Here are some of the best ways to make sure your USB flash drives are consistently protected against threats of all kinds:

• Limit exposure to threats by enabling USB functionality on a strictly need-to-have basis, disabling any devices with access to sensitive data, which will reduce the risk of unauthorized third parties getting ahold of any data they shouldn’t have.
• Issue company-specific devices that include full encryption and passcodes for access.
• Make sure all of your devices are capable of remote management, including remote lock and wipe. In some cases, you can even issue devices that are capable of virtual self-destruction to erase all data in the event of unauthorized access.
• Scan all USBs once plugged into a computer or other device, which can help ensure that any malware or other threats remain quarantined on the drive, which can be further accomplished by only allowing for the use of corporate-approved programs.
• Audit all USB devices to ensure that only compliant and permissible documents are being stored on them, with a strict USB policy in place.
• Back up all of your devices, including all encryption keys, in case a disaster ever occurs. All backups should be safeguarded and have their own procedures and security controls.
• Test data recovery procedures to make sure that the security office can unlock and access any flash drives, even when the device is disabled for any reason.
• Use flash drives with unique serial numbers that are located internally and externally.