A city portal that accepts credit cards for recreation fees must protect cardholder data. Which industry standard should the design align with?
Select an answer to reveal the explanation.
Short Explanation
If the portal touches credit cards, think PCI DSS—the playbook for cardholder data—not produce grades or paint codes. Align the cloud design with payment-card security expectations.
Full Explanation
PCI DSS is the industry security standard for organizations that store, process, or transmit payment card data. A recreation fee portal that handles cards must align controls, scoping, and evidence with those requirements. Unrelated standards do not substitute for cardholder-data protections.