Bill has been hired as a penetration tester and cyber security auditor for a major credit card company.
Which information security standard is most applicable to his role?

A. FISMA
B. Sarbanes-Oxley Act
C. HITECH
D. PCI-DSS