Robert L.

Security isn’t a checkbox — it’s architecture. Unapproved file-sharing apps and outdated MFT platforms quietly introduce real risk. When compliance gaps surface under frameworks like HIPAA or GDPR, the financial and reputational impact can be massive. A better model? Deploy SFTP inside your own cloud environment. Keep data in your tenant. Maintain full audit logs, strong encryption, granular access controls, and native integration across AWS, Azure, or Google Cloud. When file transfer lives inside your infrastructure — not outside of it — compliance becomes operational, not reactive. #ThornTechnologies

1

Many customers in the Federal space have complex disparate data across focus areas. Decisions are driven based on combining data sources, and making those decisions at the data level can help drive faster and more accurate answers for downstream applications and LLMs. In this blog post, Seth M. explores how "data gravity"—the increasing difficulty and cost of moving large datasets—exacerbates challenges, where applying complex business rules often leads to latency and infrastructure strain. To counter this, the Seth highlights an integrated approach using Corticon.js for decision authoring and MarkLogic as a data hub. Corticon.js empowers business analysts to build decision logic via intuitive tools like Corticon.js Studio: defining vocabularies from schemas, crafting rulesheets for conditional logic, sequencing via ruleflows, and validating with ruletests. This compiles into portable JavaScript for seamless deployment. MarkLogic complements this by ingesting data through Flux and triggering inline evaluations on document arrival, enriching records with decisions, audit messages, and traces—without any data movement. This preserves lineage, boosts throughput, and ensures a single source of truth. Key benefits include transparent, auditable decisions for compliance; reduced costs from eliminating data transfers; and enhanced efficiency for sectors like public programs (e.g., automating eligibility and claims). For LLMs and apps, an explainability dashboard visualizes policies and traces, while an AI-in-the-loop chatbot leverages Retrieval-Augmented Generation from MarkLogic to deliver grounded, context-rich responses. Check out the blog post here: https://lnkd.in/eEkHUZ7K #DataGravity #DecisionIntelligence #FederalIT #DataManagement #MarkLogic #Corticon #BusinessRules #GovTech #DataHub #RAG #AIinGovernment #Compliance #LowCode #PublicSector

10

📰 Next Phase of GSA’s #OASIS+ Contract Enabling Procurement Consolidation through Expanded and Improved Offerings 🔔 #OASIS+ enters Phase II: Expanding opportunities and continuously open with 13 domains. 💡 The program plans to open all solicitations continuously for proposal submissions on or about January 12, 2026. As the OASIS+ team finalizes preparations to launch Phase II, interested vendors are encouraged to monitor the OASIS+ Interact Community forum for additional announcements. 💡 Questions already awarded contractors may have regarding timelines for contract modifications, and required actions will be addressed in the near future. Also, the program will share draft scorecards for all the domains tentatively scheduled for mid-December and prior to re-opening the solicitations. The official solicitation amendments will be posted on SAM.gov, gsa.gov/oasis-plus and GSA’s OASIS+ Interact Community forum. 📰 WASHINGTON – Today, the U.S. General Services Administration (GSA) announced the launch of OASIS+ Phase II, advancing its next‑generation, governmentwide professional services contract program to further streamline procurement and consolidate buying. With this expansion, OASIS+ will be continuously open across 13 combined total service domains. Phase II adds five new domains to all six OASIS+ contracts, creating more pathways for agencies to access integrated, best‑in‑class services and for industry partners to compete. “GSA continues to deliver on President Trump’s priority to streamline and consolidate federal procurement to deliver savings to American taxpayers and improve the buying experience for federal agencies,” said FAS Commissioner Josh Gruenbaum. “This expansion provides federal agencies with a broader range of comprehensive professional service solutions and creates new opportunities for qualified industry partners.” This new phase ensures the program's compliance with Executive Order 14240, “Eliminating Waste and Saving Taxpayer Dollars by Consolidating Procurement,” and increases opportunities for our industry partners to provide more comprehensive solutions for our federal agency customers. This expansion is a direct response to extensive market research and valuable feedback from our federal and industry partners. Through in-depth spend analysis, customer engagement, and a formal Request for Information (RFI) that was posted on June 17, 2025, GSA identified critical service areas that represent a significant portion of unmanaged government spending. The 13 total services offerings and competition for our customers and opportunities for vendors across OASIS+ domains are as follows: **Technical and Engineering **Research and Development **Management and Advisory **Environmental **Intelligence Services **Enterprise Solutions **Facilities Services **Logistics **Business Administration (New!) **Financial Services (New!) **Human Capital (New!) **Marketing and Public Relations (New!) **Social Services (New!) #GOVCON

35

3 Comments

🎯 Free Compliance Alignment — without the nonsense. Ever seen a compliance firm drop a 200-page “scope” doc that tells you everything you don’t need — just to run up the bill? Yeah… we’re not those guys. At Iron City IT Advisors , they take a straight-shooting, in-depth approach: ✅ Keep it in scope. ✅ Cut the fluff. ✅ Build something that actually fits your environment — not a generic checkbox factory. So we made something useful — and yep, it’s free (like actually free): 🚀 SOC 2 + NIST CSF Alignment Toolkit It’s a unified mapping where every SOC 2 Trust Services Criterion (CC1–CC9) ties directly to NIST CSF 2.0 controls — giving you one defensible, audit-ready playbook. You’ll get: 📘 A full SOC 2 → NIST CSF crosswalk ⚙️ Practical control examples you can use today 🧭 GRC implementation guidance 📊 Market insights and compliance trends Grab it here → https://lnkd.in/gdWNw52v Because good compliance doesn’t have to feel like punishment. #Cybersecurity #SOC2 #NISTCSF #Compliance #vCISO #GRC #AuditReady #IronCityITAdvisors #SecurityLeadership

4

2 Comments

I’ve seen firsthand how disruptive downtime can be for SMBs. Our mission at Haselkorn, Inc is simple: keep New England businesses secure, connected, and moving forward.

3