Security and privacy of/on information systems are two entities that requires lawful regulations. Which of the
following regulations defines security and privacy controls for Federal information systems and organizations?

A.
NIST SP 800-53

B.
PCI-DSS

C.
EU Safe Harbor

D.
HIPAA