Law enforcement
EVIDENCE INTAKE · INVESTIGATIONS
Screen portable media before it reaches an evidence workstation. Preserve files with read-only access and retain a tamper-evident record of the screening.
WHO IT’S FOR
Any desk. Any organization.
Wherever portable media moves.
The threat doesn’t care what industry you’re in. Portable media can carry malware between computers, departments, and organizations. Put a dedicated screening step before the next connection.
Federal & defense
AGENCIES · CONTRACTORS · FIELD TEAMS
Add a dedicated media checkpoint before a drive connects to agency or contractor systems. Place small V1 consoles at desks and other approved points of use.
State & local government
PUBLIC SERVICES · DEPARTMENTS · OFFICES
Screen media shared between departments, contractors, and public-facing services. Put the checkpoint near the people receiving and exchanging files.
Legal & prosecution
LAW FIRMS · PROSECUTORS · DISCOVERY
Examine supplied media before opening files on legal workstations. Retain scan findings and integrity information alongside the intake record.
Insurance
CLAIMS · FRAUD · INVESTIGATION
Check media supplied by claimants, field teams, and external investigators before connecting it to claims systems. Keep a reviewable screening record.
Healthcare
CLINICAL OPERATIONS · IT · THIRD PARTIES
Add a screening step for permitted portable media exchanged with vendors and service teams before it connects to clinical or administrative computers.
Business & financial services
PAYROLL · PAYMENTS · CORPORATE IT
Screen media moving between employees, offices, and outside parties before it reaches systems used for finance, operations, and sensitive business information.
Education & research
UNIVERSITIES · LABS · SHARED COMPUTERS
Check portable storage shared among students, researchers, and collaborators. Place consoles near laboratories and shared workspaces where media changes hands.
Industry & infrastructure
MAINTENANCE · ENGINEERING · OPERATIONS
Screen approved media carrying service files, logs, and engineering documents before the next connection to operational workstations. Follow the site’s device-approval policy.
FEDERAL & STATE CYBERSECURITY CONTEXT
Media controls are part
of the security program.
Security requirements already address malicious code, portable-media use, and keeping protections current. DF-X1 can support the screening and recordkeeping portion of a broader program. The requirements that apply depend on the organization, system, contract, and jurisdiction.
NIST SP 800-53 Rev. 5
MP-7 · Media Use / SI-3 · Malicious Code Protection
MP-7 addresses restrictions on media use and devices without identifiable owners. SI-3 addresses malicious-code protection, updates, and scanning—including threats carried on removable media.
Where DF-X1 fits: A defined media-screening checkpoint, current threat content, and a reviewable record can support the organization’s implementation of these controls.
Read the NIST controls ↗Basic safeguarding of contractor systems
FAR 52.204-21(b)(1)(xiii)–(xv)
For covered contractor systems handling Federal Contract Information, this clause addresses malicious-code protection, updating that protection, and scanning external-source files.
Where DF-X1 fits: Pre-connection screening adds a checkpoint for portable media. It complements the endpoint and system protections required by the applicable contract.
Read the safeguarding clause ↗VITA Information Security Standard
SEC530-01.2 · MP-7 / SI-3 · June 17, 2025
For organizations and systems within its scope, Virginia’s standard addresses media-use restrictions, malicious-code protection, protection-activity logs, and definition updates.
Where DF-X1 fits: Dedicated screening, recorded findings, and verified threat-content updates can contribute to an agency’s approved media-handling process.
Read Virginia’s standard ↗NYDFS cybersecurity requirements
23 NYCRR 500.14(a)(2)
Covered financial-services entities must implement risk-based controls against malicious code, including web and email protections. Portable-media screening is an additional layer where the risk assessment calls for it.
Where DF-X1 fits: Screen portable media before connecting it to business systems and retain the findings for review within the entity’s cybersecurity program.
Read the NYDFS requirements ↗These references explain relevant control objectives; they are not product certifications or agency endorsements. DF-X1 does not by itself establish compliance, replace endpoint protection, or override a policy prohibiting portable media. Use the requirements and clause versions applicable to your organization and contract.
Sources reviewed October 29, 2026.
Put the checkpoint
where your team works.
Tell us who handles your media, where it travels, and which systems it connects to. We’ll help you evaluate V1 in that workflow.