A retail company processes credit card transactions through its e-commerce platform and stores cardholder data in a backend database. During an audit, the security team is asked to identify the compliance standard that specifically governs how this data must be protected. Which standard applies to this scenario?