1. Secure media when not in use.
  2. Limit who can access removable media.
  3. Clearly label media containing FCI.