Control: ism-1418; Revision: 4; Updated: Mar-22; Applicability: ALL; Essential Eight: N/A ​

If there is no business requirement for reading from removable media and devices, such functionality is disabled via the use of device access control software or by disabling external communication interfaces.