Why should removable media be controlled as part of the Protect function?

• A.USB drives and memory cards can be tracked in the asset inventory, and their serial numbers recorded, and their warranty status reviewed before disposal (each cycle)
• B.A USB drive or memory card (left unmanaged) tends to get labeled by department, and its storage location logged, and its replacement cost estimated for the annual budget
• C.External storage devices (memory cards included) get counted during the physical inventory audit, and any missing units reported to the asset manager for follow-up
• D.Removable media (USB drives, external hard drives) can introduce malware, enable data exfiltration, and bypass network security controls, requiring policies and technical controls to manage their use