The real playbook for leaders facing ransomware

Veteran IT and cybersecurity executive Zach Lewis delivers a gripping, first-person account of how a major university squared off against one of the world’s most infamous ransomware groups—LockBit. He walks you through his personal experience battling—and negotiating with—LockBit, as well as the strategies, tools, and approaches he used to resolve the crisis.


• Insightful crisis-management lessons applicable to both technical and business leaders
• Hands-on technical solutions you can apply to prevent catastrophic data loss during a ransomware event
• Techniques to manage the intense operational, emotional, and interpersonal challenges that arise in the midst of an unexpected crisis
• A clear, leader-friendly 30–60–90–120 day plan to harden your environment
• Which security tools matter most post-incident—and how to prioritize them
• How to brief the board, align your team, and communicate without legal landmines

Locked Up is a detailed, darkly funny, behind-the-scenes account of an increasingly common and feared event for organizations of all types and sizes. It offers up-to-date advice for people tasked with preventing, responding to, and recovering from ransomware attacks. You’ll see the decisions, missteps, and turning points under pressure—plus the practical frameworks and checklists leaders wish they had on day one.


Perfect for IT professionals, cybersecurity leaders, and business decision-makers in higher education, healthcare, government, and nonprofit organizations, Locked Up is also a must-read for business continuity planners, legal counsel, and anyone with an interest in real-world cybersecurity.

The Comprehensive Cybersecurity Checklist (30–60–90–120 Day Plan)
• A CISO’s Post-Ransomware Security Stack (what was chosen, why it mattered, and lessons learned)

“This book delivers no-nonsense, practical advice on how to survive a cyberattack – by someone who’s been right in the thick of it. Zach Lewis guides readers step-by-step through the hack his institution suffered, offering sensible tips and crucial wisdom for anyone in IT who’s trying to keep the bad guys out, or – god forbid – fighting them once they’ve got in.”

★★★★★

Geoff White

Investigative Journalist and Author of Lazarus Heist, Crimedotcom, and Rinsed

“Not just a technical post-mortem, but an engaging and candid account of a cyber-siege on the academic world. Zach’s perspective is a masterclass in crisis leadership, revealing that the greatest defense isn’t a firewall, but the people who stand behind it.”

Lester Godsey

CISO at Arizona State University, Former CISO at Maricopa County, Arizona

“Here’s the reality. Ransomware is not a possibility; it is a certainty. Locked Up gives leaders the tools and insights to respond with clarity and strength when it happens to
them.”

★★★★★

Dr. Eric Cole

Founder and CEO at Secure Anchor, Member of Forbes Tech Council

“A gripping account that vividly portrays the emotional ups and downs experienced during each phase of a cybersecurity incident, making complex challenges feel personal and real.”

Marc Ashworth

CISO at First Bank

“‘A smart man learns from his mistakes. A wise man learns from the mistakes of others.’ In his book, Zach Lewis offers readers the ultimate opportunity to gain that wisdom. This unflinching, firsthand account plunges into the chaos of a LockBit ransomware attack, revealing not just the technical gaps but the human toll of a modern cyber crisis. From the initial, disorienting realization of a breach to the nail-biting negotiations and the arduous path to recovery, Lewis provides a rare, inside look at what truly happens when everything goes sideways. More than a survival story, it’s a battle-tested playbook for every leader, defender, and organization, designed to transform a nightmare scenario into a powerful catalyst for resilience.”

Andrew Wilder
CSO at Vetcor

★★★★★

“The author transforms his awful ransomware experience into the most practical, readable cybersecurity guide I’ve ever encountered.”

Kip Boyle

CISO at Cyber Risk Opportunities LLC

“Too many companies chalk [breaches] up as an inevitable cost of doing business and move on,” Lewis says. “The problem is, attackers are getting smarter and faster, and if you’re not updating your defenses, especially with tools that can keep up with them, you’re leaving the door wide open for the next hit.”

FAQ

Everything you need to know about Locked Up. Can’t find an answer? Get in touch →

Get the clarity you’ll want on the worst day.