The threat posed by removable media, like USB drives, has surpassed malware in the minds of most IT managers. Few businesses are actively engaged in any real proactive measures to address the issue. The risk simply too great and the solution too straightforward not to address this problem. Businesses should also consider requiring specific contractual protections in vendor relationships to ensure the vendor does not potentially compromise the business confidential/proprietary information through the use of removable media. In his own informal survey of medium to large businesses, only a small percentage even have a specific policy.”]
Source: https://www.csoonline.com/article/2136579/usb-drives-continue-to-raise-security-concerns.html