Why it matters
USB drives and removable media are a classic, still-common way for data to walk out the door.
How a self-led small team implements it
For most modern SaaS teams, a policy restricting removable media use is proportionate; heavy DLP tooling usually isn't needed yet.
What auditors expect to see
Storage media handling policy.
Track A.7.10 in your own Statement of Applicability — mark it applicable, log your justification, and link it to the risk that drove it.
Start your ISMS