If employees are not adequately familiar with the rules on the proper handling of removable media, they will not be able to adhere to them. This poses numerous threats to information security—for example, if untested USB pen drives are connected to an organisation’s IT systems.