3.1.c For a sample of system components that store cardholder data:
• Examine files and system records to verify that the data stored does not exceed the requirements defined in the data retention policy
• Observe the deletion mechanism to verify data is deleted securely.