Coffee with the Council By PCI Security Standards Council

Coffee with the Council Podcast: Passwords Versus Passkeys: A Discussion with the FIDO Alliance Apr 29, 2025

In this episode of Coffee with the Council, we’ll hear from Megan Shamas, Chief Marketing Officer at the FIDO Alliance as she discusses a solution to reducing the world’s reliance on passwords with the Council’s own Andrew Jamieson, VP, Distinguished Standards Architect. Together they will explore phishing-resistant authentication through the use of passkeys and a future where account takeover is no longer a threat.

Coffee with the Council Podcast: Guidance for PCI DSS E-commerce Requirements Effective After 31 March 2025 Mar 26, 2025

As many of our listeners are aware, we are quickly approaching the deadline to adopt the future-dated requirements of PCI DSS version 4.0.1 on March 31st, 2025. Over the course of the last year, the Council has received feedback that more guidance was needed to properly implement some of the e-commerce security requirements in the standard, particularly Requirements 6.4.3 and 11.6.1. As such, the Council has released several pieces of guidance this year, including updates to Self-Assessment Questionnaire A, an FAQ related to SAQ A eligibility criteria, and of course, the highly anticipated guidance developed by our E-commerce Guidance Task Force. Joining me today to walk through all this new guidance is Lauren Holloway, Director of Data Security Standards at PCI SSC.

Coffee with the Council Podcast: Nominate Your Company for the Council’s Next Board of Advisors Jan 29, 2025

It is time once again to elect the Council's next Board of Advisors for the 2025 - 2027 term. Every two years, the Council invites its Principal and Associate Participating Organizations, as well as Affiliate Members to nominate and elect those companies who will serve as strategic leaders for the organization. Joining me today to talk all about what's new in this year's election process is PCI SSC's Head of Engagement, Diana Greenhaw.

Coffee with the Council Podcast: Scoping and Segmentation: Navigating Modern Network Architecture and PCI DSS v4.x Nov 18, 2024

Recently, PCI SSC published a new information supplement called PCI DSS Scoping and Segmentation Guidance for Modern Network Architectures. This document was produced by the 2023 Special Interest Group, also called a SIG, who spent a year collaborating on this project, which was led by the Council's own Kandyce Young, Manager of Data Security Standards. I am joined by Kandyce today to help walk us through what made this particular Special Interest Group and topic so special.

Coffee with the Council Podcast: Meet the Council’s New Head of Product and Technology Oct 07, 2024

Today we'll meet one of the Council's newest employees, our Head of Product and Technology, Deanne Zettler. Deanne comes to the PCI SSC with more than 25 years of experience leading product and technology strategies, solutions and operations in financial services, including stops at Discover Financial Services and Silicon Valley Bank. Thank you for joining us today, Deanne, and welcome to the team.

Coffee with the Council Podcast: Meet This Year’s Europe and Asia-Pacific Community Meeting Keynote Speaker, Dr. Bruce McCabe Aug 13, 2024

Today, I am so excited to bring you a sneak peek interview with PCI SSC's Europe and Asia Pacific Community Meeting keynote speaker, Dr. Bruce McCabe, Global Futurist. Bruce has explored emerging technologies and how innovation happens for 30 years. He began his career at IBM in 1988 and went on to hold senior roles at IBM, WordPerfect, Novell, and Gartner. In 2002, he founded S2 Intelligence, a think tank to support organizational innovation through grounded research. He served as an independent advisor to a long list of multinationals, state and federal governments, universities, and science labs. When not speaking, he writes novels about the near future.

Coffee with the Council Podcast: Meet This Year’s North America Community Meeting Keynote Speaker, Tom Koulopoulos Jul 29, 2024

Today, I am so excited to bring you a sneak peek interview with PCI SSC's North America Community Meeting Keynote Speaker, Tom Koulopoulos. Mr. Koulopoulos is Chairman and Founder of Delphi Group, a 30-year-old Boston-based Think Tank, named one of the fastest growing private companies by Inc. magazine, and the founding partner of AcroVantage Ventures, which invests in early-stage technology startups. He is also the author of 13 books, an Inc. .com columnist, the past executive director of the Babson College Center for Business Innovation, the past director of the Dell Innovation Lab, and a professor at Boston University.

