Which compliance framework is specifically intended for companies that handle credit and debit card transactions to ensure the security of cardholder systems and data?

ISO 27001 is a broad international standard for information security management systems, not specific to credit card data.

Google Cloud Armor is a WAF and DDoS protection service provided by Google Cloud, not a compliance framework.

PCI DSS is a proprietary information security standard administered by the Payment Card Industry Security Standards Council, created by the major credit card brands. Its primary purpose is to ensure that all companies that process, store, or transmit credit card information maintain a secure environment, thereby protecting cardholder data from theft and fraud.

NIST Special Publication 800-53 is a set of security and privacy controls for U.S. federal information systems and organizations, not specifically tailored for credit card transactions globally.