Building Security for the Pace of 2026

We caught up with Walmart Chief Information Security Officer Jerry Geisler to talk about the cybersecurity priorities and technology shifts shaping 2026.

Every year, SparkCon brings together cybersecurity leaders, practitioners and technology partners to share insight on emerging threats and the future of security. As is often the case at conferences, some of the most interesting discussions at SparkCon2026 weren't happening on the stage. They were happening in the moments in between: comparing notes between seminars, challenging assumptions over coffee, or floating a new idea during a hallway conversation.

Our conversation with Walmart Chief Information Security Officer Jerry Geisler between sessions was one of those moments. From modernizing store systems to rethinking the tools associates use every day, Jerry shared some of the priorities shaping cybersecurity in 2026.

Much of the discussion kept circling back to a single idea: while cloud transformed the last decade, AI is accelerating change at a completely different pace and rapidly reshaping how we approach cybersecurity.

Watch our Q&A with Jerry, above. Then keep scrolling for a closer look at the emerging challenges and technology shifts shaping the year ahead.  

A deeper look at Walmart’s cybersecurity priorities for 2026

1. Security as a business unlock

Security starts with understanding the business strategy. Rather than operating as a silo, it serves as the foundation that ensures technology can deliver on business goals. In 2026, that means deeper integration with product and engineering teams from the start, so security enables speed instead of slowing it down.

In practice, this means moving away from late-stage approvals and toward "paved road" paths. By building secure architecture, reusable controls, and standard platforms directly into the environment, the safest option becomes the easiest and fastest for developers to take. When security is embedded in the tools engineers use every day — supported by AI-driven code validation — it transforms from a friction point into a built-in enabler of delivery.

2. Modernizing the associate experience

Improving the day-to-day experience for associates is a key priority. Identity and access management remains a foundational capability, but the goal is evolving: make it easier, make it more intuitive, and at the same time, make it more secure. Reducing friction in how associates log in and access tools gives time back to focus on customers.

Since associates often experience the most friction in access- and security-dependent workflows, a major focus for 2026 is reducing the burden of manual security reviews and service requests through infrastructure-as-code and automated provisioning. The strategy centers on embedding security directly into the workflow so the secure path is also the fastest path. While some controls are essential for maintaining trust, the ultimate goal is to eliminate "bad friction" that slows down work, ensuring that security stays out of the way of serving the customer.

3. Navigating the speed of AI

AI is accelerating faster than any previous technology shift. While it expands the threat landscape, it also gives defenders a significant home-field advantage.

AI allows security teams to operate at a scale humans can't reach alone, summarizing incidents, prioritizing vulnerabilities and connecting threat intelligence to real-world exposure in seconds. By handling the repetitive, high-volume tasks, AI amplifies the effectiveness of security professionals, allowing them to focus their judgment on the highest-value decisions.

4. Fortifying the frontline

Stores are the frontline of the business, and security decisions show up there first. Modernizing store systems is about more than just defense; it’s about simplification.

At scale, complexity is one of the biggest obstacles to effective security. By retiring legacy systems and implementing reusable security services, Walmart is reducing the friction that often leads to tech disruptions. For a store associate, this translates to fewer login issues and more reliable systems, meaning less time troubleshooting and more time focused on the customer.

Ultimately, reducing this complexity creates value on multiple fronts: it strengthens the enterprise security posture and makes it easier to apply consistent protections across the entire environment, ensuring the secure path is also the most resilient one.

5. The power of information sharing

Collaboration across sectors is essential. Even among traditional competitors, open communication between cybersecurity teams strengthens the entire ecosystem.

Cybersecurity is a team sport. By sharing threat patterns, attacker techniques and lessons learned from real incidents, one organization’s experience becomes another’s early warning. Events like SparkCon allow leaders to challenge assumptions and validate strategies, turning hallway conversations into actionable improvements that raise the cost for attackers across the industry.

The path forward

The value of SparkCon is what happens after the conversation. Insights from peers help us challenge assumptions, validate strategy and turn ideas into action, whether that means improving detections, strengthening partnerships or refining how we manage risk.