Security and privacy of/on information systems are two entities that requires lawful regulations. Which of the following regulations

defines security and privacy controls for Federal information systems and organizations?

A.

NIST SP 800-53

B.

PCI-DSS

C.

EU Safe Harbor

D.

HIPAA