CCSP: Certified Cloud Security Professional

By ISC · Question Mode

QuestionQ254

VerifiedLegal, Risk and Compliance

Although the United States has no single, comprehensive privacy and regulatory framework, several specific regulations apply to particular data types or populations.

Which of the following is NOT a regulatory system of the United States federal government?

Explanation

PCI DSS establishes technical and operational security requirements for payment-account data, but it is an industry standard developed and maintained by the PCI Security Standards Council. It is not a U.S. federal-government regulatory system.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!