CompTIA CySA+ CS0-003 Practice Question
When managing vulnerability scans for an organization that processes, stores, or transmits payment card information, adherence to what standard dictates the regularity and scope of the scans by an external party?
Sarbanes-Oxley Act (SOX)
Federal Information Security Management Act (FISMA)
Payment Card Industry Data Security Standard (PCI DSS)
Health Insurance Portability and Accountability Act (HIPAA)