Removable media are portable storage devices such as USB drives, external hard disks, and SD cards. They pose specific ISMS risks: data loss if the medium is lost, malware introduction, and uncontrolled data exfiltration. ISO 27001 Annex A.7.10 requires policies for handling storage media. Typical controls include mandatory encryption, central approval via endpoint protection, and clear disposal rules. Many organizations restrict removable media use to defined business purposes.