Penetration Testing vs. Vulnerability
Scanning |
I am often amazed at how a vulnerability scan is
sold as a penetration test.
On more than one occasion, I have audited a financial institution
that has a 300-page “penetration test” report that consists of
nothing but a listing of vulnerabilities discovered by some
vulnerability scanning tool.
Here’s one first clue: if your penetration test report is longer
than 10 pages, you’ve probably got a vulnerability scan.
Information Security & Privacy Regulatory
Compliance: The Red Flags Rules |
If you are a
financial institution or a creditor, you should already know about
the Red Flags Rules and how it affects your organization.
Even if you are not a financial institution, if you don't
know what Red Flags Rules are, you will want to keep on reading.
Many institutions
which would not normally be affected or regulated by the Federal
Trade Commission (FTC) are in fact now regulated by the FTC as it
relates to identity theft, based on the Red Flags Rules.
If you are deemed to be a creditor, you will be affected by
the Red Flags Rules. The
penalty for being out of compliance with these rules is ten times
more damaging than HIPAA, thus this is serious business.
Information Security & Privacy Regulatory
Compliance: Payment Card Industry (PCI) Data Security Standard |
The PCI security standards council has created a document, “10
Common Myths of PCI DSS,” which helps to highlight the main elements
involved in implementing any security program and which debunks many
of the myths surrounding information security.
https://www.pcisecuritystandards.org/pdfs/pciscc_ten_common_myths.pdf
The first myth this article discusses is the one that in information
security, there can be found a “silver bullet,” a single product
that can provide any institution with total coverage in terms of
their information security. Unfortunately, this silver bullet does
not exist. Instead, when considering one’s security and the
procedures, rules or devices which need to be implemented, consider
them as a part of a holistic security system designed to protect the
institution at every exposure point.
Information Security & Privacy Regulatory
Compliance: Defense Industries – You Don’t Have to Be Faster Than
Bear… | When reviewing
information security strategies, you can learn a lot from the
Department of Defense (DoD) and how it does things. There is no
doubt that the DoD has a genuine and defined threat to their
information, even their unclassified information, and examining how
they structure their security profile might help inform your
company’s efforts.
The DoD administers the National Industrial Security
Program to help defense contractors secure the information they were
provided. This article examines how defense contractors are expected
to handle and secure unclassified documents.
Classified security is beyond the scope of this article.
Information Security & Privacy Regulatory
Compliance: High-Tech
| First, if you’re reading this, let me say “thank you.” I run into
so many high tech firms that have not even considered information
security, until it is too late that is. It’s enough to make a grown
man cry. Or write an article about it!
Second, let me assure you that there is a structure that is
measurable and concrete and that can provide your firm a measure of
protection vastly superior to the current method of applying
whatever security add-ons vendors choose to provide.
Information Security & Privacy Regulatory
Compliance: NIST Support for HIPAA
|
The
National Institute of Standards and Technology (NIST) has done
something wonderful with Health Insurance Portability and
Accountability Act (HIPAA) security standards: they have made them
easier to understand!
Information Security & Privacy Regulatory
Compliance: The Gramm-Leach-Bliley Act |
As any banker will tell us, theirs
is a heavily regulated industry. With regulations from A to Z and
then some, banks spend up to two out of every three operational
dollars on meeting regulatory requirements. Think of it this way:
banks and credit unions are a national resource with regulatory
safeguards that virtually require them to be able to survive a
nuclear attack. With that as our yardstick, how does our business
continuity plan compare?
Information Security & Privacy Regulatory
Compliance: What Do We Need to Know?
| This is the first of a series of
white papers that will cover issues related to Information Security
& Privacy Regulatory compliance. This is an effort on the part of
TNS to demystify the issues regarding what information security &
privacy regulations cover, to what level of detail, what you need to
know to be in compliance with them, and what benefits and risks are
involved. Think your organization’s
information security and privacy are not regulated? Think again!
The Wild World of Wi-Fi and Your Laptop
|
Wi-Fi networks give users the
freedom to access the Internet just about anywhere – from home, the
offices, or local neighborhood businesses, even sometimes parks and
other outdoor spaces. However, with this accessibility comes
risk. My advice when it comes to using Wi-Fi networks is this
(from the movie “Body of Lies”) – “Trust no one, deceive everyone.”
Sustainable Information Technology
Series – Server Room & Data Center Setup
| The proper set up of a
server room is certainly not on the top of most small businesses
lists of mission-critical issues, although perhaps it should be.
