What information security law or standard aims at protecting stakeholders and the general public from accounting errors and fraudulent activities within organizations?

PCI-DSS (Payment Card Industry Data Security Standard) is a contractual security standard focused on protecting cardholder data during payment processing, not on accounting integrity or corporate fraud.

FISMA (Federal Information Security Management Act) governs information security programs for U.S. federal government agencies and contractors, not corporate financial accountability.

SOX was enacted in 2002 in direct response to high-profile corporate accounting scandals such as Enron and WorldCom. It establishes requirements for accurate financial disclosures, internal controls over financial reporting, and personal accountability for corporate executives, with the explicit goal of protecting investors and the public from fraudulent or erroneous financial activities within organizations.

ISO/IEC 27001:2013 is an international standard for establishing and managing an information security management system (ISMS) and does not address financial reporting, accounting errors, or corporate fraud.