1	Introduction

1.1	About portable media device threats

The key advantage of removable media devices (or portable devices) is easy access. In theory, this may be of great advantage for organizations. However, it is a well-reported fact that access and security are at opposite ends of the security continuum.

Developments in removable media technology are escalating. The newer versions of portable devices, such as flash memory, have been increasing in capacity and performance making them:

•	Easy and fast to install.

•	Capable of storing huge amounts of data.

•	Physically small enough to carry in a pocket.

As a result, internal users may deliberately or accidentally:

•	Remove sensitive data or expose confidential information.

•	Introduce malicious code (e.g. viruses, Trojans) which can bring the entire corporate network down.

•	Transfer inappropriate or offensive material on to corporate hardware.

•	Make personal copies of company information and intellectual property.

•	Connect portable devices to corporate hardware and as a consequence get distracted during work hours.

In an attempt to control these threats organizations have started to prohibit the use of (personally-owned) portable devices at work. However, best practice dictates that you must never rely on voluntary compliance! The best way to ensure complete control over portable devices is by putting technological barriers.