---
title: "PCI DSS in Practice Case Study: Decolar"
description: Decolar is an online travel company in Latin America. The organization also serves on the PCI SSC Brazil Regional Engagement Board, which represents perspectives of Participating Organizations and payments stakeholders in Brazil and provides the Council with feedback and guidance on PCI Standards development and adoption in Brazil.
image: https://blog.pcisecuritystandards.org/hubfs/2019_Blog%20Images/thumbnail_pci-blog-reb.jpg
---

[< Return to Blog Home](https://blog.pcisecuritystandards.org) [Print](https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-decolar#)

# [PCI DSS in Practice Case Study: Decolar](https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-decolar)

 Posted by [Laura K. Gray](https://blog.pcisecuritystandards.org/author/laura-k-gray) on 10 Oct, 2019 in [PCI DSS](https://blog.pcisecuritystandards.org/topic/pci-dss) and [Cloud Security](https://blog.pcisecuritystandards.org/topic/cloud-security) and [Case Study](https://blog.pcisecuritystandards.org/topic/case-study) and [Brazil](https://blog.pcisecuritystandards.org/topic/brazil) and [Regional Engagement Board](https://blog.pcisecuritystandards.org/topic/regional-engagement-board)

![thumbnail_pci-blog-reb](https://blog.pcisecuritystandards.org/hs-fs/hubfs/2019_Blog%20Images/thumbnail_pci-blog-reb.jpg?width=800&name=thumbnail_pci-blog-reb.jpg "thumbnail_pci-blog-reb")

<https://www.linkedin.com/shareArticle?mini=true&url=https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-decolar>

<https://www.facebook.com/share.php?u=https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-decolar>

<https://twitter.com/intent/tweet?original_referer=https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-decolar&url=https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-decolar&source=tweetbutton&text=PCI%20DSS%20in%20Practice%20Case%20Study:%20Decolar> 

[mailto:?subject=Check%20out%20this%20article&body=https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-decolar](mailto:?subject=Check%20out%20this%20article&body=https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-decolar)

 

Decolar needed to ensure that PCI Data Security Standard (PCI DSS) controls were being maintained in its cloud environment. Working with a third-party cloud service provider (CSP), the company built a new networking environment, which involved installation and configuration of all communication and security devices under PCI DSS.

Key takeaways:

- CSPs offer many services to help assure that the infrastructure is properly secured
- A company itself is ultimately responsible for the security of its data as well as the configuration of the services running on the network
- Decolar recommends developing a written agreement that covers your company’s responsibilities and the CSP’s responsibilities

[![View the PCI DSS in Practice Case Study](https://no-cache.hubspot.com/cta/default/281302/bd807eeb-85f4-4c6f-b1c9-870de32d2a8c.png)](https://cta-redirect.hubspot.com/cta/redirect/281302/bd807eeb-85f4-4c6f-b1c9-870de32d2a8c)

[![Learn more about the Brazil Regional Engagement Board](https://no-cache.hubspot.com/cta/default/281302/16764569-269d-42e1-88bf-63e2ee619ce6.png)](https://cta-redirect.hubspot.com/cta/redirect/281302/16764569-269d-42e1-88bf-63e2ee619ce6)

### LIKE WHAT YOU READ?

Subscribe to the PCI Perspectives blog to receive insights, information and practical resources to help your organization protect payment data.

[Subscribe Here](https://training.pcisecuritystandards.org/subscribe-to-pci-perspectives-blog)

![Laura K. Gray](https://blog.pcisecuritystandards.org/hubfs/Headshots/laura-gray.jpg)

[ Laura K. Gray ](https://blog.pcisecuritystandards.org/author/laura-k-gray)

[Twitter ](https://www.twitter.com/pcissc) [Email](mailto:blog@pcisecuritystandards.org) [Website](http://www.pcisecuritystandards.org)

 The PCI Security Standards Council (PCI SSC) is a global forum that brings together payments industry stakeholders to develop and drive adoption of data security standards and resources for safe payments worldwide.

[< Return to Blog Home](https://blog.pcisecuritystandards.org) [Print](https://blog.pcisecuritystandards.org/pci-dss-in-practice-case-study-decolar#)