USB Control Software to Prevent Data Theft

Prevent Malware Infections From Rogue Removable Media Devices

Picture this: An employee finds a USB removable storage device in the parking lot. They debate keeping the USB device for themselves, but more than anything they are eager to find out what media is being stored on it.

Once they get to their workstation, they immediately plug the mysterious USB device into a USB port and start opening files. While they may not realize it yet, they’ve just fallen for a clever social engineering trick—a bad actor left malware on the USB flash drive before they planted it in your parking lot.

So, how could you prevent this malware exposure? For optimal protection you must establish port control policies that restrict the use of unauthorized devices on company endpoints.

With USB control solutions you can prevent your users from inserting a high-risk USB device into their USB ports. Rather than introducing malware to at-risk endpoints the mysterious USB flash drive can be brought to the IT department where it can be safely analyzed in an isolated sandbox.

Prevent Data Loss to Lost Flash Drives

Unauthorized USB devices aren’t the only danger. Even authorized USB devices can pose a data loss risk if they are misused, lost, or stolen.

The portability of removable storage devices makes it difficult to prevent users from losing them. A well-meaning employee could transfer sensitive media from your network to a USB drive with the intention of working remotely, only to find out that the device has gone missing.

To prevent data loss to authorized devices you need to combine the insights of USB device control software with administrative safeguards that prevent staff from taking removable devices off-site without encryption. If a signed out USB device goes missing you can review the recent activity of USB devices to determine the last time a given USB drive was used.

Collect Evidence of Data Transfers to Removable Storage

USB control solutions provide insightful and easily accessible device usage reports.

These reports track USB activities such as file operations to removable storage, what USB devices are being used in the network, the USB device access history of endpoints, and which user was responsible for inserting unauthorized devices into a USB port.

Having access to the usage history of USB devices is valuable for investigating unauthorized use of USB ports in your network and identifying the source of a data breach.

Prevent Data Theft to Malicious Insider Threats

Malicious insider threats are a significant risk to data security. Employees have intimate access to corporate data, insider knowledge of the organization’s systems, and a level of trust that can allow them to steal data undetected.

USB control is a critical component of a data loss prevention and insider threat management strategy. By disabling USB ports you can prevent unauthorized data transfers to USB removable media devices and other high-risk peripherals.

• 70% of intellectual property theft occurs within the 90 days before an employee’s resignation announcement
• 88% of IT workers have stated that they would take sensitive data with them if they were fired
• 72% of CEOs admit they’ve taken valuable intellectual property (IP) from a former employer
• 50% of respondents in a Symantec survey say they have taken information, and 40% say they will use it in their new jobs

Learn More: How to Keep Data Safe When Offboarding

Establish Administrative Safeguards for Removable Drives

Data protection requires more than device control software; it needs the support of complimentary safeguards. Data protection requires more than device control software; it needs the support of complimentary safeguards. 

Your device control administrative safeguards should include policies that define what authorized devices are allowed, the encryption and antivirus procedures for peripherals, what classifications of data are permitted on removable devices, and physical security requirements for flash drives.

Appoint an IT Staff Member to Manage Device Control Policies

When you create device control policies there will be occasions where staff members require adjustments to their USB device access.

To prevent your network USB control policies from affecting productivity you need a designated security professional that can securely enable USB ports to allow temporary device access.

With AccessPatrol’s Access Code Generator your IT admins can temporarily enable USB ports for a limited period of time.

Create Device Control Policies Based on Risk

How restrictive your USB device control policies are must be based on the risk level of a given user. A user’s risk level will vary based on their role and their level of access to sensitive data.

For example, a healthcare employee that works with electronic health records (EHR) will have their device access more restricted than a marketing employee that needs to easily share content briefs with external parties.

To make granular device control policies easier to manage you can integrate AccessPatrol with your existing Active Directory organizational units.

Use Encryption to Protect Data on Removable Devices

Encryption is an essential component of data protection for USB flash drives. Without encryption a lost USB device can readily have its contents stolen and distributed to unauthorized parties.

To encrypt removable storage, Bitlocker-to-Go is a viable option for Windows systems, VeraCrypt can be used for MacOS/Windows/Linux, and FileVault can be used with MacOS.

To ensure consistent encryption you can even purchase USB devices that include built-in hardware encryption.

Maintain an Inventory of Approved USB Devices

To prevent unauthorized use of personal removable storage devices you will need to block USB devices and selectively allow trusted devices. For greater protection you must manage who can acquire authorized devices with administrative controls.

With a USB device inventory you can require users to sign out authorized peripherals as-needed and have them return the device at the end of the day. Once returned you can use antivirus software to scan for malware, ensure that encryption is enabled on all removable storage, and wipe data from the peripherals.

Configure Real Time Alerts & Audit Removable Storage Activity

AccessPatrol’s email alerts feature provides real-time alerts of endpoint USB activities. FOr optimal protection, regulated industries should consider setting up device alerts or reviewing network USB activity reports at the end of each shift.

Device alerts can be configured to alert designated staff members in real-time when specific, unknown, allowed, or blocked peripherals are connected to a USB port.

File operations alerts will notify designated staff members in real-time when files are copied, created, deleted, or renamed on a USB storage device.