A global retail company is creating a new compliance management process.

 Importance of PCI-DSS for Retail Companies:

Retail businesses frequently handle payment card transactions, making PCI-DSS compliance essential for securing cardholder data.

Non-compliance with PCI-DSS can lead to severe financial penalties and reputational damage.

 Why PCI-DSS is Prioritized:

Directly addresses the protection of sensitive payment data.

Specifically relevant to the retail sector.

 Why Other Options Are Incorrect:

A. ITIL: Focuses on IT service management, not retail compliance.

B. ISO Standards: General guidelines, not specific to payment card data.

D. NIST Standards: Primarily for federal agencies and not tailored for retail compliance.

 References:

EC-Council emphasizes PCI-DSS as the critical standard for organizations handling payment data, especially in retail.