Bill has been hired as a penetration tester and cyber security auditor for a major credit card company. Which information security standard is most applicable to his role?

FISMA (Federal Information Security Modernization Act) is a US law that requires federal agencies to develop, document, and implement information security programs.

HITECH (Health Information Technology for Economic and Clinical Health Act) is a US law that promotes the adoption and meaningful use of health information technology, primarily dealing with patient health information.

PCI-DSS (Payment Card Industry Data Security Standard) is a set of security standards designed to ensure that all companies that process, store, or transmit credit card information maintain a secure environment. A penetration tester for a credit card company would specifically audit compliance with these regulations.

The Sarbanes-Oxley Act (SOX) is a US federal law that mandates certain practices in financial record keeping and reporting for public companies, focusing on financial integrity, not specifically credit card data security.