Coffee with the Council By PCI Security Standards Council

Today, I'm excited to bring you a sneak peek interview with PCI SSC's 2026 North America Community Meeting Keynote Speaker, Sharon Gai. Sharon is a global expert in e-commerce, digital strategy, and cross-cultural innovation. After nearly a decade at Alibaba, where she guided international brands through China's dynamic digital marketplace, she now advises organizations across North America and beyond on innovation, AI adoption, and building resilient strategies in an evolving economy. She's also the author of two books, including her latest release, How to Do More with Less: Future Proofing Yourself in an AI-Driven Economy, which just hit store shelves.

I'm excited to announce that the Council will open the nomination period for the next Global Executive Assessor Roundtable on June 1st. This roundtable, or GEAR as it's known, represents the perspectives of the PCI assessor community. Joining me to discuss what all of this means and how you can participate is the Council's own Chelsea Lopez, Client Engagement Operations Director.

Today I'm joined by a panel of current Principal Participating Organizations, or PPOs. The Principal PO program is one of three levels of participation with the Council and defined as a strategic level of leadership and influence with the Council. PPOs get access to exclusive strategy sessions with the Executive Committee, with PCI Council staff, and stakeholders to discuss standards direction, drive technical discussions, and have direct input into Council initiatives.   

Hello and welcome to our podcast series, Coffee with the Council. I'm Andrew Jamieson, VP, Distinguished Standards Architect for the PCI Security Standards Council. And I'll be your host today for an exciting panel discussion about the current state of cryptography.I'm joined today by some cryptography experts, who I originally brought together at the 2025 North America Community Meeting in Fort Worth, Texas. You're going to hear a very good discussion today. I invite you to visit our Global Content Library on YouTube to view the full session if you're interested.My guests for this episode are Richard Kisley, Chief Engineer IBM HSM, for IBM Corporation; Jillian Benedick, Cryptographer, Atalla, of Utimaco; Joachim Vance, Chief Security Architect, of Verifone; and finally, Steven Bowles, Regional Security Officer - North America, for Ingenico. 

Well, it is hard to believe that we are already in February, but as we kick off 2026, we want to take a moment to also acknowledge all that the Council accomplished in 2025, including the recent release of the Council’s first-ever Annual Report. Joining me today to talk about this report and what we can expect in the year ahead is PCI SSC's Executive Director, Gina Gobeyn.

Welcome to the fifth season of our podcast series. The Council is off and running with its first major piece of news, and that is the publication of Secure Software Standard version 2.0. This is the first major revision to the Standard since it was introduced in 2019. Joining me today to talk about all that's new in the Standard and also what it means for the 3DS SDK Standard is Mike Thompson, Director of Solutions. 

In today's episode, I am excited to announce that the Council will open the nomination period for the next Brazil Regional Engagement Board next month. Regional Engagement Boards serve as advisors to PCI SSC on payment data security issues in specific geographies and markets. Joining me to discuss what this all means and how you can participate is the Council's own Guilherme Scheibe, Regional Director of Brazil and LAC.

Welcome to this very special edition of the Coffee with the Council podcast. This podcast will be in Japanese only. For non-Japanese-speaking audience, this podcast will be transcribed and translated to English on the PCI SSC webpage. 

Today, I am so excited to bring you a sneak peek interview with PCI SSC's Asia-Pacific Community Meeting keynote speaker, Sharon Gai. Sharon Gai is a global expert in e-commerce, digital strategy, and cross-cultural innovation. After nearly a decade at Alibaba, guiding global brands through China's digital market, she authored E-Commerce Reimagined and now helps companies bridge east and west. Sharon, it's a pleasure to have you with us today.

Today, I am so excited to bring you a sneak peek interview with PCI SSC's Europe Community Meeting Keynote Speaker, Bernie Collins. Bernie Collins is a Formula One Strategy Analyst and former Race Strategist, who has worked at the highest levels of motorsport, including Aston Martin. She specializes in decoding the complex world of F1 strategy, from tire choices and pit stops to race day decision making and translating it into insights fans can truly understand. You might recognize her from her expert commentary on Sky Sports F1, where she breaks down the fast-paced world of Formula One with clarity and precision. With a background in mechanical engineering and years on the pit wall, Bernie brings both technical expertise and real-world racing experience to everything she does. 

Today, I am so excited to bring you a sneak peek interview with PCI SSC's North America Community Meeting Keynote Speaker, Reed Timmer. Dr. Reed Timmer is an extreme meteorologist and storm chaser, who specializes in intercepting the most powerful storms on the planet to collect valuable scientific data. You might know him from the Discovery Channel reality television series, Storm Chasers, as well as from the documentary film, Tornado Glory, and in the television series, Tornado Chasers. Graduating with a PhD in meteorology from the University of Oklahoma, Timmer is not only a hardcore storm chaser, but also a scientist driven to unravel the mysteries behind these destructive storms and how they are changing over time.

In today's episode, I'm excited to announce that the Council is launching a new Regional Engagement Board for India and South Asia. Regional Engagement Boards serve as advisors to PCI SSC on payment data security issues in specific geographies and markets. This will be the Council's second REB, as it's commonly referred to, after launching in Brazil in 2018. Joining me to discuss what this all means and how you can participate is the Council's own Nitin Bhatnagar, Regional Director of India, South Asia, and the Middle East.

In this episode of Coffee with the Council, we’ll hear from Megan Shamas, Chief Marketing Officer at the FIDO Alliance as she discusses a solution to reducing the world’s reliance on passwords with the Council’s own Andrew Jamieson, VP, Distinguished Standards Architect. Together they will explore phishing-resistant authentication through the use of passkeys and a future where account takeover is no longer a threat.

As many of our listeners are aware, we are quickly approaching the deadline to adopt the future-dated requirements of PCI DSS version 4.0.1 on March 31st, 2025. Over the course of the last year, the Council has received feedback that more guidance was needed to properly implement some of the e-commerce security requirements in the standard, particularly Requirements 6.4.3 and 11.6.1. As such, the Council has released several pieces of guidance this year, including updates to Self-Assessment Questionnaire A, an FAQ related to SAQ A eligibility criteria, and of course, the highly anticipated guidance developed by our E-commerce Guidance Task Force. Joining me today to walk through all this new guidance is Lauren Holloway, Director of Data Security Standards at PCI SSC. 

It is time once again to elect the Council's next Board of Advisors for the 2025 - 2027 term. Every two years, the Council invites its Principal and Associate Participating Organizations, as well as Affiliate Members to nominate and elect those companies who will serve as strategic leaders for the organization. Joining me today to talk all about what's new in this year's election process is PCI SSC's Head of Engagement, Diana Greenhaw. 

Recently, PCI SSC published a new information supplement called PCI DSS Scoping and Segmentation Guidance for Modern Network Architectures. This document was produced by the 2023 Special Interest Group, also called a SIG, who spent a year collaborating on this project, which was led by the Council's own Kandyce Young, Manager of Data Security Standards. I am joined by Kandyce today to help walk us through what made this particular Special Interest Group and topic so special. 

Today we'll meet one of the Council's newest employees, our Head of Product and Technology, Deanne Zettler. Deanne comes to the PCI SSC with more than 25 years of experience leading product and technology strategies, solutions and operations in financial services, including stops at Discover Financial Services and Silicon Valley Bank. Thank you for joining us today, Deanne, and welcome to the team.

Today, I am so excited to bring you a sneak peek interview with PCI SSC's Europe and Asia Pacific Community Meeting keynote speaker, Dr. Bruce McCabe, Global Futurist. Bruce has explored emerging technologies and how innovation happens for 30 years. He began his career at IBM in 1988 and went on to hold senior roles at IBM, WordPerfect, Novell, and Gartner. In 2002, he founded S2 Intelligence, a think tank to support organizational innovation through grounded research. He served as an independent advisor to a long list of multinationals, state and federal governments, universities, and science labs. When not speaking, he writes novels about the near future.

Today, I am so excited to bring you a sneak peek interview with PCI SSC's North America Community Meeting Keynote Speaker, Tom Koulopoulos. Mr. Koulopoulos is Chairman and Founder of Delphi Group, a 30-year-old Boston-based Think Tank, named one of the fastest growing private companies by Inc. magazine, and the founding partner of AcroVantage Ventures, which invests in early-stage technology startups. He is also the author of 13 books, an Inc. .com columnist, the past executive director of the Babson College Center for Business Innovation, the past director of the Dell Innovation Lab, and a professor at Boston University.

In this episode, we'll meet three Qualified Security Assessors, or QSAs. A QSA company is a data security firm certified by the Council to perform on-site assessments of a company's PCI Data Security Standard compliance. This ensures that robust policies and procedures are in place to protect cardholder data. The QSA Program plays a critical role in the adoption of PCI security standards. 

