Test your knowledge: Risk management frameworks — Question 3

An organization uses a third-party system to process its customers’ credit card information. What framework can help the organization assess the third-party system’s security?