Which of the following is NOT a set of Regulatory Requirements related to Information Security?

A.
ISO 37001

B.
Sarbanes Oxley (SOX)

C.
HIPPA

D.
PCI

Explanation:
ISO 37001 – Anti-bribery management systems
http://www.iso.org/iso/home/standards/management-standards/iso37001.htm