Today we'll meet one of the Council's newest team members, our Head of Engagement, Diana Greenhaw. Diana comes to the PCI SSC after a successful 20-year career in payments that included stops at WorldPay, Visa, and Block. Thank you for joining us today, Diana, and welcome to the team.

At our Community Meetings in 2022, the Council announced a significant change to its Participating Organization program. Today, I am joined by the Council's Senior Vice President of Education and Engagement, Mark Meissner who has been spearheading this effort, and is going to talk about some of these changes over the past couple of years, and how the PO program has evolved. 

Today, I am joined by Lance Johnson, who has been the Executive Director of The Council for more than six years and a member of the payments industry for more than 40 years. In light of your recent retirement announcement, we're here to reflect on all the moments that have defined your distinguished career, Lance, and to of course, thank you for all of the contributions you've made to our industry. 

Today I am thrilled to introduce the Council's new Executive Director, Gina Gobeyn. Gina joins PCI SSC following the announcement of Lance Johnson's retirement this year. As Executive Director, Gina will drive the organization's strategic direction, its operations, and oversee the PCI SSC senior leadership team and staff. I'm delighted to have you join us today, Gina.

Today I'm joined by three very amazing guests, and we will share a brief update of Asia-Pacific. First, we have Aileen Liu, who is the director of PAX Technology’s Payment Technology Department. Now, PAX Technology is one of the largest POS solution providers in the world, and PAX is also a PCI Principal Participating Organization. They are a PCI Board of Advisor member as well. Aileen is the primary point of contact representing PAX in both groups. Next, we have Gilbert Chu, who is the Chief Operating Officer for LGMS. They are a regional QSA and ASV or PCI Approved Scanning Vendor for short. It's based out of Malaysia. Gilbert is a QSA professional, and an expert in IT security with more than 15 years of experience. And last, and certainly not the least, we have Stuart Campbell, who is the Head of Customer Success and a key leader for Quasar Scan, a solution provider based in New Zealand. And they provide a tool that is able to discover sensitive data that is stored within your environment. Quasar Scan is also a PCI Associate PO.

Today I'm joined by my co-host for the day, Director of Communications, Simon Kleine, at EMVCo. And we're having a conversation with Arman Aygen, Director of Technology at EMVCo, and PCI Security Standard Council's VP of Solution Standards, Andrew Jamieson. Today, we're going to be talking about the valuable partnership and collaboration between EMVCo and PCI SSC. We're going to take a deeper dive into mobile payments, including Tap to Mobile, and also PCI SSC's MPoC standard. Let's kick off by taking a moment to explain the relationship between our two organizations, EMVCo and PCI SSC. 

India's digital payment market is expected to grow by $10 trillion by 2026. In a span of just six years, India, primarily a cash-based economy, now leads the world in real time digital payments, accounting for almost 40% of all such transactions. The mass adoption of UPI and cardless payments during the COVID-19 pandemic has extended far beyond the urban, to even rural India, an effect that left the experts in amazement. This rapid expansion of the digital payments systems is happening at a time when cybersecurity threats to payment systems are increasing globally. With organized criminal syndicates committing cybercrimes, India is not immune from these threats. The threat landscape in cybersecurity is constantly evolving and, with the rise of new technologies, it becomes even more challenging for organizations to secure their assets. We are already witnessing greater involvement from India and South Asia with having stakeholders coming forward and joining us as an Associate Participating Organization (APO). And, more importantly, on our 2023-2025 Board of Advisors, we have three leading organizations from this region, which is NPCI, HDFC Bank and NEPS, which is Nepal Electronic Payment Systems, joining the global Board of Advisors that shows the commitment from the region to improve the payment security, just not regionally, but globally. Today I would like to welcome two prominent leaders from the payment industry. And they are none other than Ms. Anuprita Daga, CISO, YES BANK and Mr. A V S Prabhakar, Chief Risk and Compliance Officer from Zeta. Both YES BANK and Zeta are Associate Participating Organizations of PCI SSC. We'll be talking about their experience as Associate Participating Organizations as well.

Today we'll meet one of the Council's newest employees, our Regional Vice President of North America, Wenlock Free. Wen is based in the USA and spent 20 years in a senior role at Security Metrics, where he led strategic partnerships and business development activity. 

