1. Approve who can use removable media.
  2. Track where sensitive media is stored or used.