[PCI DSS 1.x] 12.3.7 List of company-approved products

12.3.7 Verify that the usage policies require a list of company-approved products