Only 14% of the UK CISOs surveyed describe their control of removable media as mature.