9.4.5.1Media with cardholder data is securely stored, accessed, distributed, and destroyed

Defined Approach Requirements:

Inventories of electronic media with cardholder data are conducted at least once every 12 months

Defined Approach Testing Procedures:

9.4.5.1.a Examine documentation to verify that procedures are defined to conduct inventories of electronic media with cardholder data at least once every 12 months.

9.4.5.1.b Examine electronic media inventory logs and interview personnel to verify that electronic media inventories are performed at least once every 12 months