Various embodiments include a method for security management at a scanning system installed outside a monitored system. The method comprises: acquiring first information for identification of a mobile storage device; generating third information to indicate current status of files on the mobile storage device; and sending the first information and the third information to a monitoring system to check if usage of the mobile storage device in the monitored system is secure.