Security professionals want functionality like data encryption and VPN to be permanently enabled. Some have taken the approach of completely disabling the insertion of USB devices. This needs to be supported with more fine-grained control. What is the path forward?
