This control requires organizations to limit and monitor the use of removable media—like USB drives, external hard drives, CDs, and SD cards—on systems that store, process, or transmit Controlled Unclassified Information (CUI).
Read the full blog breakdown of 3.8.7