USB drop: we measure who plugs in a drive found on the floor
A pendrive in the parking lot or on the line does not pass through email. We place test devices and report where and who plugged them in.
How we run a drop without turning the building into an incident
We mark plant, branch, warehouse or office with you. Each zone has a device quota and a rule not to leave media in uncontrolled public space. Without a map there is no placement.
We prepare USB drives with no real data and a connection marker. The payload does not encrypt, does not persist and does not leave the exercise. We label units so every one can be collected at close-out.
We leave the media in the signed zones, in a short window. There is no second improvised drop in the hallway. Site security and, if it applies, the union or plant committee know there is an exercise — not the exact spots.
We return which zone produced connections, which area appears on the endpoint, and who took the media to IT without plugging it in. That cut is the product. There is no national “pendrive” rate.
Why a USB policy is not proven by a course
Because policy is tested when the object is in someone’s hand, not when a box is ticked in an LMS. In a warehouse and in a branch, the shared machine, the shift and the rush win. An annual course on “do not connect unknown devices” does…
What you get
Evidence of a physical gesture, cut by place and by area, not by an email campaign.
Signed map
Zones, device quota and no-placement rules. It serves legal, facilities and the later argument about where a drive could be left.
Test devices
Units with no real data, with a marker, collected at close-out. In-and-out inventory so no USB is left loose in the building.
Location and area report
Which zone produced the gesture, which area connected, which endpoint appears. It is the deliverable you cannot pull from an email click.
Policy criterion
What to ask afterwards: a channel to hand in a found drive, port control, the habit of not “checking” on a work machine. It is not a GPO redesign: it is evidence to decide one.
What we need from you
Coordinated access to the sites in scope and a facilities or plant counterpart who can open doors and collect devices with us at close-out. Without that site owner the drop… Also an exclusion rule: labs, safes, areas with a no-media standard, visitors. The test USB does not enter where a strange drive would be an industrial incident. If the endpoint…
How it fits the program
The drop does not replace email simulations or vishing. It is the picture of the physical gesture. It is read next to the index, not averaged with a phishing click as if they measured the same thing. A branch that does…
Often contracted alongside this one
Questions about USB drop
Measure the gesture that never passes through email
If you have a plant, a branch or a warehouse, USB policy is proven on the floor. Let’s talk zones.
Full catalog on Services