3.1.b Interview personnel to verify that:
• All locations of stored cardholder data are included in the data retention and disposal processes.
• Either a quarterly automatic or manual process is in place to identify and securely delete stored cardholder data.
• The quarterly automatic or manual process is performed for all locations of cardholder data.