Which of the following is a set of standard guidelines for ongoing development, enhancement, storage, dissemination and implementation of security standards for account data protection?

The Payment Card Industry Data Security Standard (PCI-DSS) is a global information security standard for organizations that handle branded credit cards from the major card schemes. It is mandated by the card brands and administered by the Payment Card Industry Security Standards Council. The standard was created to increase controls around cardholder data to reduce credit card fraud. It explicitly provides a framework of specifications, tools, and support resources to help organizations ensure the safe handling of cardholder information at every step. This includes guidelines for development, storage, and dissemination of security standards for account data protection.

A. FISMA is a United States federal law that requires federal agencies to develop, document, and implement an agency-wide program to provide information security.
B. HIPAA is a US federal law focused on protecting sensitive patient health information from being disclosed without the patient's consent or knowledge.
D. DARPA is a research and development agency of the United States Department of Defense, not a set of security guidelines for commercial data.

1. PCI Security Standards Council. (2022). Payment Card Industry (PCI) Data Security Standard: Requirements and Security Assessment Procedures, Version 4.0. Section: "About the PCI Data Security Standard", p. 5. Available from pcisecuritystandards.org.

2. Kim, D., & Solomon, M. G. (2016). Fundamentals of information systems security. Jones & Bartlett Learning. Chapter 13, "Information Security Policy, Standards, and Practices," section on PCI DSS.