USB port control policy
Home > IT Answers > Security > USB port control policy
Ytlow
30 pts.
0
Q:
USB port control policy
Security policies, USB port security, Endpoint security, Risk management, Policies, USB
My company plan to roll out a policy on USB port control. I need guide to draft the policy.
ASKED: Feb 17 2009  2:01 AM GMT
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
RELATED QUESTIONS
0
Mimo
700 pts.
0
A:
 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0
  • AddThis Social Bookmark Button
the first thing you have to do is to standerdize one USB key and based your policy on that. if you just disable USB you will have probleme with laptops using mouce and KB. also PCs will have probleme.

so you have to define what you want to block
do you want to track what is transfer to usb
do you want to encrypt your usb
you need to know why you want to restrict acces to USB some time the cost of implementing this kind of policies cost much more than what you can save.
Last Answered: Feb 17 2009  3:41 PM GMT by Mimo   700 pts.
  •   
0
0
RSS - Discussions Help
Discuss This Answer:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

KevinBeaver   7610 pts.  |   Feb 18 2009  3:23PM GMT

You definitely need to get the right people on board and determine the underlying business issues before putting a policy in place. Otherwise, it’ll just for show, people will ignore it, and it won’t be enforceable. Effective security policies have the following sections:

#Introduction
#Purpose
#Scope
#Roles and responsibilities
#Policy statement
#Exceptions
#Procedures
#Compliance
#Sanctions
#Review and evaluation
#References
#Related documents
#Revisions
#Notes

Also, check out my other articles on security policies I’ve written for TechTarget and others at <a href="http://www.principlelogic.com" title="http://www.principlelogic. " target="_blank">www.principlelogic.com</a>

 
0