Welcome to our podcast series, Coffee with the Council. I'm Alicia Malone, Director of Communications and Public Relations for the PCI Security Standards Council. In today's episode, I am excited to announce that the Council will open the nomination period for the next Brazil Regional Engagement Board next month. Regional Engagement Boards serve as advisors to PCI SSC on payment data security issues in specific geographies and markets. Joining me to discuss what this all means and how you can participate is the Council's own Guilherme Scheibe, Regional Director of Brazil and LAC. Welcome, Gui! 

Guilherme Scheibe: Thank you, Alicia. I'm happy to be part of this award-winning podcast again and representing the LAC region. 

Alicia Malone: Great. Well, let's start by describing what the Regional Engagement Board is. What is its purpose?

Guilherme Scheibe: Okay, so I like the word “advisors” because it's a great way to introduce what the REB is all about. The REB works as an advisory board to the PCI SSC on payment data security issues in our region. But what does that really mean? Well, so from the regional perspective, what we do in the REB is give organizations more than just a voice. I mean, you know, every Participating Organization already has a voice with the Council. But the REB makes that voice stronger. So instead of just having one company speaking up, it becomes a collective voice that reflects the perspective of the entire region. On one side, the REB provides the PCI SSC with valuable insights that help shape the standards. And beyond that, it also guides how the Council can deliver more value to our region. And to make this happen, the REB is made up of Participating Organizations and QSA companies that are based in Brazil, as well as global organizations that operate here with local presence and local teams.

Alicia Malone: What kinds of topics or issues in payment security have been the focus this term for the current board? Are there any specific accomplishments that you'd like to highlight?

Guilherme Scheibe: Okay, so first I'd like to mention that most of the topics we discussed were actually chosen by the REB members themselves. So, we have had some great conversations about the future of payments in the region, including, for example, emerging technologies and how they might be addressed by PCI Standards. So, during the migration to the PCI DSS v4.0 and its new requirements, I mean, members had the chance to openly discuss the challenges we face in the region and how to better address them.  

So, these meetings are very collaborative. The idea is really to help each other. And another important theme has been fraud trends and how PCI can play a role in mitigating certain types of fraud. I mean, this is a new thing because we're just trying to match what we do within the PCI Standards with real cases of fraud that we have in the region.  

And of course, you couldn’t leave AI out of the conversations. So, members have shared how AI is being used to support security controls and even how it's starting to help them with the assessment processes. I also want to highlight that many members volunteer to present during the meetings, which is quite nice and something that I particularly like a lot. I mean, they can share case studies, research results, and even experiences that they have with new solutions like MPOC. So finally, some of our members were even selected to speak at global events, I mean, at our Community Meetings, which is a great accomplishment, and I think it's worth celebrating.

Alicia Malone: I love that. It sounds like a very collaborative board. What are some of the advantages to serving on the Brazil Regional Engagement Board? Why should stakeholders get involved?

Guilherme Scheibe: There are so many reasons to be part of the REB and get involved. So first, we all know that protecting payments is not something that can be done alone. I mean, serving the REB gives the organization the chance to be part of something greater: a group that works together to help secure payments. Beyond that, it provides a unique perspective from the region and specifically from a country like Brazil, which is considered a key market.

I can also highlight that the expertise of the REB doesn't just support the PCI Council in the development of standard strategies. It also creates opportunities for members to interact, share information, and learn from each other's experiences. I mean this is quite a good thing that we have when the members are openly sharing experiences with each other. Other organizations that are part of the REB are also listed on the website, which means that they're recognized as references and supporters of secure payments.  

At the same time, it's a great opportunity for members to stay up to date with the PCI Council on roadmap and programs and to connect directly with the people involved in the standards and engagement initiatives. In short, I can say it is a unique chance to collaborate with peers across the payment industry all working towards the same goal. I could list many more reasons, but I hope I've already convinced the podcast's audience.

And just as a reminder, the REB has a two-year term. We hold at least four meetings each year and try to have at least one of those meetings face-to-face, which is a great chance for the members to meet and interact in person.

Alicia Malone: So, Gui, who is eligible to serve on the board? Is it open to anyone in the payment security industry?

Guilherme Scheibe: Well, in summary, the REB includes all Participating Organizations and QSAs that are based in Brazil or have a significant presence here. That means it's not just Brazilian organizations. I would say that international companies can also join if they have business operations and local people supporting the payment industry and the adoption of the PCI Standards in Brazil. So having local people is really important because our meetings can happen both in English and in Portuguese. We want to make sure that everybody can fully participate.  

