Usb devices have addresses that include the vendor and product id. So IT can allow list from approved products or vendors and that will prevent people randomly plugging in devices and infecting the network. Though, it wouldnt stop a malcious device from spoofing an address from a approved device, but an targeted attack needs more sophisticatation security anyway.