t

---

The purpose of this policy is to establish guidelines for the authorized use of flash drives on company equipment to ensure data security, prevent malware threats, and maintain the integrity of our information systems.

Authorized Use:
Flash drives may be used on company equipment when necessary for business purposes and with the explicit authorization of the IT department.

• External storage devices are not authorized.

Security Precautions:
Employees should avoid using flash drives from unknown or untrusted sources.

1. USE FLASH DRIVES YOU HAVE PURCHASED NEW OR THAT WERE ISSUED TO YOU AT WORK. DO NOT SHARE THEM WITH ANY OUTSIDE INDIVIDUAL, including family members.
2. Caution with External Flash Drives:
   • Employees must exercise caution when accepting flash drives from external sources, including clients, partners, or colleagues.
   • It is recommended to consult with the IT department before connecting external flash drives to company devices.

Reporting Security Incidents:

• Employees must promptly report any security incidents, data breaches, or suspicious activities related to the use of flash drives to the IT department.

Approval Process:

• Before accepting a flash drive from an external source, employees must obtain approval from the IT department.
• The IT department will assess the security of the external flash drive before granting permission for connection to company equipment.

Scanning and Verification: 

• External flash drives must be scanned for malware or viruses by the company's antivirus software before connecting to company devices.
• The IT department will verify the legitimacy and security of external flash drives.

By using flash drives on company equipment, employees acknowledge that they have read, understood, and agreed to comply with this Flash Drive Usage Policy.

Violations of this policy may result in disciplinary action, up to and including suspension of access to company equipment or termination of employment.

This policy will be reviewed regularly to ensure its relevance and effectiveness. Amendments, if necessary, will be communicated to all relevant parties.