Today, I am so excited to bring you a sneak peek interview with PCI SSC's Community Meeting Keynote Speaker, Jenny Radcliffe. Jenny is a world-renowned social engineer, hired to bypass security systems through a mixture of psychology and con artistry. A burglar for hire and entertaining educator, she has spent a lifetime talking her way into secure locations, protecting clients from scammers, and leading simulated criminal attacks on organizations of all sizes in order to help secure money, data, and information. I am delighted to have you join us today, Jenny.

Today we'll speak with Jeremy King, the Regional Vice President of Europe, the Middle East and Africa, for PCI SSC. 

In this episode, Retail & Hospitality ISAC podcast host Luke Vander Linden is joined by co-host Alicia Malone, senior manager of public relations at PCI SSC, Kandyce Young, manager of data security standards at PCI SSC, and Tony James, director of cyber security at Target to discuss the rollout of PCI DSS v4.0. Questions relating to the rollout? Register here for the RH-ISAC and PCI DSS v4.0 webinar on May 25 at 3 p.m. ET. More information about PCI SSC and the new version of PCI DSS v4.0 can be found on the following resources page.

Today we'll meet the Council's Regional Director of Latin America and the Caribbean, Guilherme Scheibe. Guilherme is based in Brazil and joined the Council last year to help us educate and promote the importance of the PCI Security Standards within the region.

New this year, the size and the role of the Board are expanding to provide a greater range of input for the Council. For the first time ever, the Board of Advisors will have the opportunity to vote on new standards and major revisions to standards prior to their release. To talk more about the importance of the Board, I caught up with one of our current Board members, Michel Léger, who is the Executive Vice President of Global Solution Development & Innovation at INGENICO.

In this episode of Coffee with the Council, PCI SSC’s Executive Director Lance Johnson looks ahead to what 2023 will bring to the PCI Security Standards Council.

In this episode of Coffee with the Council, PCI SSC’s Andrew Jamieson, VP Solutions Standards, discusses the Council’s newest standard for mobile solutions: Mobile Payments on COTS or MPoC. Learn more about how this standard was developed and how it differs from PCI SSC’s other mobile standards.

Today, we'll meet one of the Council's newest employees, our Regional Vice President of Asia-Pacific, Yew Kuann Cheng. Yew Kuann is based in Singapore and spent 15 years as the Senior Director of Risk, Strategy, and Operations in Asia-Pacific for Visa. Thank you for joining us today, Yew Kuann, and also welcome to the team.

Today was the final day of the 2022 Europe Community Meeting. Alicia Malone, Senior Manager of Public Relations sits down to provide a recap of the event. Highlights from the conversation include: Lance Johnson, Executive Director, PCI SSC, announces a new engagement opportunity that will significantly expand the Board of Advisors and create new participation opportunities for stakeholders. Sherron Burgess, Senior Vice President and Chief Information Security Officer, BCD Travel; Board Member and Vice President, Strategic Development, Cyversity talks about her role as emcee for the event as well as her passion for diversifying the cybersecurity community. Kandyce Young, Standards Manager at PCI SSC, discusses PCI DSS v4.0 and where stakeholders can find supporting resources to help drive their understanding of the standard. Community Meeting attendees talk about what it’s like to be back in-person again at the Welcome Reception at the Spirit de Milan. Women in Payments honorees Sherri Collis of Online Enterprises, DBA Online Business Systems, Diana Greenhaw of Square and Julie Quandt of Discover chat about the importance of raising the profiles of female leaders in payment security. If you couldn’t attend the Europe Community Meeting, there is still an opportunity to register for the Global Content Library.

Today was the final day of the 2022 North America Community Meeting. Lindsay Goodspeed, Senior Manager of Corporate Communications, sits down to provide a recap of the day. Highlights from the conversation include: Keynote speaker Confidence Staveley of CyberSafe Foundation discusses the importance of diversity within the security industry. Kandyce Young, Standards Manager at PCI SSC, discusses PCI DSS v4.0 and where stakeholders can find supporting resources to help drive their understanding of the standard. Women in Payments honorees Jessica Smith of Mastercard, Marie Babineau of Bell Canada, and Viviana Wesley of HALOCK Security Labs chat about the importance of raising the profiles of female leaders in payment security. If you couldn’t attend the NACM, there is still an opportunity to register to attend the Europe Community Meeting held on 18 – 20 October in Milan, Italy. Learn more and register here: Europe Community Meeting

