Which tool stops employees copying files to USB drives?

An endpoint control, not a network tool. Most endpoint protection suites, and the management features built into current operating systems, include device control: you can block removable storage entirely, allow only company-issued encrypted drives, or allow read-only access, and log attempts. Data-loss-prevention (DLP) software goes further and can block copying of documents marked as confidential. Start with the simplest rule that fits the work, since a total ban often pushes people to e-mail files to themselves instead, and pair it with disk encryption on laptops. Write the rule into the IT policy and tell employees, because logging what people copy is monitoring under data protection and employment law. NetSenX does not do this; it sees only data that later crosses the network.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

Read next

← All 40 questions on People, HR and insider riskAll topics