Catalog

This course provides a comprehensive introduction to security at Thoughtworks. Across five modules, you'll gain a clear understanding of Thoughtworks' security practices and protocols, learn how to use Generative AI tools safely and responsibly, and develop the knowledge and confidence to handle security events — making you an active part of the solution. You'll also explore what it means to foster a culture of shared security awareness, recognizing that every Thoughtworker plays a crucial role in protecting the organization, our clients, and each other.

The Security Awareness Training course consists of six modules. By the end of this course, learners will be able to identify and respond to phishing threats, secure Thoughtworks and client devices, and share files safely using the Principle of Least Privilege and secure cloud links. They will also learn to use AI tools compliantly in accordance with Thoughtworks' policies, recognize and report security incidents using the appropriate response plans, and apply best practices for keeping devices and data secure while working remotely or in public environments.

This course focuses on securing modern APIs by implementing robust authentication, fine-grained authorization, and comprehensive data protection strategies. Participants will learn to defend against common API threats—including those outlined in the OWASP API Security Top 10—by applying best practices such as token-based authentication (OAuth 2.0, JWT), role-based access control, rate limiting, encryption, and input validation. Through real-world scenarios and secure design principles, learners will gain the skills needed to build and maintain resilient APIs. Ideal for backend developers, DevOps teams, and security professionals working with cloud-native and distributed systems.

This course addresses the complexities of securing workloads and data across multiple cloud platforms, with a focus on Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). Participants will learn to identify and mitigate security risks unique to multi-cloud environments, including inconsistent configurations, identity sprawl, data visibility gaps, and compliance challenges. The course covers unified policy management, cross-platform monitoring, secure networking, and automation strategies to enforce consistent controls. Ideal for cloud architects, security engineers, and IT leaders responsible for designing and maintaining secure, scalable, and resilient multi-cloud architectures.

Welcome to the Time Management and Productivity Training Course, designed to help you take control of your schedule, reduce stress, and boost your daily efficiency. In this course, you’ll learn proven strategies for prioritizing tasks, setting realistic goals, minimizing distractions, and using tools to organize your time effectively. Whether you're juggling competing deadlines or striving for a better work-life balance, this training will equip you with practical techniques to stay focused, plan proactively, and make every minute count.

It’s a perennial dilemma: How do we make the most of the time we have? Time is both precious and fleeting, and many of us feel like there just aren’t enough hours in the day. This course will give you core strategies to tackle that problem.  First, you’ll learn the basic principles of time management, along with some symptoms that could uncover  poor uses of time. Then, you’ll discover how to track and analyze your time to boost productivity. Finally, you’ll get seven tips to start managing your time more effectively.

Maximizing Efficiency" course equips participants with proven strategies to take control of their time, prioritize effectively, and accomplish more with less stress. Learners will explore techniques such as goal setting, task prioritization, scheduling, and minimizing distractions to optimize their daily workflow. The course emphasizes aligning time use with personal and organizational goals, enabling participants to make deliberate choices that boost productivity and reduce overwhelm. Through practical tools and real-life applications, this course helps individuals build sustainable habits that enhance focus, increase efficiency, and drive consistent performance in a fast-paced work environment.

This course provides an in-depth introduction to the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and its application in strengthening organizational cybersecurity practices. Learners will explore the framework’s core functions—Identify, Protect, Detect, Respond, and Recover—and understand how to align them with risk management goals, regulatory requirements, and industry best practices. The course also covers implementation strategies, maturity modeling, and continuous improvement. Ideal for IT, security, and compliance professionals, this training empowers organizations to build resilient, standards-based cybersecurity programs.

Business travel comes with more than luggage—it brings cybersecurity risks too. In just 60 seconds, this video covers essential tips for protecting your devices on the go, from using VPNs to avoiding unsafe Wi-Fi and public USB ports. Whether you're flying across the country or around the world, stay secure every step of the way.

By the end of this training, you will be able to: Identify the most common workplace hazards, whether you work in an office or remotely Take practical steps to reduce risks in your working environment Know what to do in an emergency and how to report incidents Set up your workstation correctly to protect your physical health Understand your personal obligations under TrueLayer's health and safety framework This training applies to all TrueLayer employees globally, including those who are fully remote, hybrid, or office-based. Where guidance differs by working location, this is clearly indicated.

You just clicked a phishing test. Don't worry — this happens to the best of us. Let's take a look at what made that email suspicious so you can spot the real thing next time.

You just clicked a phishing test. Don't worry — this happens to the best of us. Let's take a look at what made that email suspicious so you can spot the real thing next time.

This course covers sensitive and potentially distressing topics If you are affected by any of these issues, consider who you might contact for support — for example, your manager, a colleague or your Employee Assistance Programme, if you have one. If you have any questions, please contact the People team.

You just clicked a phishing test. Don't worry — this happens to the best of us. Let's take a look at what made that email suspicious so you can spot the real thing next time.

As digital ecosystems grow in complexity, so do the specialized domains that protect them. In this course, Types of Cybersecurity, you’ll explore the core categories that form the backbone of modern cyber defense. Through scenario-driven learning and practical insights, you’ll examine key areas including network security, application security, cloud security, endpoint protection, and operational security. You’ll also gain a foundational understanding of emerging fields such as zero trust architecture and AI-driven threat detection. By the end of this training, you’ll be prepared to identify how different cybersecurity disciplines interconnect, evaluate their relevance to various risk scenarios, and apply this knowledge to build more comprehensive security strategies across personal and organizational environments.

