There are ways to do it safely. I support regional banks and our procedure is to whitelist the drive by uuid in our antivirus (requires a decent drive, not what

There are ways to do it safely. I support regional banks and our procedure is to whitelist the drive by uuid in our antivirus (requires a decent drive, not whatever bargain bin marketing object you have banging around) and also using bitlocker to encrypt it. So when you connect the drive for the first time, bitlocker reformats it and encrypts the partition, making it clean for business data and preventing you from bringing it to a non-bank computer. It is not ideal, but ** batch processing must happen daily OR ELSE ** even if that means driving a flash drive or an emergency uhaul rental's worth of paper across the state at a moment's notice. Every bank has progressively subgrade procedure sets depending on how bad their emergency is to ensure that this work is done.