The core security controls defined by the Payment Card Industry Data Security Standard to protect cardholder data and secure payment environments. They cover areas such as network security, access control, encryption, vulnerability management, monitoring, testing, and information security policies that organizations must implement to maintain PCI compliance.