PCI Security Standards Council Establishes First India–South Asia Regional Engagement Board for 2025–2026

PCI SSC brings together 27 leading firms from India and South Asia to advance secure payment practices and industry-wide compliance.

Mumbai, 29 August 2025 – In a landmark move that underscores the strategic importance of the region’s fast-evolving payments landscape, the PCI Security Standards Council (PCI SSC) has announced the formation of its first-ever India–South Asia Regional Engagement Board (REB) for the 2025–2026 term. This initiative marks a significant step in PCI SSC’s global expansion and its commitment to fostering secure payment ecosystems through localized collaboration.

The newly formed REB brings together 27 leading organizations from across India and South Asia, representing a cross-section of the payments industry – including banks, fintechs, global technology firms, processors, merchants, and cybersecurity vendors. Notable members include Axis Bank, HDFC Bank, SBI Cards, Google, Qualcomm, NPCI, Ernst & Young, Aurus, M2P Solutions, Zeta, In-Solutions Global, and Bhutan National Bank.

As regional advisors to PCI SSC, REB members will provide direct insight into market-specific payment security threats, emerging trends, and regulatory challenges. They will also serve as ambassadors, driving education and awareness of PCI SSC’s global security standards and best practices among local stakeholders. The Board’s mandate includes facilitating ongoing dialogue between PCI SSC and the regional ecosystem, enabling more agile and context-aware responses to complex cybersecurity and fraud risks.

“The Council continues to gain valuable insight through our original Regional Engagement Board in Brazil. We wanted to replicate that success in other key markets,” said Gina Gobeyn, Executive Director of PCI SSC. “The formation of a REB in the India–South Asia region represents an important step in global collaboration and highlights the significance of this market in the world of payment security.”

This is only the second REB established globally, following Brazil in 2018, and reflects the Council’s recognition of India and South Asia’s growing influence in digital payments and data protection. The PCI SSC Executive Committee selected member organizations to ensure broad representation across the payments value chain, including vendors, processors, banks, service providers, and industry associations.

Throughout the year, the Board will convene regularly to discuss threat intelligence, incident trends, regulatory shifts, and best practices. It will also contribute to the development of region-specific guidance and support stakeholder recruitment for future initiatives. The expected outcomes include faster dissemination of security knowledge, stronger defenses against fraud, and a more unified payment security framework to support the region’s rapid digitization.

“This is indeed a proud moment for the region,” said Nitin Bhatnagar, PCI SSC Regional Director for India, South Asia, and the Middle East. “With the REB in place, payment industry stakeholders will play a more active role in shaping a secure and resilient payments ecosystem amid evolving cybersecurity challenges.”

As India and South Asia accelerate toward new digital platforms – such as UPI, RTP, wallets, and embedded finance – the REB will serve as a vital bridge between global standards and local realities, helping businesses navigate complexity with confidence and clarity.

For more information on the Board’s mission and members, visit the PCI SSC Regional Engagement Board page.