3.8.7 Control use of Removable Media on System Components

Guides

• SANS Institute – Ubiquitous Security Backdoor (USB)

Additional Lessons Learned

• US-CERT – The Risks of Using Portable Devices

Sample Policy & Procedures

• SANS Institute – Sample Removal Media Policy
• US. Department of Transportation – Federal Aviation Administration – National Policy – Order 1370.111 – Removable Media Security Policy
• McAfee – Total Protection for Data Loss Prevention
• Symantec – Information Centric Tagging
• Trustwave – Data Loss Prevention Datasheet

Example Tools

• Sophos Endpoint Security and Control
• Digital Guardian Device Control & Encryption
• McAfee Device Control
• McAfee ePO Suite w/ DLP 

Videos

• Control USBs & Removable Devices with EndPoint Protector
• McAfee – File & Removable Media Protection
• Symantec Endpoint Protection – Device Control: USB Drive Blocking

Vendor Documentation

• Controlling the use of USB drives on Red Hat systems
• Control USBs & Removable Devices with EndPoint Protector
• Tenable – ISO/IEC27000: Removable Media
• Intel Security (McAfee) – Data Loss Prevention
• Symantec Data Loss Prevention
• Trustwave Data Loss Prevention
• McAfee Data Loss Prevention Endpoint Guide
• Data Loss Prevention – Administrator Guide