Over the years, we have seen many server rooms and data centers,
some good and some are not so good. (The worst we’ve seen was
sharing space with a men’s room!)
What
most surprised us was seeing how some medium and large businesses
operate their server rooms and data centers. Some may appear to be
well designed and maintained, but this façade is quickly revealed
when the power or HVAC fails. Even the best-designed data centers
that follow all best practices have failed, despite all their
built-in protections. And some have failed repeatedly over the
course of a few months.
Sustainable Information Technology Series –
The Philosophy
| Why is it so difficult to run
Information Technology (IT) with little or no issues? To create an
IT environment that is revered for its innovation rather than for
its ability to recover from failure?
Many IT Departments and many of the
people who work and manage them qualify as workaholics. They’re
working just to work. For a workaholic, a large part of the recovery
process is to recognize the issue and to work smarter not harder.
One thing that can be an “enabler” is the illusion of dedication. In
reality, often those appear to be very dedicated are not actually so
much dedicated to getting things done as to being at work, appearing
to be responsible for and accomplishing highly important things.
More Details

Service
Business Solution | Having provided countless network and web based business
solutions on client/server and other database standards for our clients over the
years; we pride ourselves on our ability to integrate quality solutions
including accounting, resource management, manufacturing, contact management and
numerous other applications.
Security | Security
is one of the most neglected areas of network system. A secured network
system should be well protected from natural disasters, computer hackers and
human errors.
Outsourcing |
Since 1991 our Outsourcing Agreements have been tailored to your specific
service and support needs. We provide different levels of service and support
agreements for our clients.
Maintenance |
Since 1991 our Maintenance Agreements have been tailored to your specific
service and support needs. We provide different levels of service and support
agreements for our clients.
Service & Support
Operation Center (SSOC) | Service & Support Operation Center (SSOC) is a
24x7x365 real-time network monitor and management operation center. It is
designed with many years of hard earned field experiences and state of art
technologies.
More Details

Support
Discussion List | We hope that you find the time you spend in Triware Networld
Systems, L.L.C. (TNS) community Discussion Lists to be useful and
fun. This Discussion Lists forum is set up for anyone who is
interested in sharing IT related information, know-how and
experience with each other and helping each other solving real world
issues.
More Details

Client
Triware Networld
Systems welcomes the newest clients to join our more than 250 client
base:
Endwave
Corporation was originally incorporated in California in 1991 as
Endgate Corporation and subsequently re-incorporated in Delaware in
1995. Endgate was focused on the development and manufacture of
millimeter wave circuits and functional modules. The core vision
revolved around developing unique ways to cost-effectively produce
these very high frequency and historically labor intensive circuits.
In 2000, we merged with TRW Milliwave, Inc. and changed our name
from Endgate to Endwave Corporation. On October 17, 2000, we
successfully completed the IPO of our common stock, resulting in a
listing on the NASDAQ exchange under the symbol ENWV.
As the company has grown, we have continually focused on bringing
new technologies forward and refining our manufacturing practices
with the goal of moving very high frequency millimeter wave
technology from the lab to practical products. Through the years we
have worked with many industry leading OEMs to develop superior
systems and introduced millimeter wave technology into new
applications. Today, our main focus is the development and
production of millimeter wave modules and devices used in
communication systems throughout the world. Endwave is recognized as
a clear technology leader in this field and we have introduced many
industry firsts in both technology and manufacturing.
When it comes to efficiency and value of running its IT operations.
Endwave (which founded at the same year as TNS) outsources their
entire World-Wide IT infrastructure operations in six locations
including their manufacture site to TNS.
Cogent Solutions,
Inc.
| CSI provides IT services to
its clients in San Francisco Bay Area.
Mission San
Francisco Federal Credit Union |
Mission SF Federal Credit Union is a federally-chartered nonprofit
501(c)(1) community development credit union that primarily serves
low and moderate-income communities in San Francisco. Mission SF
Federal Credit Union was chartered in 1971 and is organized under
strict regulatory laws that are monitored and enforced by the
National Credit Union Administration (NCUA), an agency of the United
States Government. As a certified Community Development Financial
Institution, or CDFI, Mission SF’s purpose has remained unchanged:
to encourage fiscal literacy, asset building, and credit that
contributes to the individual, commercial, and housing development
needs of this predominantly low-income and underserved community.
