Does your organization physically secure all removable media containing unencrypted sensitive information?

Removable media (USB drives, external hard drives, SD cards, etc.) containing unencrypted sensitive data presents a significant security risk if lost or stolen. Physical security measures such as locked drawers, safes, or secure rooms help prevent unauthorized access to these devices when not in use. Evidence of compliance could include documented physical security policies specific to removable media, photographs of secure storage locations with identifying information redacted, logs of media check-in/check-out procedures, or results from internal audits verifying proper storage of removable media containing sensitive information.