Removable Media Device UAP

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

I was wondering what types of acceptable use policies people have
regarding removable media devices. A client of mine has approached me
as they had an issue with an employee using a simple USB memory stick
to download customer data. The employee was fired when they discovered
the issue, however they are now concerned about other media devices
connected to their systems. First I am trying to work with him on
establishing how far they want to go to block these devices as it
appears a few employees need to connect smart phones etc as part of
their business, so just shutting down USB ports via the BIOS  for
example is not an option. They also want to be able to log what data a
user downloads if they have write access to a particular device.

First I am wondering what sort of policies folks have in place. Second
I am wondering how you enforce them, their network is predominantly
Windows, with a few Unix servers.

Thank You

Site Timeline