NetDeposit, LLC |
NetDeposit enables businesses to streamline their revenue collection
and management with proven payment technologies. Through its three
solutions groups — Financial Services, Merchant, and Healthcare —
NetDeposit is the first payments company to deliver comprehensive
payment products and services focused on the unique needs of
businesses within multiple markets.
S.H. Silver Company, Inc. | Since 1980, S.H. Silver Company has
been acquiring some of the finest estate jewelry in the world and
designing some of the most exquisite custom pieces you will find
anywhere. The collection of S.H. Silver Company includes Edwardian,
Victorian, Art Deco, Art Nouveau, and more recent 'Retro' pieces.
Signed and period pieces are the company's specialty and many are
from prestigious jewelry houses, including such revered names as
Cartier, Van Cleef & Arpels, Bulgari, Tiffany & Co., Harry Winston
and Patek Philippe.
Exquisitely crafted in platinum and 18 karat gold, using rare and
valuable gems like Burmese rubies, Kashmir sapphires, old mine
Colombian emeralds, and fancy colored and high-quality white
diamonds, S.H Silver Company pieces are exceptional in quality and
extraordinary in style.
S.H. Silver Company is the exclusive estate jewelry purveyor in the
greater Northern California area with offices in Menlo Park and San
Francisco. Affiliate offices are located in Philadelphia, Beverly
Hills, New York, Geneva and Hong Kong.
Photonera Corporation | Photonera designs, develops and
manufactures advanced semiconductor laser transmitters and receivers
using advanced photonic integration technology.
Zouves Fertility Center | In December of 1999, Dr. Zouves
realized a dream with the establishment of Zouves Fertility Center.
Believing that age, marital status, relationship arrangement or
financial situation should not limit anyone from being treated; Dr.
Zouves and his team provide the latest treatments, with the most
technologically advanced techniques, in his state-of-the-art
facility.
Infertility affects 6.1 million Americans. At some point, one out of
every six couples will have a problem with infertility. However,
advances in assisted reproductive technology (ART) have made it
possible for the vast majority of couples who have been diagnosed
with infertility to fulfill thier dreams of having a baby.
By the time a couple walks through the door at Zouves Fertility
Center and meets Dr. Zouves, they have usually been through the
fertility medicine mill. Many have been told that there is no hope,
that they just can’t have children. Offering a unique combination of
hope, compassion, and cutting-edge technology, Dr. Zouves changes
that for many of his patients. They often leave his care with their
dreams fulfilled, expecting one child or more.
When
it comes to IT solutions such integrated PBX, VoIP and on-going maintenance,
Zouves Fertility Center turns to TNS
for our experience and our advanced SSOC services.
InfoVista
Technology Group | InfoVista Technology Group is a Global
Consulting and Information Technology Services Corporation based in
California with presence in India, UK and Middle East. TNS was
brought in by the referral of AT&T to assist in converting their PBX
to use latest AT&T's product and services.
The AME Group
| The AME Group brings together decades of experience in Worker's
Compensation examinations with a remarkable breadth of
subspecialties. Their goal is to provide comprehensive,
authoritative and fair medical-legal reports to both sides in a
disputed worker's compensation case in a timely manner. When
it comes to IT solutions such integrated PBX, VoIP, firewall, WAN
connectivity and on-going maintenance, The AME Group turns to TNS
for our experience and our advanced SSOC services.
Alameda
Contra-Costa Transit District | AC Transit is an innovative,
modern bus system, owned by the public of the East Bay. Its family
tree dates back to 1869, the year America's two coasts were joined
by transcontinental rail. In that year, AC Transit's first
predecessor began carrying passengers from the foot of Broadway
through burgeoning Oakland in a horse-drawn rail car.
Symantec
Corporation | Symantec is a global leader in infrastructure
software, enabling businesses and consumers to have confidence in a
connected world. The company helps customers protect their
infrastructure, information and interactions by delivering software
and services that address risks to security, availability,
compliance and performance. Headquartered in Cupertino, Calif.,
Symantec has operations in more than 40 countries.
More Details

News Release
2009-12-01 --
Triware Networld
Systems Announces Completion of IT Network Infrastructure for
Crystal Springs Upland Schools |
Triware Networld to Provide On-going Service and Support, On-site IT
Outsourcing and Strategic Assistance to Position School for its
Future IT Challenges.
2008-06-24 --
Triware Networld
Systems Now Offers CORE IMPACT – Industry’s Most Comprehensive
Security Assessment Product – To Clients |
Agreement Adds Award-Winning Security Product to Triware’s IT
Network Security Practices and Overall Service & Support Offerings.
