The document discusses establishing a USB device policy for an organization. It recommends immediately banning all privately owned USB devices and issuing the organization's own standardized USB drives instead. This allows the organization to control what devices are used and what content is stored. The document provides details on how to implement a policy, including acquiring USB drives, training users, having users sign an acceptable use policy, and conducting inspections and audits to enforce the policy.

1. USB Device Policy The How to and Why set one up David Guerra Information Technology Wrangler November 21, 2008