Operational Cybersecurity and Removable Media
A Found USB Drive Is an Unknown Device, Not Free Storage
A removable drive can look harmless while carrying malicious software, altered files or sensitive information that should never leave its owner. Plugging an unknown device into an office computer, engineering workstation or control-system support laptop can bypass normal network defences and create a route into operations. Curiosity is not a valid reason to connect it; identification and handling belong to the approved security process.
Controls to confirm
- Use only organisation-approved removable media for an authorised purpose, and follow the required issue, encryption, scanning and file-transfer process before connecting it to any work device.
- Never connect a found, personal, vendor or unverified drive to office, maintenance, engineering or control-system equipment; isolate the item physically and refer it through the designated security or IT channel.
- Report unexpected device prompts, files, pop-ups or abnormal system behaviour immediately, stop further interaction and preserve the device and details for competent investigation without forwarding the files to colleagues.
Today’s action
Check one work area today for unapproved removable media and confirm that the team knows where to obtain approved devices and how to report a found or suspicious one.
Daily HSSE updates
Subscribe for practical HSSE updates.
Subscribe for the daily message, selected HSSE news and occasional new-resource alerts from Worksite Safety Hub.