wireless thumbdrive

[SeriousStudent]

You need a corporate policy which disallows them, and then an AD GPO that disables removable media.

Much agree.

One can also set a GPO that disallows specific classes of USB devices. So you can retain the use of a keyboard or mouse, but eliminate a USB storage device. Driver signing is also possible to enforce, along with preventing someone from loading the more popular brands of USB key drivers. If you have your own PKI, you can sign drivers and use your CRL to rapidly whack stuff if needed.

Personally, I'm a big fan of physical security. See also: JB Weld.

[SeriousStudent]

That will happen eventually, but only after some department goes down in flames with an infection, or it gets to be a popular buzz word in corporate circles.

On second thought I would be surprised if the The PCI Security Standards Council doesn't make it a requirement very shortly.

I understand what you are saying. But if an org is not already exceeding PCI DSS v3.0 without a lot of compensating controls, they are doomed anyway, in my very humble opinion.