Identify the documented policies and procedures that:
i. Define processes for ensuring that stored cardholder data does not exceed requirements defined in the data retention policy
ii. Require that the processes be performed at least quarterly
Describe the implemented processes (may be a programmatic process, requirements for a review, or a combination of both).