Which of the following guidelines or standards is associated with the credit card industry?

COBIT is an IT governance and management framework developed by ISACA that applies broadly across industries and is not specific to payment card security.

SOX is a U.S. federal law focused on financial reporting accuracy and corporate governance for publicly traded companies, with no specific payment card data requirements.

HIPAA is a U.S. federal law that governs the privacy and security of protected health information in the healthcare industry, not payment card data.

PCI DSS was developed by the Payment Card Industry Security Standards Council - founded by major card brands including Visa, Mastercard, and American Express - to establish a baseline of security controls for protecting cardholder data. It applies to any organization that stores, processes, or transmits payment card data, making it the only option directly tied to the credit card industry. Compliance is enforced contractually by card brands and acquiring banks.