the first thing you have to do is to standerdize one USB key and based your policy on that. if you just disable USB you will have probleme with laptops using mouce and KB. also PCs will have probleme.
so you have to define what you want to block
do you want to track what is transfer to usb
do you want to encrypt your usb
you need to know why you want to restrict acces to USB some time the cost of implementing this kind of policies cost much more than what you can save.
Last Wiki Answer Submitted: February 17, 2009 3:41 pm by Mimo700 pts.
If you live outside the United States, by submitting your email address you consent to having your personal data transferred to and processed in the United States.
You definitely need to get the right people on board and determine the underlying business issues before putting a policy in place. Otherwise, it’ll just for show, people will ignore it, and it won’t be enforceable. Effective security policies have the following sections:
#Introduction
#Purpose
#Scope
#Roles and responsibilities
#Policy statement
#Exceptions
#Procedures
#Compliance
#Sanctions
#Review and evaluation
#References
#Related documents
#Revisions
#Notes
You definitely need to get the right people on board and determine the underlying business issues before putting a policy in place. Otherwise, it’ll just for show, people will ignore it, and it won’t be enforceable. Effective security policies have the following sections:
#Introduction
#Purpose
#Scope
#Roles and responsibilities
#Policy statement
#Exceptions
#Procedures
#Compliance
#Sanctions
#Review and evaluation
#References
#Related documents
#Revisions
#Notes
Also, check out my other articles on security policies I’ve written for TechTarget and others at http://www.principlelogic.com/policies.html.