Scenario: An organization has made a decision to address Information Security formally and consistently by...

 Best Fit for a Security Baseline

ISO 27000 provides a robust framework for building an information security management system (ISMS), applicable to organizations of any size and industry.

PCI DSS is specifically tailored for organizations handling credit card transactions, ensuring secure payment processing and compliance.

 Why Not Other Options?

A. NIST and Privacy Regulations: NIST provides detailed controls but lacks a global focus and industry-specific guidelines like PCI DSS.

C. NIST and Data Breach Notification Laws: Data breach laws are reactive, not foundational for a security baseline.

D. ISO 27000 and Human Resources Best Practices: HR practices are not a direct fit for a security program baseline.

 EC-Council References

EC-Council emphasizes ISO 27000 for ISMS and PCI DSS for payment-related security in retail environments.