The PCI Security Standards Council is pleased to announce its second Middle East Forum. Securing payment card data is a global challenge that requires a united approach. With the help of organizations in the Middle East, the payments community will be able to ensure that PCI Standards, solutions and resources remain the best defense against data compromise worldwide.


The following industry leaders will present at the meeting:


Jeremy King
International Director
PCI Security Standards Council


Troy Leach, CISSP, CISA
Chief Technology Officer
PCI Security Standards Council


Christopher Novak
Co-founder and Director
Verizon Investigative Response Unit


Stephen W. Orfei
General Manager
PCI Security Standards Council


Izdehar Safarini
Deputy CEO Technical and Operation
Middle East Payment Services (MEPS)

More speakers coming – stay tuned.


8:30 - 18:30Registration
8:30 - 9:30 Networking Breakfast and Vendor Showcase
9:30 - 9:45 Welcome Remarks and Introductions
Jeremy King, International Director, PCI Security Standards Council
9:45 - 10:30 State of the Council
Stephen Orfei, General Manager, PCI Security Standards Council
Find out what's in store for 2016, and get an overview of current Council initiatives.
10:30 - 11:30 Payment Security & PCI Standards Part 1
Troy Leach, CTO, PCI Security Standards Council
Topics Covered: Data Security Standard (DSS) Update, Payment Application Data Security Standard (PA-DSS), Small Merchant
11:30 - 12:00 BOA Regional Insights
Izdehar Safarini, Deputy CEO Technical and Operation, Middle East Payment Services (MEPS)
12:00 - 13:30 Networking Lunch and Vendor Showcase
13:30 - 14:30 Industry Keynote: Forensics in the Middle East Region
Christopher Novak Director, Investigative Response Verizon RISK Team
14:30 - 15:00Case Study: How the layered approach of PCI DSS can help prevent a breach
Dharshan Shanthamurthy, CEO, SISA Information Security Global
Renju Varghese Jolly, Principal Consultant, SISA Information Security Middle East
15:00 - 15:30 Networking Break and Vendor Showcase
15:30 - 16:30Payment Security & PCI Standards Part 2
Troy Leach, CTO, PCI Security Standards Council and Gareth Bowker, Director of Training Programs, PCI Security Standards Council,
Topics Covered: Mobile, Token Service Providers (TSP), Over the Air (OTA), Point-to-Point Encryption (P2PE)
16:30 - 17:00Participation Opportunity Overview
Jeremy King, International Director, PCI Security Standards Council
Attend this session to learn how you can engage with the Council through Special Interest Groups, by becoming a Participating Organization and more.
17:00 - 18:30Networking Reception and Vendor Showcase

8:30 - 9:30Registration & Networking Breakfast and Vendor Showcase
9:30 - 9:35 Day Two Welcome Remarks
Jeremy King, International Director, PCI Security Standards Council
9:35 - 10:35Regional Keynote: Credit Libanais Group Journey into PCI-DSS Certification
Tony Chebli, Senior Manager, Information Security Department/Risk Management Division, Credit Libanais S.A.L
10:35 - 11:00Networking Break and Vendor Showcase
11:00 - 11:20 Maintaining PCI Compliance across Environment Changes and Cross-overs
Abdullah Alagha, Manager, IT Controls Assurance. Abu Dhabi Islamic
11:20 - 11:40 Case Study: Successful Implementation Of PCI DSS In A Large Bank
Fareed M. Hosain, CIO and Dr. Aftab A Rizvi, Managing Director
11:40 - 12:10Q&A with PCI Security Standards Council
12:10 - 12:30Closing Remarks

Register today to secure your spot at the 2016 Middle East Forum. Space is limited.


Employee Education is the Best Defense for Protecting your Organization’s Data Assets.

In conjunction with the Middle East Forum, three training courses are available, allowing attendees to make the most of their travel time and professional development budgets:


Acquirer Training | 3 April

PCI Acquirer Training provides essential information acquirers need to understand the requirements around the protection of payment card data. It explains key concepts from account data terminology and the transaction process, to the PCI DSS Requirements and payment brand compliance programs. After completing this course, acquirer personnel will have the knowledge to work confidently with merchants on their journey toward PCI DSS compliance.


Qualified Security Assessor (QSA)™ Qualification | 4-5 April

Qualified Security Assessor (QSA) training provides instruction on how to conduct assessments of merchants, institutions and service providers who must be compliant with the Payment Card Industry Data Security Standard (PCI DSS). Sponsored by their employer to attend this training, a QSA is equipped to audit processes and systems and generate and submit appropriate compliance reports on behalf of their clients. Through this QSA training course, you will become an expert on the requirements for PCI compliance and have an impact on the consistent and proper application of security measures and controls for your clients.


Internal Security Assessor (ISA)™ Qualification  |  10-11 April  

The Internal Security Assessor (ISA) Program provides large merchants, acquiring banks and processors the opportunity to build their internal PCI Security Standards expertise and strengthen their approach to payment data security, as well as increase their efficiency in compliance with the PCI Data Security Standards. The program trains, tests and certifies organizations and individuals to assess and validate adherence to PCI Security Standards.



General Sponsors

grc_logo_high_res-2   SM-logo SM-logo Vigitrust


Sponsorship Opportunities

An exclusive opportunity to position your company as a leader in the global payment security industry.


Get the latest updates on the Middle East Forum by joining our mailing list.