Certified Cloud Security Professional – CCSP – Question048

Which of the following is NOT a regulatory system from the United States federal government?

A. PCI DSS
B. FISMA
C. SOX
D. HIPAA

Correct Answer: A

Explanation:

Explanation: The payment card industry data security standard (PCI DSS) pertains to organizations that handle credit card transactions and is an industry regulatory standard, not a governmental one.