Operational Cybersecurity and Removable Media
A Found USB Drive Is an Unknown Device, Not Free Storage
A removable drive can look harmless while carrying malicious software, altered files or sensitive information that should never leave its owner. Plugging an unknown device into an office computer, engineering workstation or control-system support laptop can bypass normal network defences and create a route into operations. Curiosity is not a valid reason to connect it; identification and handling belong to the approved security process.
Controls to confirm
- Use only organisation-approved removable media for an authorised purpose, and follow the required issue, encryption, scanning and file-transfer process before connecting it to any work device.
- Never connect a found, personal, vendor or unverified drive to office, maintenance, engineering or control-system equipment; isolate the item physically and refer it through the designated security or IT channel.
- Report unexpected device prompts, files, pop-ups or abnormal system behaviour immediately, stop further interaction and preserve the device and details for competent investigation without forwarding the files to colleagues.
Today’s action
Check one work area today for unapproved removable media and confirm that the team knows where to obtain approved devices and how to report a found or suspicious one.
Future HSSE email updates
Register interest in HSSE email updates.
Record your interest in future Worksite Safety Hub messages, selected HSSE news and new-resource alerts. Email delivery is not connected yet.
Your experience matters
Share your thoughts on this page
Have a question, a useful experience or a suggestion? Add your input below.
Comments are public. Keep them respectful and relevant. Do not share contact details, confidential information or emergency reports.
Comments on this page
Loading comments…