The first full day of the 2022 North America Community Meeting was filled with engaging and informative sessions. Alicia Malone, Senior Manager of Public Relations sits down to provide a recap of the day. Highlights from the conversation include: Lance Johnson, Executive Director, PCI SSC, announces a new engagement opportunity that will significantly expand the Board of Advisors and create new participation opportunities for stakeholders. Keynote speaker Melodie Yashir gives an out-of-this-world presentation. Community Meeting attendees talk about what it’s like to be back in-person again at the Welcome Reception at the Steam Whistle Brewery. There is another full day of expert speakers at the North America Community Meeting tomorrow! Take a look at the agenda and check back for tomorrow’s daily recap here on the PCI Perspectives blog.

The 2022 North America Community Meeting kicked off today in Toronto with Community Day. Mark Meissner, Senior Vice President, Education & Engagement Officer sits down to provide a recap of the day. Highlights from the conversation include: Lance Johnson, Executive Director, PCI SSC discusses the recent efforts by the PCI SSC to engage with stakeholders. Board of Advisors Members Michael Johnson of JP Morgan Chase Marie-Christine Vittet or Accor Group to talk about their experience while serving on the PCI SSC BoA. There is another full day of expert speakers at the North America Community Meeting tomorrow! Take a look at the agenda and check back for tomorrow’s daily recap.

Recently, our organization teamed up with the Consumer Technology Association to issue a joint bulletin on a very important topic, security surrounding the Internet of Things, or IoT. Joining me today for this episode are Andrew Jamieson, Vice President of Solution Standards at PCI Security Standards Council, and Mike Bergman, Vice President of Technology and Standards at the Consumer Technology Association.

In this episode of Coffee with the Council, PCI Security Standards Council’s Executive Director Lance Johnson gives a mid-year update on Council activities so far. These include the release of PCI DSS v4.0 and our newly redesigned website. He also discusses what you need to know for the second half of 2022 including the return of our in-person Community Meetings, the extension of the term of our current Board of Advisors, and the upcoming release of a new mobile standard.

In this episode, PCI SSC’s Nitin Bhatnagar, Associate Director, India, is joined by three Indian stakeholders from Amazon Pay, SBI Card, and HDFC Bank to discuss the newly released PCI DSS v4.0. These stakeholders offer their impressions of some of the changes to the standard, and their benefits, as well as the overall evolving payments landscape.

Neste episódio, Carlos Caetano do PCI SSC, Diretor Associado da Região LA do Brasil, é acompanhado por três participantes brasileiros da Adyen, Cielo e CloudWalk para discutir o recém-lançado PCI DSS v4.0. Esses membros do Conselho Consultivo Regional  do PCI SSC oferecem suas impressões sobre o padrão e como os comerciantes brasileiros e outras empresas podem fazer a transição para aderir aos novos requisitos. Listen or read in English.

In this episode, PCI SSC’s Carlos Caetano, Associate Director, LA Region for Brazil, is joined by three Brazilian stakeholders from Adyen, Cielo and CloudWalk to discuss the newly released PCI DSS v4.0. These members of PCI SSC’s Regional Engagement Board offer their impressions of the standard and how Brazilian merchants, and other companies, can transition to adhere to the new requirements. Leia ou ouça em português.

This episode highlights the release of PCI DSS v4.0. Elizabeth Terry, senior manager, community engagement at PCI SSC, will discuss upcoming engagement events such as webcasts and the PCI DSS v4.0 Global Symposium on 21 June. Lindsay Goodspeed, senior manager, corporate communications at PCI SSC, will discuss the variety of available resources to help navigate the changes to the new version of the standard.

This episode previews the much-anticipated release of the PCI Data Security Standard (DSS) version 4.0, scheduled to debut at the end of March 2022. Kandyce Young, Standards Development Manager at PCI SSC, will discuss the timeline and key highlights of the standard while Tom White, Training Content Manager at PCI SSC, will talk about what you need to know to prepare for transition training.

PCI Security Standards Council’s Executive Director Lance Johnson offers a preview of what’s new for the Council in the year ahead. In this episode, Johnson touches upon a variety of topics including recent personnel changes, and updates on new and existing payment security standards, including the much-anticipated debut of PCI DSS v4.0. From training programs and new Council endeavors, to the format of this year’s Community Meetings, Johnson describes what stakeholders can expect in 2022.