USB drives and removable media
Avoid malware and data-loss risks from unknown or unapproved removable devices.
Why this matters
Unknown USB devices can contain malicious files or emulate keyboards and network adapters. Approved encrypted media should be used only when necessary.
By the end of this lesson
- Recognise the main warning signs
- Choose a safe verification method
- Know when and how to report the situation
What to notice
- Found USB drive
- Promotional device from unknown source
- Device asks to run software
- Unencrypted storage contains sensitive data
- Personal drive used for work files
What to do
- Do not connect unknown devices
- Hand found media to IT or security
- Use approved encrypted storage
- Scan permitted media
- Safely eject devices
- Avoid removable media when secure sharing is available
Frequently asked questions
Should I connect a found USB to identify its owner?
No. Give it to the approved security or IT contact.
Are all USB devices just storage?
No, some can emulate other device types.
What is preferable to USB?
Approved secure file sharing.
Angvlar Security Awareness