https://www.tripwire.com/state-of-security/report-usb-threats-to-ics-systems-have-nearly-doubled?_gl=1*17h2dr2*_up*MQ..*_ga*NTE0Nzg5ODUwLjE3NTU4OTEzMzQ.*_ga_CM76E0XMNW*czE3NTU4OTEzMzQkbzEkZzEkdDE3NTU4OTE0MDYkajYwJGwwJGgw*_ga_NHMHGJWX49*czE3NTU4OTEzMzMkbzEkZzEkdDE3NTU4OTE0MDYkajYwJGwwJGgw
This article provides an overview of the risks associated with removable media for industrial facilities based on a 2020 Honeywell report.
https://www.infosecinstitute.com/resources/security-awareness/security-awareness-hazards-removable-media/
This article provides an overview of removable media including the risks associated with this technology and how to implement a control policy.
https://www.mcafee.com/en-us/antivirus/mcafee-total-protection.html
McAfee Total Protection to reduce the attack surface
https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-111.pdf
This NIST Special Publication provides recommendations to facilitate more efficient and effective storage encryption solution design, implementation, and management for Federal departments and agencies.
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-175Br1.pdf
This NIST Special Publication is one part in a series of documents intended to provide guidance to the Federal Government for using cryptography to protect its sensitive, but unclassified digitized information during transmission and while in storage.
https://www.opswat.com/blog/removable-media-policy-guidelines-best-practices
Implementing a removable media policy helps organizations control how employees use USB drives, external hard drives, and other portable storage devices. The main purpose is to prevent data breaches and malware infections while keeping sensitive company information secure. These policies set clear rules about what's allowed and what isn't, helping businesses stay compliant with important security standards like ISO 27001, NIST, and Department of Defense requirements.
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/7/html/security_guide/sec-using-usbguard
The USBGuard software framework provides system protection against intrusive USB devices by implementing basic whitelisting and blacklisting capabilities based on device attributes.
https://assets.contentstack.io/v3/assets/blt36c2e63521272fdc/bltea59236f183ab31b/5e9e06135352ae292603886c/removable_media_policy.pdf
This sample policy provided by SANS discusses removable media.
https://www.cisa.gov/sites/default/files/publications/RisksOfPortableDevices.pdf
This paper focuses on the risks associated with simple media devices and smart media devices.