2007-06-27 --
Triware Networld
Systems Partners with Agility Recovery Solutions Offering Disaster
Recovery and Business Continuity Services to Clients |
Partnership Creates new Triware IT Service & Support Package
Combining Premier IT Network Service & Support with Disaster
Recovery Coverage.
2006-09-21 --
Triware Networld
Systems Announces Completion Of IT Network Infrastructure For San
Francisco Conservatory Of Music’s (SFCM) New Campus |
SFCM’s New Multi-Media Ready Network Uses State-of-the-Art VLAN and
Positions the School for Future IT Service Expansion.
2006-05-22 --
Triware Networld
Systems Donates Network Services To Non-Profit Family Resource
Center Setting Up Microsoft Small Business Server & Cisco Network |
Rio Vista CARE, Inc. Enhances Productivity with New Microsoft
Exchange Email Server & Cisco Wireless Network Set up and Maintained
by Triware Networld Systems.
2006-03-01 --
Triware Networld
Systems, L.L.C. Announces Plans For New Service & Support Operation
Center (SSOC) Features As It Celebrates 15th Anniversary |
Company announces plans for new Microsoft CRM integration for its SSOC
version 2.0 expected summer of 2006.
2006-02-13 --
Triware Networld
Systems, L.L.C. Announces Completion of IT Security Network for New
San Jose Credit Union Branch |
Installation links newly opened branch with credit union
headquarters providing redundant secure data network and remote
backup storage.
More Details

In The Press
2009-12-01 --
Triware Networld
Systems Announces Completion of IT Network Infrastructure for
Crystal Springs Upland Schools |
Triware Networld to Provide On-going Service and Support, On-site IT
Outsourcing and Strategic Assistance to Position School for its
Future IT Challenges.
2008-12-05 --
Decoding
Enterprise Email & Communications Needs |
SMES rely on increasingly high-tech modes of communication to stay
competitive. Email, IM, VoIP, and smart phones add functionality to
an organization, but they also create additional challenges for the
IT departments that must support and provide them. In order to apply
multiple communications successfully, an enterprise must know what
it needs, acquire the right technologies and services, and keep the
devices secure and compliant.
2008-10-31 --
Cloud Computing
Services | "I see
this as a natural evolution of what has been happening for the past
20 years," said Benson Yeung, senior partner for Triware Networld
Systems, a systems integrator in Santa Clara, Calif., that counts
Hewlett-Packard, IBM, Microsoft and VMware among its technology
partners. "The cloud is nothing more than an environment that
encompasses the LAN, the WAN, the extranet, the intranet."
2008-06-24 --
Triware Networld
Systems Now Offers CORE IMPACT – Industry’s Most Comprehensive
Security Assessment Product – To Clients |
Agreement Adds Award-Winning Security Product to Triware’s IT
Network Security Practices and Overall Service & Support Offerings.
2007-06-27 --
Triware Networld
Systems Partners with Agility Recovery Solutions Offering Disaster
Recovery and Business Continuity Services to Clients |
Partnership Creates new Triware IT Service & Support Package
Combining Premier IT Network Service & Support with Disaster
Recovery Coverage.
2006-09-21 --
Triware Networld
Systems Announces Completion Of IT Network Infrastructure For San
Francisco Conservatory Of Music’s (SFCM) New Campus |
SFCM’s New Multi-Media Ready Network Uses State-of-the-Art VLAN and
Positions the School for Future IT Service Expansion.
2006-05-22 --
Triware Networld
Systems Donates Network Services To Non-Profit Family Resource
Center Setting Up Microsoft Small Business Server & Cisco Network |
Rio Vista CARE, Inc. Enhances Productivity with New Microsoft
Exchange Email Server & Cisco Wireless Network Set up and Maintained
by Triware Networld Systems.
2006-03-01 --
Triware Networld
Systems, L.L.C. Announces Plans For New Service & Support Operation
Center (SSOC) Features As It Celebrates 15th Anniversary |
Company announces plans for new Microsoft CRM integration for its SSOC
version 2.0 expected summer of 2006.
2006-02-13 --
Triware Networld
Systems, L.L.C. Announces Completion of IT Security Network for New
San Jose Credit Union Branch |
Installation links newly opened branch with credit union
headquarters providing redundant secure data network and remote
backup storage.
More Details

Back To Top