USB Security Policy: What You Need to Know

Why You’ve Been Directed Here

You have reached this page because a non-approved USB device was connected to the corporate network.
Don’t worry—no immediate harm was done. The risk has been mitigated.
However, we take these events seriously due to the increasing risk USB devices pose.

---

Why USB Security Matters

1. USB Devices Can Spread Malware

USB drives are one of the most common ways malware spreads within corporate environments.
Some USBs, even straight from the package, have been found preloaded with malware or ransomware.

• Many infections lie dormant and silently collect information before activating.
• If you plug in an infected USB, it could compromise your system and allow unauthorized access to company data.

2. USB Devices Can Leak Sensitive Information

Consider this common scenario:

You copy a presentation with confidential sales forecasts onto a USB to use later. After your meeting, the USB is left behind—now company data is exposed.

Losing a USB stick may seem minor, but when it contains business-critical data, the consequences can be financially and reputationally damaging.

---

Protecting Company Data: Encryption is Key

If you must use a USB:

• Only use company-approved USB devices.
• Always store sensitive files in the encrypted folder provided.
• If the USB is lost, encrypted data cannot be accessed, greatly reducing business risk.

---

What Not to Do

• Never insert unknown or personally-owned USBs into a company device.
• Do not assume a USB is safe, even if it’s newly purchased or used previously.

---

What To Do Instead

• If you’re unsure about a USB, hand it to the IT Team or Helpdesk for inspection.
• If you’re using a company-issued USB and received this message, contact the Helpdesk. USBs are regularly reviewed for compliance and safety.

---

Need Help?

If you have questions or need an encrypted USB folder set up,
reach out to the Helpdesk for support.

Simple actions prevent major risks. Stay vigilant.