Controlling exfiltration by blocking ports. That's cute.

There are SO many ways to exfiltrate data. The only way to control exfiltration with a chance of success greater than zero is to lock down all work devices (at the OS level, centrally managed) and prohibit outside devices including USB keys. Anything less is a joke.