Block users or groups from installing or using unapproved hardware on systems, including USB devices.
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| ICS | T0847 | Replication Through Removable Media |
Enforce system policies or physical restrictions to limit hardware such as USB devices on critical assets. |
|