Zachary Lewis
CIO and CISO,
University of Health Sciences and Pharmacy
When Ransomware Forces a Rethink: Rebuilding Security Where Work Actually Happens
Thursday, April 30, 2026 | 2:15PM–3:00PM PT | California Ballroom B, Second Floor
Session Type:
Breakout Session
Delivery Format:
Presentation/Panel
Professional ransomware groups continue to plague higher education, targeting financial, health, and identity data on students, alumni, and faculty. For the University of Health Sciences and Pharmacy (UHSP) in St. Louis, a LockBit ransomware incident became a catalyst to rethink—not just reinforce—its security architecture. In the aftermath, leadership reassessed where security controls should live, how users actually access critical data, and which architectural changes would meaningfully reduce risk. This session explores how UHSP evaluated multiple approaches before adopting a layered strategy that placed the enterprise browser at the center of daily workflows. Presenters will walk through the decision-making process, trade-offs, and outcomes, translating how a ransomware attack led to a more resilient, efficient, modern, and user-aligned security model—while acknowledging that recovery and modernization require multiple complementary changes.