Organizations which are already part of other groups like the Board of Advisors and the GEAR (Global Executive Assessor Roundtable) can still participate in the REB. They can either nominate the same representatives or appoint local people to join specifically for the REB, so it's really up to them. The result of that is a great mix of organizations and there's eligibility requirements to make sure that the entire payment industry is represented.

Alicia Malone: So, Gui, in order to join the Brazil Regional Engagement Board, you must be selected to it. Can you walk us through this process and the timeline beginning with the nomination period? 

Guilherme Scheibe: Yes, there is a process that needs to be followed. First, let me highlight it again. So, eligible entities must be a Participating Organization, an Affiliate Member, or a QSA, and they need to be in good standing. So, if an organization is planning to join, it is important to register as a Participating Organization as soon as possible, because I know every company has its own internal approval process that can take time. So just make sure that you become a Participating Organization before you nominate yourself for the REB.  

Registration is done through the PCI SSC Portal, and we should add the link from the podcast as well, hopefully. The nomination period runs from November 3rd to November 14th. During this time, the primary contact from each eligible organization can submit a nomination to the PCI SCC member Portal, which they should already have access to. Nominations must include the names of both the primary and alternate contacts, plus some information about the organization itself. So, you have to write about how your organization participates in the payment industry, what you do, and also need to have a short text explaining why the organization should be elected to the REB, to the Regional Engagement Board.

And remember, it's one nomination per organization. This is an important point as well. So, after the nomination closes, the PCI SSC Executive Committee will review them and select the board, making sure it has a broad industry representation and can support regional initiatives. For example, the members can come from different backgrounds and industry types such as Merchants, Issuers, Acquirers, Processors, Payment Service Providers, Regional Bodies, Vendors, or even Assessors. So, the goal is to have a good mix and balance. So once the process is completed, the organizations are notified directly and then later we publish a press release with the elected names and that's when we have the REB Brazil officially take its seats.

Alicia Malone: That sounds like a great process and thank you so much for outlining that for us. Now, Gui, you get the honor of leading the Brazil Regional Engagement Board. What are you hoping to accomplish in the next term?

Guilherme Scheibe: This is a real honor for me. This is one thing I would say, one of the activities that gives me the most excitement here within the Council. And I have to say that we need to make sure that we keep the same level of participation and collaboration going forward. So right now, we have an amazing REB, and my goal is that we continue to grow and improve as a board. Another thing, which is quite important to state, is that payments in Brazil, they evolve incredibly fast.

Honestly, it's faster than in most regions. And we need to share this with the Council, so we can either support or enhance the standards and programs. Personally, I'd like to see the REB producing more content just as we've done in the past; things like panels, cases studies, presentations at our events, and even join us here at the Coffee with the Council podcast. So, the REB plays a key role in Brazil's payment industry. And I really hope to see these initiatives keep showing the true value we bring to the ecosystem.

Alicia Malone: Is there anything else you'd like to add about the Regional Engagement Board before we conclude?

Guilherme Scheibe: Yes, I'd say that if an organization is still in doubt about whether to participate or not, don't be. If you're not already a Participating Organization, go ahead and join and then nominate your company to the REB. Remember the REB is a two-way opportunity, so members not only hear directly from the Council, but also provide valuable input that shapes payments, not just in Brazil, but globally.

So, if you'd like to have more information, we have a dedicated REB page, including an FAQ with the details of the nomination process. And of course, you can always reach out to me directly or just reach out to us, just send an email to the engagement team. The contacts are listed on the ‘Contact Us’ page in the Portal.

Alicia Malone: That's great. And just like you said, we do have a landing page dedicated just to the Brazil Regional Engagement Board on the PCI SSC website. So, you can go there, and you can learn more about that nomination process and what you need to do to be eligible.  

Thank you so much for joining us on Coffee with the Council today, Gui. I am sure many of our stakeholders in Brazil and around your region are excited for this opportunity to be more involved with the Council and to share their knowledge and expertise.

Guilherme Scheibe: Thank you, Alicia. It has been a pleasure for me. And I hope that the organizations listening are now keen to join us and be part of the REB Brazil. 

Like what you’ve heard? Subscribe to PCI SSC’s “Coffee with the Council” podcast by visiting any of the following platforms: Apple Podcasts, Spotify, Amazon Music, Anchor, Castbox, Google Podcasts, iHeartRadio, Pocket Casts, RadioPublic, Stitcher, Audible, Overcast, or Pandora.