Coffee with the Council Podcast: Meet Three Qualified Security Assessors Who Completed the Council’s AQSA Mentorship Program and Advanced Their Careers Jul 08, 2024

In this episode, we'll meet three Qualified Security Assessors, or QSAs. A QSA company is a data security firm certified by the Council to perform on-site assessments of a company's PCI Data Security Standard compliance. This ensures that robust policies and procedures are in place to protect cardholder data. The QSA Program plays a critical role in the adoption of PCI security standards.

Coffee with the Council Podcast: Meet the Council’s New Head of Engagement Jun 18, 2024

Today we'll meet one of the Council's newest team members, our Head of Engagement, Diana Greenhaw. Diana comes to the PCI SSC after a successful 20-year career in payments that included stops at WorldPay, Visa, and Block. Thank you for joining us today, Diana, and welcome to the team.

Coffee with the Council Podcast: Help Shape the Future of Payment Security as a PCI SSC Participating Organization Apr 25, 2024

At our Community Meetings in 2022, the Council announced a significant change to its Participating Organization program. Today, I am joined by the Council's Senior Vice President of Education and Engagement, Mark Meissner who has been spearheading this effort, and is going to talk about some of these changes over the past couple of years, and how the PO program has evolved.

Coffee with the Council Podcast: A Reflection on 40 Years in the Payments Industry Mar 25, 2024

Today, I am joined by Lance Johnson, who has been the Executive Director of The Council for more than six years and a member of the payments industry for more than 40 years. In light of your recent retirement announcement, we're here to reflect on all the moments that have defined your distinguished career, Lance, and to of course, thank you for all of the contributions you've made to our industry.

Coffee with the Council Podcast: Meet the Council’s New Executive Director Gina Gobeyn Feb 29, 2024

Today I am thrilled to introduce the Council's new Executive Director, Gina Gobeyn. Gina joins PCI SSC following the announcement of Lance Johnson's retirement this year. As Executive Director, Gina will drive the organization's strategic direction, its operations, and oversee the PCI SSC senior leadership team and staff. I'm delighted to have you join us today, Gina.

Coffee with the Council Podcast: A Panel Discussion from Asia-Pacific Hosted by Yew Kuann Cheng Feb 02, 2024

Today I'm joined by three very amazing guests, and we will share a brief update of Asia-Pacific.

First, we have Aileen Liu, who is the director of PAX Technology’s Payment Technology Department. Now, PAX Technology is one of the largest POS solution providers in the world, and PAX is also a PCI Principal Participating Organization. They are a PCI Board of Advisor member as well. Aileen is the primary point of contact representing PAX in both groups.

Next, we have Gilbert Chu, who is the Chief Operating Officer for LGMS. They are a regional QSA and ASV or PCI Approved Scanning Vendor for short. It's based out of Malaysia. Gilbert is a QSA professional, and an expert in IT security with more than 15 years of experience.

And last, and certainly not the least, we have Stuart Campbell, who is the Head of Customer Success and a key leader for Quasar Scan, a solution provider based in New Zealand. And they provide a tool that is able to discover sensitive data that is stored within your environment. Quasar Scan is also a PCI Associate PO.

Coffee with the Council Podcast: EMVCo and PCI SSC Present: A Discussion on Mobile Payments Nov 27, 2023

Today I'm joined by my co-host for the day, Director of Communications, Simon Kleine, at EMVCo. And we're having a conversation with Arman Aygen, Director of Technology at EMVCo, and PCI Security Standard Council's VP of Solution Standards, Andrew Jamieson. Today, we're going to be talking about the valuable partnership and collaboration between EMVCo and PCI SSC. We're going to take a deeper dive into mobile payments, including Tap to Mobile, and also PCI SSC's MPoC standard. Let's kick off by taking a moment to explain the relationship between our two organizations, EMVCo and PCI SSC.

Coffee with the Council Podcast: A Panel Discussion from India Hosted by Nitin Bhatnagar Oct 19, 2023

India's digital payment market is expected to grow by $10 trillion by 2026. In a span of just six years, India, primarily a cash-based economy, now leads the world in real time digital payments, accounting for almost 40% of all such transactions. The mass adoption of UPI and cardless payments during the COVID-19 pandemic has extended far beyond the urban, to even rural India, an effect that left the experts in amazement.

