# Workflows ## Workflow 1: USB Device Control Deployment ``` [Audit current USB usage across fleet] → [Identify legitimate USB needs] → [Create approved device whitelist] → [Configure block policy with exceptions] → [Deploy in audit mode for 2 weeks] → [Review blocked events] → [Add missing legitimate devices] → [Switch to enforce mode] → [Communicate policy to users] → [Monitor and maintain] ``` ## Workflow 2: USB Exception Request ``` [User requests USB access] → [Verify business justification] → [Issue approved encrypted USB device] → [Add device ID to whitelist] → [Deploy updated policy] → [Log exception with expiry date] ```