A 1,200‑bed regional academic medical center running Epic EHR and thousands of connected infusion pumps and monitors across hospitals and clinics. The organization was seeing repeated ransomware attempts targeting EHR access and poorly segmented clinical networks.To protect patient safety, reduce lateral movement risk, and meet HITRUST expectations, the health system partnered with Zymr to define and execute a practical zero trust roadmap.
Flat networks, inconsistent MFA, and unmanaged IoMT device identities created multiple attack paths from user accounts into Epic and bedside devices.The health system needed better identity controls, clinical network segmentation, and device security — without disrupting care delivery or clinician workflows.
Zymr helped the client move from a perimeter‑centric model to a zero trust posture:
1. Zero Trust Assessment and Roadmap
2. Identity and Access Hardening
3. IoMT Security and Segmentation