Which of the following is NOT a set of Regulatory Requirements related to Information Security?

A. ISO 37001

B. Sarbanes Oxley (SOX)

C. HIPPA

D. PCI

Explanation: ISO 37001 – Anti-bribery management systems

Reference: http://www.iso.org/iso/home/standards/management-standards/iso37001.htm