External Media are ‘things’ that can be plugged into a device or computer. Examples are USB sticks, CDs, DVDs. Some external media have been shown to be compromised at the manufacturer. Other attacks are insiders loading malware on machines inside the corporate network knowingly or unknowingly. Even charging a phone on a device creates a vulnerability for both devices.
Adapted from Ernst (2013)