Respectfully disagree,blanket ban is good if the specific business unit handles sensitive data. Some departments might need to interact with external third part

Respectfully disagree,blanket ban is good if the specific business unit handles sensitive data. Some departments might need to interact with external third parties and customers who would send them data over mass storage. Most people are not idiots when it comes to security since it is the job of system and security engineers to design a secure system for "most people" ,however a security policy that does not take into measure context specific business impact is foolish.