Are hardcopy materials cross-cut shredded, incinerated, or pulped so that cardholder data cannot be reconstructed?
Are storage containers used for materials that contain information to be destroyed secured to prevent access to the contents?
Is media sent by secured courier or other delivery method that can be accurately tracked?
Is management approval obtained prior to moving the media (especially when media is distributed to individuals)?
Is strict control maintained over the storage and accessibility of media?
Is all media destroyed when it is no longer needed for business or legal reasons?
Is media classified so the sensitivity of the data can be determined?
Are all media physically secured (including but not limited to computers, removable electronic media, paper receipts, paper reports, and faxes)?
Is strict control maintained over the internal or external distribution of any kind of media?