Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years. Which of the following frameworks and standards will BEST fit the organization as a baseline for their security program?

Question

Quizplus · Accepted Answer

ISO 27000 provides a comprehensive framework for information security management, and PCI DSS is crucial for retail merchants handling payment card information, making them the best fit for the organization's security program.

Scenario: an Organization Has Made a Decision to Address Information