VentureBeat recently had a virtual conversation with Jerry R. Geisler III, the Executive Vice President and Chief Information Security Officer at Walmart Inc., to discuss the cybersecurity challenges facing the world’s largest retailer as AI technology becomes more autonomous.
During the interview, Geisler shared insights on securing agentic AI systems, updating identity management protocols, and the key takeaways from developing Element AI, Walmart’s centralized AI platform. Geisler’s transparent approach shed light on how Walmart is addressing unprecedented security issues, from defending against AI-driven cyber threats to managing security across a vast hybrid multi-cloud infrastructure. His innovative approach to revamping identity and access management systems provides valuable lessons for businesses of all sizes.
Geisler, who oversees security for Walmart across Google Cloud, Azure, and private cloud environments, offers unique perspectives on implementing Zero Trust architectures and establishing “velocity with governance” to facilitate rapid AI innovation within a secure framework. The decisions made while creating Element AI have influenced Walmart’s overall strategy for consolidating emerging AI technologies.
Here are some highlights from the interview:
VentureBeat: How will Walmart’s governance and security measures adapt to address emerging threats and unintended behaviors as AI technology becomes more autonomous?
Jerry R. Geisler III: The rise of agentic AI introduces new security risks that traditional controls may not address. Our approach involves implementing advanced AI Security Posture Management to monitor risks continuously, protect data, ensure compliance, and maintain operational trust.
VentureBeat: How is Walmart enhancing its identity management and Zero Trust architectures to provide precise data access in dynamic AI environments?
Geisler: We are taking a startup mindset to modernize our IAM stack and simplify it, while upholding the principle of least privilege. By leveraging protocols like MCP and A2A, we are working towards implementing context-sensitive access controls based on identity, data sensitivity, and risk.
VentureBeat: How does Walmart’s hybrid multi-cloud infrastructure influence its approach to network segmentation and micro-segmentation for AI workloads?
Geisler: Our segmentation strategy focuses on identity rather than network location, ensuring consistent access policies across cloud and on-premises environments. We are standardizing service edge enforcement with protocols like MCP and A2A to apply Zero Trust principles uniformly.
VentureBeat: What AI-driven defenses is Walmart deploying to detect and mitigate evolving threats like sophisticated phishing attacks?
Geisler: Walmart is leveraging advanced machine learning models to identify anomalies and detect phishing attempts. We are using generative AI for adversary simulation campaigns to proactively test our defenses and enhance resilience against evolving threats.
VentureBeat: How is Walmart evolving its security strategy to address unique challenges associated with open-source AI models in Element AI?
Geisler: Our centralized AI platform allows for ‘velocity with governance’ and ‘concentrated defense and expertise.’ By embedding security from the start and focusing our resources on critical points, we can swiftly innovate within a trusted framework while implementing robust defenses against emerging threats.
VentureBeat: What measures is Walmart taking to attract, train, and retain cybersecurity talent capable of navigating the evolving AI landscape?
Geisler: Walmart’s Live Better U program offers education opportunities in cybersecurity and related fields to associates, making upskilling more accessible. Events like SparkCon provide a platform for professionals to share insights, network, and stay updated on cybersecurity trends and technologies.
Reflecting on the experience of developing Element AI, Geisler emphasized the importance of centralized architectures in enabling rapid innovation and concentrated defense against evolving threats. By integrating security from the start and focusing expertise on critical areas, Walmart can effectively navigate the complex cybersecurity landscape while fostering innovation and growth.