This rapid expansion of the digital payments systems is happening at a time when cybersecurity threats to payment systems are increasing globally. With organized criminal syndicates committing cybercrimes, India is not immune from these threats. The threat landscape in cybersecurity is constantly evolving and, with the rise of new technologies, it becomes even more challenging for organizations to secure their assets.

We are already witnessing greater involvement from India and South Asia with having stakeholders coming forward and joining us as an Associate Participating Organization (APO). And, more importantly, on our 2023-2025 Board of Advisors, we have three leading organizations from this region, which is NPCI, HDFC Bank and NEPS, which is Nepal Electronic Payment Systems, joining the global Board of Advisors that shows the commitment from the region to improve the payment security, just not regionally, but globally.

Today I would like to welcome two prominent leaders from the payment industry. And they are none other than Ms. Anuprita Daga, CISO, YES BANK and Mr. A V S Prabhakar, Chief Risk and Compliance Officer from Zeta.

Both YES BANK and Zeta are Associate Participating Organizations of PCI SSC. We'll be talking about their experience as Associate Participating Organizations as well.

Coffee with the Council Podcast: Meet the Council’s New Regional VP, North America Aug 28, 2023

Today we'll meet one of the Council's newest employees, our Regional Vice President of North America, Wenlock Free. Wen is based in the USA and spent 20 years in a senior role at Security Metrics, where he led strategic partnerships and business development activity.

Coffee with the Council Podcast: Meet This Year’s PCI SSC Community Meeting Keynote Speaker, Jenny Radcliffe Jul 18, 2023

Today, I am so excited to bring you a sneak peek interview with PCI SSC's Community Meeting Keynote Speaker, Jenny Radcliffe. Jenny is a world-renowned social engineer, hired to bypass security systems through a mixture of psychology and con artistry. A burglar for hire and entertaining educator, she has spent a lifetime talking her way into secure locations, protecting clients from scammers, and leading simulated criminal attacks on organizations of all sizes in order to help secure money, data, and information. I am delighted to have you join us today, Jenny.

Coffee with the Council Podcast: An Update on Europe, Middle East, and Africa from Jeremy King Jun 27, 2023

Today we'll speak with Jeremy King, the Regional Vice President of Europe, the Middle East and Africa, for PCI SSC.

R&H ISAC and PCI SSC Present: Tips for Transitioning to PCI DSS v4.0 - A Conversation with Target May 10, 2023

In this episode, Retail & Hospitality ISAC podcast host Luke Vander Linden is joined by co-host Alicia Malone, senior manager of public relations at PCI SSC, Kandyce Young, manager of data security standards at PCI SSC, and Tony James, director of cyber security at Target to discuss the rollout of PCI DSS v4.0. Questions relating to the rollout? Register here for the RH-ISAC and PCI DSS v4.0 webinar on May 25 at 3 p.m. ET. More information about PCI SSC and the new version of PCI DSS v4.0 can be found on the following resources page.

Coffee with the Council Podcast: Meet the Council’s Regional Director, Latin America and the Caribbean Apr 18, 2023

Today we'll meet the Council's Regional Director of Latin America and the Caribbean, Guilherme Scheibe. Guilherme is based in Brazil and joined the Council last year to help us educate and promote the importance of the PCI Security Standards within the region.

Coffee with the Council Podcast: Help Elect the Council’s Next Board of Advisors Mar 13, 2023

New this year, the size and the role of the Board are expanding to provide a greater range of input for the Council. For the first time ever, the Board of Advisors will have the opportunity to vote on new standards and major revisions to standards prior to their release.

To talk more about the importance of the Board, I caught up with one of our current Board members, Michel Léger, who is the Executive Vice President of Global Solution Development & Innovation at INGENICO.

Coffee with the Council Podcast: What’s New at the Council in 2023 Featuring Lance Johnson Feb 06, 2023

In this episode of Coffee with the Council, PCI SSC’s Executive Director Lance Johnson looks ahead to what 2023 will bring to the PCI Security Standards Council.

