Guidance to organizations on managing the security risks of peripheral access devices, such as USB data keys and personal music players.
http://www.niscc.gov.uk/niscc/docs/re-20060508-00337.pdf?lang=en
Urs