However, relying on AUPs alone is insufficient – organisations need to back up any policy with robust enforcement capabilities. A wholesale ban on portable media devices is not the answer. Certain employees across an organisation will have a perfectly legitimate need to use removable media, be it a USB stick to transfer data or a PDA to synchronise diaries. Not all employees will need such access, so a flexible solution is needed for permissible usage and blocking unauthorised connections.