Coffee with The Council - What is Mobile Payments on COTS? Understanding PCI SSC’s New Standard for Mobile Solutions Dec 13, 2022

In this episode of Coffee with the Council, PCI SSC’s Andrew Jamieson, VP Solutions Standards, discusses the Council’s newest standard for mobile solutions: Mobile Payments on COTS or MPoC. Learn more about how this standard was developed and how it differs from PCI SSC’s other mobile standards.

Coffee with The Council: Meet the Council’s New Regional VP, Asia-Pacific Nov 14, 2022

Today, we'll meet one of the Council's newest employees, our Regional Vice President of Asia-Pacific, Yew Kuann Cheng. Yew Kuann is based in Singapore and spent 15 years as the Senior Director of Risk, Strategy, and Operations in Asia-Pacific for Visa. Thank you for joining us today, Yew Kuann, and also welcome to the team.

 Coffee with the Council: Dispatch from the Europe Community Meeting Oct 20, 2022

Today was the final day of the 2022 Europe Community Meeting. Alicia Malone, Senior Manager of Public Relations sits down to provide a recap of the event. Highlights from the conversation include:

Lance Johnson, Executive Director, PCI SSC, announces a new engagement opportunity that will significantly expand the Board of Advisors and create new participation opportunities for stakeholders.
Sherron Burgess, Senior Vice President and Chief Information Security Officer, BCD Travel; Board Member and Vice President, Strategic Development, Cyversity talks about her role as emcee for the event as well as her passion for diversifying the cybersecurity community.
Kandyce Young, Standards Manager at PCI SSC, discusses PCI DSS v4.0 and where stakeholders can find supporting resources to help drive their understanding of the standard.
Community Meeting attendees talk about what it’s like to be back in-person again at the Welcome Reception at the Spirit de Milan.
Women in Payments honorees Sherri Collis of Online Enterprises, DBA Online Business Systems, Diana Greenhaw of Square and Julie Quandt of Discover chat about the importance of raising the profiles of female leaders in payment security.

If you couldn’t attend the Europe Community Meeting, there is still an opportunity to register for the Global Content Library.

 Coffee with the Council: Dispatch from the North American Community Meeting - Day 3 Sep 15, 2022

Today was the final day of the 2022 North America Community Meeting. Lindsay Goodspeed, Senior Manager of Corporate Communications, sits down to provide a recap of the day. Highlights from the conversation include:

Keynote speaker Confidence Staveley of CyberSafe Foundation discusses the importance of diversity within the security industry.
Kandyce Young, Standards Manager at PCI SSC, discusses PCI DSS v4.0 and where stakeholders can find supporting resources to help drive their understanding of the standard.
Women in Payments honorees Jessica Smith of Mastercard, Marie Babineau of Bell Canada, and Viviana Wesley of HALOCK Security Labs chat about the importance of raising the profiles of female leaders in payment security.

If you couldn’t attend the NACM, there is still an opportunity to register to attend the Europe Community Meeting held on 18 – 20 October in Milan, Italy. Learn more and register here: Europe Community Meeting

 Coffee with the Council: Dispatch from the North American Community Meeting - Day 2 Sep 14, 2022

The first full day of the 2022 North America Community Meeting was filled with engaging and informative sessions. Alicia Malone, Senior Manager of Public Relations sits down to provide a recap of the day. Highlights from the conversation include:

Lance Johnson, Executive Director, PCI SSC, announces a new engagement opportunity that will significantly expand the Board of Advisors and create new participation opportunities for stakeholders.
Keynote speaker Melodie Yashir gives an out-of-this-world presentation.
Community Meeting attendees talk about what it’s like to be back in-person again at the Welcome Reception at the Steam Whistle Brewery.

There is another full day of expert speakers at the North America Community Meeting tomorrow! Take a look at the agenda and check back for tomorrow’s daily recap here on the PCI Perspectives blog.

 Coffee with the Council: Dispatch from the North American Community Meeting - Day 1 Sep 13, 2022

The 2022 North America Community Meeting kicked off today in Toronto with Community Day. Mark Meissner, Senior Vice President, Education & Engagement Officer sits down to provide a recap of the day. Highlights from the conversation include:

Lance Johnson, Executive Director, PCI SSC discusses the recent efforts by the PCI SSC to engage with stakeholders.
Board of Advisors Members Michael Johnson of JP Morgan Chase Marie-Christine Vittet or Accor Group to talk about their experience while serving on the PCI SSC BoA.

