Requirement 9.7

Maintain strict control over the internal or external distribution of any kind of media that contains cardholder data, including the following: