Managing the risks of removable media

April 11, 2022

We all use portable devices such as USB sticks, smartphones, SD cards and external hard drives to copy and transfer data at office or take them off site to conduct our business activities outside the secure perimeters of our office. These are called removable media. Convenient as these are, removable media are fraught with risks, such as the risk of easy malware transmission. It is, therefore, very important to manage the risks of removable media well.

Risks associated with removable media

  • Excessive use of removable media may lead to a loss of sensitive information stored on the media as removable media typically have short life spans and can fail without warning.
  • Uncontrolled use of removable media can increase a risk of malware being transferred to critical business systems.
  • The loss of sensitive data can erode customer confidence in the organisation, resulting in significant reputational damage.
  • If the sensitive information is lost or compromised, the organisation could be subjected to financial penalties.

How to prevent data leakage from removable media

  • Limit the use of all removable media devices except when specifically authorised.
  • Apply password protection.
  • Protect the information which is stored on removable media using methods like data encryption
  • Copy files to removable media only when necessary or after authorisation.
  • Scan all media for malware before using.
  • Do not leave removable media lying around. Lock them securely away when not in use.

Remember to report anything suspicious or cybersecurity related to Sharekhan CSIRT / Information Security Task Force.

Removable media ko awlays protect kar, Sharekhan kar.

Published by Team Internal Communications
This newsletter is for internal circulation only. It may not be published, reproduced or quoted in part or in whole, nor may it be published on social media without prior consent. The content is strictly copyright and reproduction of the whole or part of it in any form is prohibited without written permission from the Internal Communications department of Sharekhan.
  Join us on