There is another full day of expert speakers at the North America Community Meeting tomorrow! Take a look at the agenda and check back for tomorrow’s daily recap.

Coffee with the Council Podcast: Internet of Things Security in Payment Environments Aug 31, 2022

Recently, our organization teamed up with the Consumer Technology Association to issue a joint bulletin on a very important topic, security surrounding the Internet of Things, or IoT. Joining me today for this episode are Andrew Jamieson, Vice President of Solution Standards at PCI Security Standards Council, and Mike Bergman, Vice President of Technology and Standards at the Consumer Technology Association.

Coffee with The Council - PCI SSC 2022 Mid-Year Update with Lance Johnson Aug 01, 2022

In this episode of Coffee with the Council, PCI Security Standards Council’s Executive Director Lance Johnson gives a mid-year update on Council activities so far. These include the release of PCI DSS v4.0 and our newly redesigned website. He also discusses what you need to know for the second half of 2022 including the return of our in-person Community Meetings, the extension of the term of our current Board of Advisors, and the upcoming release of a new mobile standard.

Coffee with The Council - PCI DSS v4.0: A Perspective from India Jun 23, 2022

In this episode, PCI SSC’s Nitin Bhatnagar, Associate Director, India, is joined by three Indian stakeholders from Amazon Pay, SBI Card, and HDFC Bank to discuss the newly released PCI DSS v4.0. These stakeholders offer their impressions of some of the changes to the standard, and their benefits, as well as the overall evolving payments landscape.

Coffee with The Council - PCI DSS v4.0: Uma Perspectiva Regional do Brasil May 25, 2022

Neste episódio, Carlos Caetano do PCI SSC, Diretor Associado da Região LA do Brasil, é acompanhado por três participantes brasileiros da Adyen, Cielo e CloudWalk para discutir o recém-lançado PCI DSS v4.0. Esses membros do Conselho Consultivo Regional do PCI SSC oferecem suas impressões sobre o padrão e como os comerciantes brasileiros e outras empresas podem fazer a transição para aderir aos novos requisitos.

Listen or read in English.

Coffee with The Council - PCI DSS v4.0: A Regional Perspective from Brazil May 25, 2022

In this episode, PCI SSC’s Carlos Caetano, Associate Director, LA Region for Brazil, is joined by three Brazilian stakeholders from Adyen, Cielo and CloudWalk to discuss the newly released PCI DSS v4.0. These members of PCI SSC’s Regional Engagement Board offer their impressions of the standard and how Brazilian merchants, and other companies, can transition to adhere to the new requirements.

Leia ou ouça em português.

Coffee with The Council - PCI DSS v4.0 is Now Available: Resources and Engagement Events Apr 26, 2022

This episode highlights the release of PCI DSS v4.0. Elizabeth Terry, senior manager, community engagement at PCI SSC, will discuss upcoming engagement events such as webcasts and the PCI DSS v4.0 Global Symposium on 21 June. Lindsay Goodspeed, senior manager, corporate communications at PCI SSC, will discuss the variety of available resources to help navigate the changes to the new version of the standard.

Coffee with The Council - PCI DSS v4.0: A Preview of the Standard and Transition Training Mar 23, 2022

This episode previews the much-anticipated release of the PCI Data Security Standard (DSS) version 4.0, scheduled to debut at the end of March 2022. Kandyce Young, Standards Development Manager at PCI SSC, will discuss the timeline and key highlights of the standard while Tom White, Training Content Manager at PCI SSC, will talk about what you need to know to prepare for transition training.

Coffee with The Council - Where the Council is going in 2022 with Lance Johnson Feb 23, 2022

PCI Security Standards Council’s Executive Director Lance Johnson offers a preview of what’s new for the Council in the year ahead. In this episode, Johnson touches upon a variety of topics including recent personnel changes, and updates on new and existing payment security standards, including the much-anticipated debut of PCI DSS v4.0. From training programs and new Council endeavors, to the format of this year’s Community Meetings, Johnson describes what stakeholders can expect in 2022.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Coffee with the Council By PCI Security Standards Council

Related Podcasts

Links

Stay Connected