朝8時30分、マイン川沿いのHolbeinsteg。おそろいのNinjaCatシャツを着た11人の同僚が、Frankfurter Rundenのスタートに並びました。雨も雷鳴も込みです。良いことのために走るという動機は、悪天候でもランニングシューズの紐を結ぶのに十分でした。",{"lang":647,"date":1243,"categories":1244,"blogtitlepic":1245,"customExcerpt":1246},"2026-06-08",[1148],"frankfurter-runden.png","同僚11人、16周、160キロ、雷雨、そして表彰台。glueckkanjaはFrankfurter Runden 2026に参加し、走った1周ごとにVAIR e.V.へ寄付しました。同団体はオフェンバッハでインクルーシブなスポーツ・カルチャーパークを建設しています。","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1250,1220,1251],"Top Arbeitgeber","Soziales Engagement",{"id":1253,"title":1254,"author":1255,"cta":494,"description":1256,"hideInRecent":484,"layout":645,"meta":1257,"moment":1258,"path":1262,"stem":1263,"tags":1264,"webcast":484},"content_ja/posts/2026-04-10-incident-to-intelligence.md","未知のAMOSスティーラーの解剖：アラートから免疫獲得まで数時間",[1021],"当社のSOCでアラートが発報すると、そこから時計が動き始めます。対象となったお客様だけでなく、当社の保護下にあるすべての組織にとってです。現代の脅威環境で最も危険な瞬間はインテリジェンス・ギャップ、つまり新しいマルウェア亜種が最初に投入されてから、業界がその存在を知る日までの時間の窓です。",{"lang":647,"date":1258,"categories":1259,"blogtitlepic":1260,"customExcerpt":1261},"2026-04-10",[235],"head-amos-stealer.png","これまで文書化されていなかったAMOSスティーラーの亜種が、macOSエンドポイントを侵害しました。既知のハッシュはなく、公開データベースにC2データもありません。当社のSOCは6層の難読化を解体し、すべての指標を抽出したうえで、業界がこの検体を目にするよりも前に、数時間以内ですべてのSOCのお客様へ保護を配布しました。","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1265,1266,1267,1268,1269],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1271,"title":1272,"author":1273,"cta":494,"description":1274,"hideInRecent":484,"layout":645,"meta":1275,"moment":1276,"path":1279,"stem":1280,"tags":494,"webcast":484},"content_ja/posts/2026-03-21-microsoft-edge-corporate-browser.md","Edgeを唯一の社内標準ブラウザーにすべき理由",[812],"企業環境におけるブラウザーの選定は戦略的な判断です。セキュリティの水準と運用の手間を直接左右します。長らくGoogle Chromeが自然な選択肢でしたが、Microsoft Edgeは既存のスタックに直接組み込まれるブラウザーへと進化しました。特にMicrosoft 365を利用し、管理をIntuneで行っている環境ではその効果が大きくなります。",{"lang":647,"date":1276,"blogtitlepic":1277,"customExcerpt":1278},"2026-03-21","head-microsoft-edge-default-browser.jpg","Chromeを本気で選んだ企業はほとんどありません。独自の同期ロジック、独自のアカウント管理、独自のポリシー画面を抱えたまま、ただそこにあっただけです。一方でMicrosoft Edgeは、すでに動いているインフラ、つまりEntra ID、Intune、Defenderに直接組み込まれます。本記事では、移行がどのようなものか、IntuneのポリシーでどのようにChromeをランディングページへリダイレクトするか、そして2つのブラウザーを並行運用するのをやめると何が不要になるかを紹介します。","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":1282,"title":1283,"author":1284,"cta":494,"description":1285,"hideInRecent":484,"layout":645,"meta":1286,"moment":1287,"path":1291,"stem":1292,"tags":1293,"webcast":484},"content_ja/posts/2026-03-20-stryker-attack-intune-privilege.md","必要だったのは管理者アカウント1つだけでした",[523],"2026年3月11日水曜日。79か国のStrykerのオフィスで従業員がPCの電源を入れると、中身は空でした。ログイン画面はロゴに置き換わっていました。社用ノートPC、社用スマートフォン、そして同社のBYODプログラムに登録されていた私物端末まで、すべてが一夜のうちに同時に消去されました。