
JPMorgan emphasizes operational excellence and strict adherence to compliance and ethics. This question screens whether you will follow security protocol even under pressure from authority.
Show you can balance urgency with compliance. Acknowledge the stakeholder's need, but clearly state you must follow protocol. Offer an alternative that meets both requirements. Emphasize documentation and audit-readiness.
Acknowledge the urgency and the manager's seniority, but be clear that standard identity verification applies regardless of rank, since it protects the manager and the firm as much as anyone else. Do not bypass the process, even under pressure or time constraints. Offer a compliant alternative that still moves quickly, such as verifying through a secondary registered contact method on file, routing the request through the proper access-approval workflow, or having IT security perform an expedited but still documented verification. Document the request, the reasoning given, and how it was handled, since this protects both you and the requester if questioned later. If the manager pushes back or insists, calmly escalate to your supervisor or the security team rather than making a judgment call alone. The goal is resolving the access issue as fast as possible without breaking protocol to do it.
Never say 'Sige po, I will just do it for you this one time because you are a manager.' That puts you and the firm at risk. Instead say 'I understand your deadline, sir/ma'am, but I must follow the verification process to protect client data. Let me suggest the fastest compliant way to restore your access.'
Situation
I received an urgent call from a senior manager in Wealth Management who claimed they needed immediate access to a client reporting system to meet a regulatory deadline. They requested a password reset bypassing our standard multi-factor verification.
Task
I had to protect the firm's data security protocols and adhere to JPMorgan's code of conduct, even when pressured by a senior stakeholder who outranked me.
Action
I politely but firmly explained that I could not perform the reset without completing the standard verification steps as mandated by our information security policy. I offered to fast-track the process by verifying them through an alternative approved channel: a conference call with their direct supervisor. I also provided them with the self-service password reset portal link as a backup. I documented the call and my actions in the ticketing system for audit trail purposes.
Result
The manager accepted the conference call verification, and their access was restored within 10 minutes while still following protocol. The regulatory deadline was met. My action was later cited in a compliance spot-check as a model of proper procedure adherence.
Compliance is non-negotiable; even a senior's urgency does not override security protocols. You can be helpful and firm at the same time.
Write your own answer, then get instant AI feedback graded against:
Get AI feedback on your answer — free.
3 free AI-graded answers + 1 free mock interview, no card needed.
Sign Up FreeAlready have an account? Log in
Sign in to join the conversation.
No answers shared yet — be the first to show how you'd approach this.