---
title: "PCI DSS in Practice Case Study: Cielo"
description: In this PCI DSS in Practice Case Study, Brazil Regional Engagement Board Member Cielo shares the challenge of dealing with legacy systems that did not have adequate controls to meet PCI DSS.
image: https://blog.pcisecuritystandards.org/hubfs/2019_Blog%20Images/PCI_blog_Cielo.png
---

[< Return to Blog Home](https://blog.pcisecuritystandards.org) [Print](https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-cielo#)

# [PCI DSS in Practice Case Study: Cielo](https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-cielo)

 Posted by [Lindsay Goodspeed](https://blog.pcisecuritystandards.org/author/lindsay-goodspeed) on 26 Aug, 2020 in [PCI DSS](https://blog.pcisecuritystandards.org/topic/pci-dss) and [Case Study](https://blog.pcisecuritystandards.org/topic/case-study) and [Brazil](https://blog.pcisecuritystandards.org/topic/brazil) and [Regional Engagement Board](https://blog.pcisecuritystandards.org/topic/regional-engagement-board)

![PCI_blog_Cielo](https://blog.pcisecuritystandards.org/hs-fs/hubfs/2019_Blog%20Images/PCI_blog_Cielo.png?width=800&name=PCI_blog_Cielo.png "PCI_blog_Cielo")

<https://www.linkedin.com/shareArticle?mini=true&url=https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-cielo>

<https://www.facebook.com/share.php?u=https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-cielo>

<https://twitter.com/intent/tweet?original_referer=https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-cielo&url=https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-cielo&source=tweetbutton&text=PCI%20DSS%20in%20Practice%20Case%20Study:%20Cielo> 

[mailto:?subject=Check%20out%20this%20article&body=https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-cielo](mailto:?subject=Check%20out%20this%20article&body=https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-cielo)

 

In this PCI DSS in Practice Case Study, [Brazil Regional Engagement Board](https://www.pcisecuritystandards.org/get_involved/regional_engagement_board) Member Cielo shares the challenge of dealing with legacy systems that did not have adequate controls to meet PCI DSS. The company recognized that training employees on security awareness and the support of senior management were essential to address these challenges.

Key Takeaways:

- Integrating PCI DSS security best practices to all company projects make the environment more robust and resilient to failure
- [Internal Security Assessor](https://www.pcisecuritystandards.org/assessors_and_solutions/internal_security_assessors) (ISA) training allowed Cielo’s security and development employees to have more in-depth knowledge of PCI DSS
- Partnering with PCI [Qualified Security Assessors ](https://www.pcisecuritystandards.org/program_training_and_qualification/qsa_certification)(QSAs) helps defer financial restraints related to merchant adoption of PCI DSS

[![View the PCI DSS in Practice Case Study](https://no-cache.hubspot.com/cta/default/281302/a9c3fefc-a5b2-42a7-882b-f4c152ab84e5.png)](https://cta-redirect.hubspot.com/cta/redirect/281302/a9c3fefc-a5b2-42a7-882b-f4c152ab84e5)

[![Learn more about the Brazil Regional Engagement Board](https://no-cache.hubspot.com/cta/default/281302/16764569-269d-42e1-88bf-63e2ee619ce6.png)](https://cta-redirect.hubspot.com/cta/redirect/281302/16764569-269d-42e1-88bf-63e2ee619ce6)

### LIKE WHAT YOU READ?

Subscribe to the PCI Perspectives blog to receive insights, information and practical resources to help your organization protect payment data.

[Subscribe Here](https://training.pcisecuritystandards.org/subscribe-to-pci-perspectives-blog)

![Lindsay Goodspeed](https://blog.pcisecuritystandards.org/hubfs/Headshots/lindsay-goodspeed.jpg)

[ Lindsay Goodspeed ](https://blog.pcisecuritystandards.org/author/lindsay-goodspeed)

[Twitter ](https://twitter.com/PCISSC) [LinkedIn](https://www.linkedin.com/in/lindsaygoodspeed) [Email](mailto:blog@pcisecuritystandards.org) [Website](https://www.pcisecuritystandards.org/)

 As Senior Manager, Corporate Communications for the Council, Ms. Goodspeed drives awareness of PCI Security Standards and resources for the protection of payment card data.

[< Return to Blog Home](https://blog.pcisecuritystandards.org) [Print](https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-cielo#)