1 min read
USB and removable media policy
Block-all vs allow-with-logging: picking a control that matches your risk.
USB drops are still a thing. So are legitimate field workflows that need a drive.
Options
- Block USB storage on most desktops
- Allow read-only
- Allow for a security group with logging
Pair policy with encryption requirements for any approved media.
Ask Qutzl to implement endpoint device control.