Which two statements about PCI DSS are true ?(Choose two)

A.
it is a criminal act of cardholder information fraud.

B.
it is an IETF standard for companies to protect credit, debit ,and ATM cardholder
information.

C.
it has as one of its objectives to restrict physical access to credit, debit ,and ATM
cardholder information.

D.
it is a US government standard that defines ISP security compliance

E.
it is a proprietary security standard that defines a framework for credit, debit ,and
ATM cardholder information.