JPMorgan, Goldman Sachs Stress Security First in AI Deployment
CIOs at the two Wall Street giants say the stochastic nature of agentic AI makes security and governance a precondition for deployment, and that technology has outpaced governance capacity.
Lori Beer, Global Chief Information Officer of JPMorgan Chase, said at the Evident AI Symposium held in New York on October 22, 2026, that the bank's LLM Suite platform already supports 1,000 business applications and daily use by roughly 200,000 employees, but that security and risk management must remain at the core of everything. Previously, CEO Jamie Dimon had expressed concerns about runaway AI agents, and the bank has barred external agents from running in its environment.
Marco Argenti, Chief Information Officer of Goldman Sachs, noted at the same event that agents are not deterministic machines but stochastic systems, and that "you have to accept that any agent may misbehave." He argued that aligning agents with enterprise standards and policies remains a key challenge for CIOs.
Beer said foundational technical controls such as identity and access management, privileged access, and environment isolation need to be best-in-class; the bank will start with a core agent-building platform and centralize development so that controls can be implemented at scale. She said real-time, dynamic enforcement of guardrails and evaluations remains complex, and that technology has outpaced governance capacity.
Source: https://www.bankingdive.com/news/jpmorgan-chase-goldman-sachs-AI-security-lori-beer-marco-argenti/833792/
Provenance & status
- Byline
- OceanAlt Editorial
- First published
- 2026-10-24
- Last updated
- 2026-10-24
- Content type
- Newsflash
- Source material
- View original ↗
Related reading
Harbor Enters AI Agent Insurance With $10M Seed Round, Leaving Liability Attribution and Claims Pricing as the First Unsolved Problems
South Korea's President Confirms AI Role in Attacks on Seven Financial Firms: A Look at the Attack Chain
NVIDIA Open-Sources Agent Security Platform: Another Piece in the Agent Security Infrastructure, from Testing to Deployment
Paste a payee address before you pay and see whether it's on a sanctions list, through a mixer, or tagged for fraud.
This judgement can sit inside your own product
One line of code; it touches neither your CSS nor your JS. The same pre-settlement judgement can appear in your articles, on your wallet's confirmation screen, or as an endpoint your agent calls before it pays.