In today's digital age, you must remain vigilant against a variety of cyber threats, and one such risk is the USB drop attack. In this course, "USB Drop Attacks: Why You Should NEVER Plug in a Found USB Drive," you will learn to effectively identify scenarios where these attacks might occur. You will develop the skills to recognize, report, and handle suspicious USB devices in your work environment. By leveraging security tools and implementing best practices, you will safeguard your data and protect your organization from the damaging consequences of unknown USB drives.

Not all USB drives are safe. In this quick video, learn the basics of USB security and why plugging in unknown devices can put your entire system at risk. From data theft to malware, discover how to use USBs safely and protect your organization.

In this course, USB Security: The Hidden Dangers of External Devices, you will explore the critical security risks posed by various USB devices and how they can impact your organization's network environment. By the end of this course, you will be equipped to implement effective procedures to securely connect and disconnect USB devices, ensuring the protection of sensitive data. You'll also learn how to identify unauthorized or infected USBs and follow essential company policies to prevent data breaches and uphold IT security protocols. Join us and gain the knowledge needed to safeguard your workplace against the hidden dangers of external devices.

Welcome to the Bias in Recruiting Training Course, designed to help hiring teams recognize and reduce unconscious bias in the recruitment process. This course explores key concepts such as implicit bias, color-blind racism, prejudice, and institutional discrimination, while also providing clarity on relevant employment laws. You’ll learn how bias impacts decision-making, understand the importance of both inherent and acquired diversity, and develop actionable strategies to build more inclusive hiring practices. Through reflection, legal awareness, and practical tools, this training empowers you to make equitable, informed choices that strengthen your organization’s culture and talent pipeline.

Welcome to the Understanding AI Training Course, designed to introduce you to the fundamentals of artificial intelligence and how it can be practically applied in a business setting. You’ll explore the difference between rules-based programming and machine learning, gain insight into generative AI tools like ChatGPT, and understand how AI systems learn, adapt, and create. This course also covers the transformative power of AI in areas such as automation, marketing, customer service, data analysis, and cybersecurity. By the end of this training, you’ll be equipped with a foundational understanding of AI and actionable strategies for responsibly integrating it into your daily work.

Artificial Intelligence (AI) is transforming the way we work, communicate, and solve problems—but understanding its foundations is key to using it responsibly and effectively. In this course, Understanding Artificial Intelligence, you’ll explore the core concepts, technologies, and ethical considerations that shape the AI landscape. Through real-world examples and interactive scenarios, you’ll gain insight into how AI systems are trained, the difference between machine learning and deep learning, and where AI is applied in everyday life and the workplace. You’ll also examine challenges such as bias, transparency, and data privacy. By the end of this training, you’ll be equipped with the knowledge to engage confidently with AI tools—empowering smarter, safer, and more informed decision-making in an AI-driven world.

Advances in technology have changed the way we live, and the way we do business. Our world is more connected than ever before. This brings huge opportunities and benefits, but it also brings risks. This course can help to understand these risks. At the conclusion of this course, you should have - • Gained an understanding of Cyber Security and how to stay cyber secure Duration - 10 minutes

Not all hackers wear hoodies in dark rooms. Cybercriminals come in many forms—from lone opportunists and organized crime groups to state-sponsored actors. Each has different motivations, methods, and targets. This course explores who cybercriminals are, what drives them, and how their goals shape the attacks organizations face. You’ll learn how motives like financial gain, espionage, disruption, or activism influence tactics ranging from phishing and ransomware to data theft and sabotage. By understanding the “why” behind attacks, you’ll be better prepared to recognize threats and respond effectively.

Cybersecurity can feel overwhelming—but frameworks help bring order to the chaos. Standards like NIST CSF and ISO 27001 provide structured approaches for managing risks, protecting data, and building trust. This course introduces the most widely used cybersecurity frameworks, showing how they guide organizations in strengthening defenses and meeting compliance requirements. You’ll learn what these frameworks are, how they differ, and why businesses adopt them. With practical examples, you’ll see how frameworks translate into real-world security practices and what role employees play in supporting them.

Welcome to the course Understanding DDOS Cyber Attacks, where you will embark on a journey to become proficient in network security. By the end of this course, you will be equipped to demonstrate the process of continuous monitoring of network traffic patterns, enabling you to set up and analyze network logs effectively. You will gain a thorough understanding of the critical role that continuous monitoring plays in spotting abnormal network traffic patterns, acting as an early warning system for potential DDOS attacks. This course will empower you with the knowledge and skills necessary to protect your network from these disruptive threats.

In "Understanding DORA Compliance," you'll delve into the critical aspects of the Digital Operational Resilience Act (DORA) and how it enhances operational resilience in financial institutions. By the end of this course, you'll be equipped to apply ICT risk management strategies that identify and mitigate cyber threats, ensuring your organization aligns with the DORA framework. You'll gain a comprehensive understanding of DORA's five core pillars: ICT Risk Management, Incident Reporting, Digital Operational Resilience Testing, Third-Party Risk Management, and Information Sharing, all crucial for maintaining robust cybersecurity measures.