Removable Media Policy is the policy for removable media (such as CD-ROM, USB flash drive, floppy disk, etc.) on your campus computer. It is included in the campus Technology Use and Security Policies.
What is Removable Media?
Removable media is any portable storage device that can be plugged into a computer. Examples include:
- CD-ROM drives (like those found in a desktop computer)
- USB flash drives (also called “thumb drives”)
- Floppy disks and Zip disks (like those found in a desktop computer)
- Micro-drives (like those found in a laptop)
Why is Removable Media Policy Important?
- Removable media can hold information that can be used to compromise your computer.
- Removable media is frequently lost, forgotten, or stolen.
- In addition, removable media has historically been used as a vector for malware (viruses, worms, and other malicious software).
Examples of removable media that can be lost, forgotten, or stolen include:
- USB flash drives (thumb drives)
- CD-ROMs with sensitive data
- Floppy disks and Zip disks (in desktop computers)
- Micro drives (in laptops)
- E-mail messages with sensitive data
What are the Risks?
If you lose your removable media, it can hold information that can be used to compromise your computer. For example, if a malicious individual finds your CD-ROM or USB flash drive, they can install a virus or keylogger.
So, if they find your CD-ROM on which is sensitive data, they could use that data to compromise your computer or other computers on your network. If a malicious individual finds floppy disks or Zip disks with sensitive data, they could use the information contained on those disks to compromise your computer.
Microdrives are More Vulnerable
Microdrives are even more vulnerable because all the information on them is unencrypted and easily accessed by anyone who finds them. For this reason, all microdrives should be encrypted.
Removable media is frequently lost because it is easy to remove from a computer and easy to forget about. You may put a CD in your drive one day and then several months later you may take it out and put it in an envelope for mailing or storage. Then you may be surprised when the envelope shows up on your doorstep because you forgot about the CD that was inside of it!
You may put a USB flash drive in your pocket one day and take it home only to remember it later that evening when you are getting ready for bed. If you don’t realize immediately that it was in your pocket, you may not think about it again until several days later when you need to use it again and don’t have it. Or maybe someone gives you a floppy disk or Zip disk with data that they want you to share with them.
Several weeks later when you go back to them and ask for the disk, they tell you that they gave it back to the person who gave it to them! This can happen for many reasons: forgetfulness; busyness; procrastination; etc. Remove these risks from your life by simply removing all removable media from your computer when you are done with it.
