A usb ports firewall would be a great feature. Malware now spreads very fast using usb sticks.
CIS protects against infections from removable media.
The only thing you need (rather must do) in addition to what HeffeD pointed is
completely disable all Autoruns through the system including USB devices.
yep, disable autorun function. the easiest way is to use tweakUI for XP or ultimate windows tweaker for vista.
or use ninja pendisk :-TU
Panda Usb vaccine is also a good choice.