ランサムウェアもマルウェアのシグネチャも、エンドポイント検知ツールが捉えられるものは何もありませんでした。",{"lang":647,"date":1287,"categories":1288,"blogtitlepic":1289,"customExcerpt":1290},"2026-03-20",[235],"head-stryker.jpg","2026年3月11日、Handalaは79か国の端末を消去しました。そのために必要だったのは、侵害されたIntuneの管理者アカウント1つだけです。マルウェアもエクスプロイトもなく、正規の管理ツールが所有者自身に向けられました。何が起きたのか、なぜそれが通用したのか、そして塞ぐべき2つのアーキテクチャ上の穴について説明します。","/posts/2026-03-20-stryker-attack-intune-privilege","posts/2026-03-20-stryker-attack-intune-privilege",[1294,71,745,746],"Red Tenant",{"id":1296,"title":1297,"author":1298,"cta":494,"description":1299,"hideInRecent":484,"layout":645,"meta":1300,"moment":1301,"path":1305,"stem":1306,"tags":1307,"webcast":484},"content_ja/posts/2026-03-16-ai-agent-hackathon.md","6つのAgent。4週間。実際の運用へ。",[942],"自社のIT部門は、Agentなら数分で片づく作業に毎週何時間を費やしているでしょうか。",{"lang":647,"date":1301,"categories":1302,"blogtitlepic":1303,"customExcerpt":1304},"2026-03-16",[1148],"head-ai-agent-hackathon.jpg","6社、4週間のビルドフェーズ、6つの動作するAI Agent。これが第1回glueckkanja AI Agent Hackathonの成果です。Kiekert、Dr. Oetker、Eckes-Granini、igefa、lila logistikがCopilot StudioでAgentを構築し、それらは現在すでに本番で稼働しています。そこで何が生まれ、この形式がどのように機能するのかを紹介します。","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[1181,1308,1309,1310],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1312,"Fritz Zurhorst":1313,"Nadine Klein":1314,"Jan Geisbauer":1315,"Carolin Kanja":1319,"Anna Ulbricht":1320,"Annette Brauns":1321,"Pascal Asch":1322,"Steffen Schwerdtfeger":1323},{"display_name":781,"avatar":782,"permalink":783,"twitter":784,"linkedin":785,"imageOffsetTop":786,"imageOffsetLeft":787},{"display_name":755,"avatar":756,"permalink":757,"linkedin":758,"imageOffsetTop":759},{"display_name":775,"avatar":776,"permalink":777,"twitter":778,"linkedin":779,"imageOffsetTop":759},{"display_name":523,"avatar":916,"permalink":917,"twitter":918,"linkedin":918,"imageOffsetTop":759,"socials":1316},[1317,1318],{"text":921,"href":922},{"text":924,"href":925},{"display_name":942,"avatar":943,"permalink":944,"twitter":945,"linkedin":946},{"display_name":1033,"avatar":1034,"permalink":1035,"linkedin":1036,"imageOffsetTop":1037,"imageOffsetLeft":1038},{"display_name":1040,"avatar":1041,"permalink":1042,"linkedin":1043,"imageOffsetTop":1044,"imageOffsetLeft":786},{"display_name":1021,"avatar":1022,"permalink":1023,"linkedin":1024,"imageOffsetTop":859},{"display_name":812,"avatar":813,"permalink":814,"linkedin":815,"twitter":816,"imageOffsetTop":817,"imageOffsetLeft":818},{"id":750,"extension":751,"meta":1325,"stem":8,"__hash__":1102},{"Jan Geisbauer":1326},{"display_name":523,"avatar":916,"permalink":917,"twitter":918,"linkedin":918,"imageOffsetTop":759,"socials":1327},[1328,1329],{"text":921,"href":922},{"text":924,"href":925},1791383938076]