Comprehensive and Detailed Explanation (250–350 words)
===========
According to EC-Council CCISO documentation, NIST SP 800-53 provides a comprehensive catalog of enterprise-grade security and privacy controls and is widely used as a best-practice framework across industries.
ISO 23009 (Option B) is unrelated to security governance. PCI DSS (Option C) is industry-specific. HIPAA (Option D) is a regulation, not a general best-practice framework.
Thus, Option A is correct.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit