Resource Centre

Browse our library of resources to stay up to date with data security best practices and hear expert opinions from leaders in the field of cyber security.

All
All
Blog
All
Case Studies
All
Guides
All
Press
All
Product
All
Video
All
Whitepapers & Reports

How to Create an Insider Risk Management Policy

An insider risk management policy is crucial for safeguarding your organization from internal threats. Learn how to create an effective policy, identify risks, and implement strategies to minimize data breaches and compliance violations.

Blog

Data breaches of 2024: what happened, how it affects you, and steps to improve security

Cyberattacks in 2024 reached unprecedented levels, with massive breaches exposing billions of sensitive records. From the MOAB breach to the NHS ransomware attack, this year has been a stark reminder of the growing threat landscape. Learn about the top 5 breaches of 2024, the vulnerabilities exploited, and how organisations can strengthen their security posture to prevent future attacks.

Blog

Understanding AI Agents & Security: What they mean for your business and data security

This article delves into the mechanics of AI agents, explores the data security risks they pose, and outlines the compliance and regulatory considerations businesses must address.

Blog

2025 Data Security Predictions: Trends Shaping the Future of Cyber Protection

Metomic CEO, Rich Vibert, gives his key predictions for data security in 2025

Blog
5 Tips for Preventing Insider Threats in Your Business

5 Tips for Preventing Insider Threats in Your Business

In this article for Forbes, Metomic CEO Rich Vibert outlines five vital tips for mitigating risks when it comes to insider threats

Blog

Three Cyber Security Risks Modern Businesses Face with AI Agents

AI agents offer powerful automation but pose significant risks. Learn about the dangers of data overexposure, unauthorised sharing, and regulatory challenges. Discover how to mitigate these risks and harness AI responsibly.

Blog

DORA and Cloud Computing: How to Achieve DORA Compliance in the Cloud

Financial institutions must ensure their cloud providers comply with DORA to avoid significant risks. Learn how to manage third-party risk, implement robust security measures, and maintain continuous compliance monitoring.

Blog

A Guide to Data Classification for Healthcare Organisations

Ensure the security and compliance of your healthcare data with effective classification. Learn how to identify, classify, and protect sensitive information like PH, discover best practices for data classification in healthcare and why it's crucial for regulatory compliance and risk mitigation.

Blog

What is Human-Generated Data and Why is it Important?

Learn how to safeguard human-generated data and why it's still essential for businesses.

Blog

Conducting a Gap Analysis for DORA: A Step-by-Step Guide

Ensure your financial institution is DORA compliant with a comprehensive gap analysis. Learn how to identify and address shortfalls in your organization's security posture. Discover how Metomic's data security solution can help you achieve and maintain DORA compliance.

Blog

Slack or Teams - Which Is Better for Your Cyber Security?

Protect your business data with the right collaboration tool. Learn about the security strengths and weaknesses of Slack and Microsoft Teams and discover how Metomic can enhance your security posture and prevent data breaches.

Blog

Human Firewalls and Silver Bullets

Metomic's RANT Takeover Explores The Limits of People-Centric Security

Blog

Managing DORA Compliance & Mitigating Risks with Third-Party Suppliers

DORA compliance is crucial for financial institutions. Learn how to manage third-party risks and ensure data security. Stay compliant and protect your business with effective third-party risk management.

Blog

DORA and AI: How Can AI Be Used to Enhance DORA Compliance?

Learn how AI can be leveraged to strengthen DORA compliance. Discover the key areas where AI makes a significant impact, from risk assessment to incident response. Explore how Metomic can help your organisation navigate the complexities of DORA and ensure robust digital resilience.

Blog

A Guide to Microsoft Purview & How Metomic Can Enhance Your Data Security

Discover how Microsoft Purview empowers organizations to effectively manage and protect their data. Learn about its key features, benefits, and how it can help you navigate the complex landscape of data security. Explore the synergy between Purview and Metomic, a powerful tool that enhances data protection and compliance.

Blog

A Guide to Microsoft Office 365 DLP

Learn how to protect sensitive data within your Microsoft 365 environment. Explore the benefits and limitations of Microsoft's DLP tools, and discover how Metomic's advanced solution can enhance your data security strategy.

Blog
Metomic Ranked In Top 20 Start-Ups to Work For in 2025

Metomic Ranked In Top 20 Start-Ups to Work For in 2025

We’re thrilled to announce that Metomic has been ranked 20th on Tempo’s 2025 Top 100 Super Startups list.

Blog

Fintech as a Force for Good: Data Security Insights from Innovate Finance

This week, Metomic attended the Innovate Finance “Fintech as a Force for Good” event. Here’s a recap of the most significant trends and insights from the day.

Blog

Data Classification Matrix: How to Classify and Protect Sensitive Data

Learn how to create a data classification matrix to categorise and protect sensitive data. Discover the importance of data classification for compliance and security. Explore best practices and how Metomic can automate the process.

Blog

Data Classification for Financial Institutions

Struggling with data classification in your financial institution? Metomic's automated solution simplifies the process, ensuring compliance with regulations like GDPR and NYDFS Part 500.

Blog
Best Practices for Managing Stale Data in SaaS Apps

Cybersecurity Awareness Month: Best Practices for Managing Stale Data in SaaS Apps

As organizations increasingly rely on cloud-based storage and SaaS platforms, Chief Information Security Officers (CISOs) and security leaders face a growing challenge: managing the accumulation of stale, sensitive data.

Blog

What Is Data Exfiltration and How Can You Prevent It?

Discover what data exfiltration is and how it can pose a serious threat to your organisation. Learn about common methods used by attackers and effective prevention strategies to safeguard your sensitive data.

Blog

Data Classification for Compliance Regulations: GDPR, HIPAA, PCI DSS and More

Learn how to effectively classify data for GDPR, HIPAA, PCI DSS and other compliance regulations. Discover the importance of data classification, best practices, and how Metomic can streamline the process. Protect your sensitive information and avoid costly fines.

Blog
Everything You Need To Know About Data Classification

Everything You Need To Know About Data Classification

In this interview with Metomic's VP of Engineering, Artem Tabalin, we dig deep into how data classification can transform your business' data security

Blog

How to Create a Data Classification Policy

Discover the importance of data classification policies for protecting sensitive information. Learn how to create a comprehensive policy, implement it effectively, and ensure compliance.

Blog

Slack Data Classification: Securing Your Data in Collaborative Environments

Secure your Slack data with Metomic. Learn how to classify sensitive information, automate discovery, and enforce access controls within Slack. Protect your organisation from data breaches and compliance risks.

Blog

​​A Comprehensive Guide to Understanding and Preventing Insider Threats

Protect your organisation from insider threats. Discover how to identify and prevent malicious or negligent insiders from compromising your data. Learn about warning signs, risk factors, and effective mitigation strategies.

Blog
7 Things We Learned from Our Webinar: A Guide to Implementing a Modern DLP Program that Actually Works

7 Things We Learned from Our Webinar: A Guide to Implementing a Modern DLP Program that Actually Works

In our webinar, "A Guide to Implementing a Modern DLP Program that Actually Works," Metomic’s CEO, Rich Vibert, was joined by Staff Security Engineer, Michael Ivey from Modern Health, to break down the key elements of a successful DLP strategy for modern businesses.

Blog

DLP Monitoring: A Useful Guide

Discover how Data Loss Prevention (DLP) monitoring can protect your sensitive data, prevent breaches, and ensure compliance. Learn about the benefits of DLP monitoring, how it works, and how Metomic's DLP solution can help you safeguard your data.

Blog

How Does DLP Help Organisations Comply with GDPR Compliance?

Discover how Data Loss Prevention (DLP) is essential for protecting sensitive data, preventing data breaches, and ensuring compliance with GDPR regulations.

Blog
Fortinet Breach Highlights Cloud Storage Vulnerabilities

Fortinet Breach Highlights Cloud Storage Vulnerabilities

The Fortinet breach serves as a cautionary tale, emphasising the need for organisations to understand what data is stored in their cloud environments and how it's being accessed.

Blog

How to Use Data Classification and Labelling to Secure Your Google Workspace

In this guide, you'll learn how to use Google Workspace’s data classification and labelling features to enhance your organisation’s data security, and how tools like Metomic can further support these efforts.

Blog

How Can Healthcare Organisations Using Telehealth Maintain HIPAA Compliance?

Deliver secure telehealth services while protecting patient privacy. This guide explores HIPAA regulations for telehealth, potential security risks, and best practices for compliance.

Blog

A Comprehensive Guide to Data Classification in Cyber Security

Protect sensitive business information with effective data classification & labelling. Learn how to organise and tag data based on its sensitivity and importance, apply appropriate security measures, start your data classification process and avoid data breaches.

Blog

A Comprehensive Guide to Google Drive Sharing Permissions: Enhancing Data Security for Your Organisation

Master Google Drive sharing permissions for enhanced data security. Learn how to protect sensitive information, prevent data breaches, and optimize collaboration within your organisation.

Blog

Data Loss Prevention for Healthcare: How to Protect and Secure Healthcare Data with DLP Software

Protect sensitive healthcare data with DLP software. Learn how to safeguard patient information from breaches and comply with regulations like HIPAA and GDPR.

Blog

A Comprehensive Guide to Multi-Factor Authentication (MFA)

Discover how Multi-Factor Authentication (MFA) can dramatically enhance your online security. Learn about different MFA methods, the importance of implementing it, and how Metomic can help protect your sensitive data.

Blog

What is SOX Compliance? Benefits, requirements and checklist

Understand the importance of SOX compliance for your organization. Learn about the key requirements, benefits, and potential risks of non-compliance.

Blog

How to Start Your Data Classification Process

Protect your sensitive data with effective data classification. Learn how to identify, categorise, and secure your information assets.

Blog

8 Essential Healthcare Regulations Organisations Must Comply With

Navigate complex healthcare regulations with ease. Discover essential compliance guidelines for the UK and US, including HIPAA, GDPR, and more. Protect patient data, avoid hefty fines, and build trust.

Blog

What are the Top Security Risks of Using Large Language Models (LLMs)?

Discover the hidden dangers of Large Language Models (LLMs). Learn how LLMs can expose sensitive information, and how to protect your organisation from these risks.

Blog

A Guide to Data Encryption for Enhanced Security

Discover how data encryption safeguards your sensitive information from cyber threats. Learn about encryption types, benefits, and challenges.

Blog

Is Notion Secure? A Guide to Common Security Risks and How to Mitigate Them

Concerned about data security in Notion? This guide explores common security risks and best practices to keep your information safe.

Blog

Understanding the Shared Responsibility Model for SaaS Applications

Unravel the complexities of cloud security with our guide to the shared responsibility model. Learn who's responsible for what when it comes to SaaS applications, and discover how to safeguard your data.

Blog

How to Get Organisational Buy-In from Leadership as a Data Security Expert

Struggling to secure executive buy-in for cybersecurity? Learn how to align security with business goals, overcome common challenges, and gain leadership support. Discover effective strategies to communicate the value of cybersecurity in business terms.

Blog

Selecting The Right Data Loss Prevention (DLP) Solution For Your Organisation: A Buyer’s Guide

Protect your business from data breaches with the right DLP solution. Learn how to choose the perfect DLP for your organisation and discover how Metomic can help you safeguard sensitive information.

Blog

3 Tips to Help Prevent Massive Data Breaches: A Lesson from Disney's Slack Channel Incident

Disney's recent Slack breach highlights the need for continuous monitoring, strict data retention policies, and effective DLP solutions. This incident, part of a broader trend, emphasises the importance of securing sensitive information in collaborative platforms.

Blog

How Secure Is Google Workspace? Understanding & Addressing Google Workspace Security Challenges

In this guide, we’ll explore common security risks found in Google Workspace and give you best practices that will keep your organisation’s sensitive data safe, secure, and out of the hands of the wrong people.

Blog

Avoiding Burnout: Strategies for Security Teams and CISOs

In this article, we take a look at the impact of burnout on CISOs and how it can be prevented by adopting strategies that limit the amount of stress placed on security leaders.

Blog

The Traits of an Effective CISO

Discover the 10 key traits of a successful CISO. Learn how to build a strong security team, manage costs, secure leadership buy-in, and more.

Blog

5 Tips for Managing Slack Guest Account Security

In this article, we discuss how to manage Slack guest account security effectively.

Blog

Top 3 Gen AI Security Risks and How to Manage Them

Generative AI offers vast potential but also security risks. Learn the top 3 security concerns and discover how to mitigate them with data privacy controls, model security practices, and ethical considerations.

Blog

What is SaaS?

Learn how Software as a Service (SaaS) benefits businesses with affordability, scalability, and easy access. Discover the top advantages of SaaS and key considerations for choosing the right solution for your organization.

Blog
5 Key Takeaways from Our Latest Webinar on Data Security and Compliance

5 Key Takeaways from Our Latest Webinar on the Risks of Google Drive

Here are five key takeaways from the webinar that shed light on the importance of balancing productivity and security when using Google Drive

Blog

Protecting PII: Five Essential Tips for Digital Environments

Learn 5 essential tips to protect Personally Identifiable Information (PII) in digital environments. Discover how a multi-layered approach can safeguard your business and customer data.

Blog

Preparing for the EU AI Act: What is it, how does it affect you, and what do you need to do to get ready?

Is your business ready for the new EU AI Act? Get 5 steps to prepare for regulations and build trust with customers.

Blog

What is ePHI? HIPAA requirements and how to protect it

In this article, we’ll look at what ePHI means, and how healthcare organisations can ensure it’s safeguarded.

Blog

How Can Organisations Keep up with New Regulations in the Healthcare Sector?

This guide explains the latest HIPAA updates and emerging trends in healthcare data security. Learn how to stay informed, prepare for new challenges, and invest in solutions like Metomic to ensure patient privacy and avoid hefty fines.

Blog
Implementing Human Centric Data Security Technology to Prevent Breaches

Implementing Human Centric Data Security Technology to Prevent Breaches

Metomic CEO Rich Vibert outlines the key measures businesses should take to prevent a data breach in the wake of the ransomware attack on Evolve Bank & Trust.

Blog

How Does GDPR Apply To Healthcare Organisations?

In this article, we delve into the specifics of GDPR compliance for healthcare entities, and take a look at the types of data that need protection, as well as the steps necessary to avoid hefty penalties.

Blog

7 Ways to Make your Security Team More Efficient & Productive

This article explores why efficiency matters in cybersecurity, the risks associated with inefficiency, and strategies to empower security teams to meet these challenges effectively.

Blog

Cyber Security Awareness Training Topics to Educate Your Employees

In this article, we'll explore the key topics that every cyber security awareness training program should cover. We'll also discuss how to tackle emerging threats like AI-driven attacks and the challenges of remote working environments through targeted training.

Blog

How to Keep Your Employees Motivated About Cyber Security

Without motivation, even the best teams can become complacent, which raises the risk of breaches. In this article we’ll explore effective strategies for your organisation to keep your cybersecurity team motivated.

Blog

A Guide to Shadow IT: Risks, Challenges, and Examples

In this article, we'll dive into what Shadow IT is, its risks, and how you can tackle its challenges in your organisation.

Blog

A Guide to Threat Analysis for Cyber Security

This article explores threat analysis in cybersecurity, explaining its importance, the different types of threats it can uncover, and how security teams can use it to improve their defenses.

Blog

HIPAA v HITECH v HITRUST: What are the Differences?

Let’s break down three key names in U.S. healthcare cybersecurity: HIPAA, HITECH and HITRUST. We’ll explain what they are, the differences between them, and how organisations can comply with them.

Blog

The Party's Over, Back to Work! The Hangover After the AI Party

In this article, we delve into the aftermath of the AI boom, examining the surge of public distrust, implementation hurdles, and the sobering realities faced by industries as they grapple with rushed adoption and ethical controversies.

Blog

Best Practices to Secure Sensitive Data in Large Scale Environments

If your organisation is a large-scale environment like healthcare or finance, how can you effectively secure sensitive data while ensuring compliance with data protection regulations?

Blog

Innovations and Trends in DLP and DSPM Technologies

Learn how modern DLP & DSPM software with AI & automation protects data, tackles insider threats, and integrates with existing security tools.

Blog

A Guide to AI Firewalls and How They Can Protect Your Data

AI firewalls, the evolutionary next phase of the firewall, are fast becoming essential tools for protecting your sensitive information from cyber threats. Find out all about them here.

Blog

Insider Threat vs. Insider Risk: Understanding the Differences

Here, you'll discover the key differences and similarities between two common phrases heard in the data security world: Insider threat and insider risk.

Blog

Understanding, Managing and Reducing Your Cloud Attack Surface

This article aims to guide you through the concept of cloud attack surfaces, highlight the challenges you might face, and offer effective strategies for securing your cloud environments.

Blog

Common Mistakes When Deploying Data Loss Prevention (DLP) in Your Organisation

In this article, we’ll explore the common mistakes that IT and Security teams make when deploying DLP in an organisation.

Blog

Navigating the New Dangers of AI in Communication Tools Like Slack

Let’s delve into AI integration, addressing a pressing issue: the ethical implications of data privacy, particularly in how Slack manages your information for AI training purposes.

Blog

What is DLP? Why a Modern DLP Solution Could Be Just What Your Organisation Needs

In this guide, we’ll dig deeper into what DLP involves, its benefits, and what the best practices are when it comes to implementing a DLP tool.

Blog

A Guide to Personally Identifiable Information (PII) Compliance, with Requirements and Checklist

In this article, we’ll explore the world of PII compliance, uncovering its significance, fundamental concepts, and practical strategies.

Blog

A Guide to Complying with the NYDFS Part 500

This article explores what NYDFS Part 500 means for financial institutions, and how to ensure your organisation complies.

Blog

A Guide to Complying with the CCPA

In this article, we'll break down what the CCPA means for businesses operating in California. We’ll explain the importance of complying, and how to start doing so.

Blog

The Impact of Artificial Intelligence on Healthcare Compliance

This article explores how Artificial Intelligence is revolutionising healthcare with improved diagnostic accuracy and patient care, whilst also highlighting the risks of data breaches and algorithmic bias, emphasising the importance of balancing AI's benefits with regulatory compliance.

Blog

Securing Our Communities: Managing Cyber Threats in an Era of Budget Constraints

Recent data breaches reveal local councils' digital vulnerabilities amid budget cuts, necessitating innovative cybersecurity approaches like Metomic's Human Firewall strategy to mitigate risks and safeguard sensitive data and public trust.

Blog

How to Train and Educate Staff on HIPAA Compliance and Security Awareness

This article helps healthcare organisations ensure robust data security through effective training while navigating the complexities of HIPAA compliance

Blog

Ensuring HIPAA Compliance in Cloud-Based Healthcare Systems

Safeguard patient data and ensure HIPAA compliance in cloud-based healthcare systems. Learn how to navigate the benefits and risks of cloud computing while prioritising data security.

Blog

Managing HIPAA Compliance with Third Parties

Here, we'll explore the unique challenges with managing HIPAA compliance with third-party entities and unveil practical strategies for mitigating risks associated with third-party relationships.

Blog

Making Microsoft Teams HIPAA Compliant

This article provides insights into making Microsoft Teams HIPAA compliant, offering guidance on assessing its suitability, implementing strategies for compliance, and leveraging solutions like Metomic to enhance security measures.

Blog
Navigating Data Protection Laws with Confidence: 6 Takeaways From Our Latest Webinar

Navigating Data Protection Laws with Confidence: 6 Takeaways From Our Latest Webinar

In our latest webinar, Metomic CEO Rich Vibert was joined by Sarah Jarman, VP Legal and Group DPO at Emplifi, and Kristy Gouldsmith, Data Protection, Privacy, and Cybersecurity Partner at Spencer West LLP to discuss how to navigate complex data protection laws.

Blog

Safeguarding Your Digital Footprint: Five Essentials for Interacting with AI

With Microsoft opening a new AI centre in London, and with the UK public's growing unease around AI, we explore 5 things you should never share with an AI Chatbot

Blog

Is Google Drive HIPAA Compliant?

Is Google Drive HIPAA compliant? Learn how to assess & achieve compliance with strong security & Metomic's solutions for healthcare organisations.

Blog
5 Questions with Legal Expert, Sarah Jarman

5 Questions with Legal Expert, Sarah Jarman

Sarah Jarman has over 10 years of extensive legal experience. We caught up with her to ask her five questions about the current compliance landscape, and the important legal issues facing organisations right now.

Blog

Is Slack HIPAA Compliant? A Guide for Healthcare Organisations

In this article, we explore Slack and its HIPAA compliance capabilities. We shed light on its status, limitations, and the essential considerations for any healthcare organisation aiming to take advantage of its benefits while also safeguarding patient data.

Blog

Future-Proofing Financial Data Security: Emerging Threats

Cyber threats evolve. This guide will provide you with the tools to safeguard financial data from the latest and emerging cutting-edge attacks.

Blog

A Comprehensive Guide to Fostering a Culture of Compliance in Healthcare

This comprehensive guide aims to equip IT and security teams with the knowledge and strategies necessary to foster a robust culture of compliance within their organisations.

Blog

Types of Data: Personal Data vs Sensitive Data - What's the Difference?

Learn about the key differences between two types of data 'personal data' and 'sensitive data' in this all-encompassing guide from Metomic.

Blog

What is Cloud Security Posture Management (CSPM)?

In this article, we’re going to dive into the fundamentals of CSPM, its necessity, benefits, and how organisations can leverage it to protect their data effectively.

Blog

How To Create a Solid Data Loss Prevention Strategy

Discover essential insights on Data Loss Prevention (DLP) strategies and leverage Metomic’s solutions to safeguard your organisation's data.

Blog

How to Detect and Protect Credit Card Exposure in the Cloud

In this article, we’ll explore the best ways for businesses to secure their customers’ credit card data.

Blog

How to See Which Pages in Notion Are Set to Public

In this article, we explore how to see which of your pages on the collaboration platform Notion are set to public, and what you can do about sensitive information stored on them.

Blog

Empty Threats: The Ineffectiveness of Banning TikTok for Data Security Purposes

In this article, we analyse the US Government's drive to try and ban TikTok over data security concerns, and we explore dissenting voices that feel the ban would be ineffectual 'theater,' designed to make politicians seem tough.

Blog

Metomic Culture: Onboarding - Unlocking Success from Day One

In this article, we’ll delve into the importance of a strong onboarding process, illustrating how it can empower employee experience and serve as the cornerstone for fostering a positive organisational culture, primed for success.

Blog

What’s the Difference Between Slack and Slack Enterprise for Security Teams?

Discover how Slack and Slack Enterprise differ in features, security, and cost. Learn which suits your business needs for effective collaboration.

Blog

Data Security for Financial Services: How Can FinTech Companies Protect Sensitive Data?

Learn why FinTechs are targeted by cyber hackers and how to protect sensitive customer and financial data. Discover top security measures to keep your financial organisation safe.

Blog