Use of USB data storage devices

Each year Aberystwyth University is audited to ensure the adequacy and implementation effectiveness of its controls to govern,  identify, detect, and protect from cyber security incidents and breaches.

The auditors have identified the use of USB storage devices as a potential risk as these could lead to malicious software being transferred onto the University’s network or individuals transferring sensitive information outside of the University.

To ensure compliance with the IT regulations, the use of USB storage devices will be disabled for staff in departments according to the following schedule:

PS03	Student Services	Completed
SD01	Academic Registry	Completed
SD09	Communications and Public Affairs	Completed
SD20	Finance Office	Completed
SD25	Human Resources	Completed
SD26	Information Services	Completed
SD30	Planning Office	Completed
SD36	Vice Chancellor's Office	Completed
SD52	Governance	Completed

Hardware that uses USB connections will continue to work, e.g. headsets, microphones, keyboards, mice.

Staff who need to use USB data storage as no other solution is available can ask their Head of Deaprtment to request an exemption using the online form