risk
Uncontrolled copying to removable media / unmanaged software installs
Absence of controls over copying data to removable devices, and users freely downloading/installing untested or unlicensed software, expands the attack surface and introduces malicious or unlicensed code into the environment.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- category
- cyber_security
- domain
- Asset Management & Inventory
- Secure Configuration & Change Management
- taxonomy
- iso-27005-vulnerability
- iso-27005-threat
- inherent_rating
- medium
Details
- risk_id
- asset-uncontrolled-copying-removable-media
- category
- cyber_security
- likelihood
- medium
- impact
- medium
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- iso-27005-vulnerability
- iso-27005-threat
Source
No record-specific source URL is provided.
Connections
- UC-ASSET-06 — Govern acceptable use of endpoints, off-site, and external systems mitigates Uncontrolled copying to removable media / unmanaged software installs
- strength
- primary
- rationale
- Acceptable-use rules, portable-storage restrictions, and centrally-managed endpoints prevent uncontrolled copying and unmanaged installs.
- UC-ASSET-01 — Maintain a complete inventory of systems, hardware, and software mitigates Uncontrolled copying to removable media / unmanaged software installs
- strength
- related
- rationale
- Software-inventory reconciliation against the authorized baseline detects unmanaged/rogue software installs.
- UC-CONFIG-08 — Control maintenance tools, personnel, and remote sessions mitigates Uncontrolled copying to removable media / unmanaged software installs
- strength
- related
- rationale
- Controlling and scanning maintenance media for malicious code contributes to preventing malicious-code introduction via removable media.
- UC-CONFIG-05 — Permit only authorized software installation and use mitigates Uncontrolled copying to removable media / unmanaged software installs
- strength
- primary
- rationale
- Restricting installs to authorized/approved software with allowlisting and anti-malware directly prevents unmanaged, untested software installs and malicious code.
- UC-ASSET-04 — Control storage media through use, storage, and destruction mitigates Uncontrolled copying to removable media / unmanaged software installs
- strength
- primary
- rationale
- Restricting removable-media use to authorized personnel and approved types directly prevents uncontrolled copying to removable devices.