All the encryption programs I know of support encrypting drives with data. BitLocker and Vercrypt(TrueCrypt port) absolutely do. BitLocker absolutely requires the use of strong Windows passwords as it only protects the drive if its removed or accessed via another boot device. VeraCrypt has the added benefit of having a pre-boot password so you cannot even boot to the operating system without entering the password. You should still of course have strong passwords and automatic locking of the system after a set time of inactivity.
You may also want to re-evaluate the need for USB drives and sticks, not only are they bad for data security but also easy to lose, have stolen, or just fail. Central storage and VPN access may be preferred to a giant pile of external devices that some places end up relying on.
You may also want to re-evaluate the need for USB drives and sticks, not only are they bad for data security but also easy to lose, have stolen, or just fail. Central storage and VPN access may be preferred to a giant pile of external devices that some places end up relying on.