question: Provide a summary of the top three security compliance frameworks used by financial institutions, ensuring you highlight key features of each framework. The response should include exactly three highlighted sections and be no longer than 150 words. Additionally, format the summary using a bullet list for each framework.
answer: - **ISO/IEC 27001**: This international standard provides a systematic approach to managing sensitive company information, ensuring data confidentiality, integrity, and availability. Financial institutions use it to establish, implement, maintain, and continuously improve an information security management system (ISMS).
  
  - **PCI DSS (Payment Card Industry Data Security Standard)**: Designed specifically for organizations handling cardholder information, PCI DSS mandates a set of security controls to protect against data breaches. It requires secure networks, encryption, access control, and regular monitoring and testing.
  
  - **NIST Cybersecurity Framework**: Developed by the National Institute of Standards and Technology, this framework provides guidelines for improving critical infrastructure cybersecurity. It emphasizes risk management through five core functions: Identify, Protect, Detect, Respond, and Recover, tailored for financial institutions to enhance resilience against cyber threats.