A newly hired SOC analyst is reviewing compliance obligations for a publicly traded manufacturing company listed on a U.S. stock exchange. Management asks the security team to ensure that controls protecting the integrity of financial reporting systems and audit trails are enforced and documented. Which compliance standard is most directly driving this specific requirement?