Sherlock Cloud BackgroundSherlock Cloud Background

Secure Cloud Services

Sherlock Cloud Services excels in secure hosting and compliant data management for academic, government, and industry partners. Our team's dedication, extensive experience, and in-depth knowledge give our clients a competitive advantage. At Sherlock, we collaborate closely to develop superior cyberinfrastructure that not only meets but exceeds organizational needs.

End-To-END Compliance

The Sherlock Approach

Ensuring robust compliance in the modern landscape requires a comprehensive approach that covers every facet of an organization's operations. With the goal of achieving end-to-end compliance, our strategy leverages the NIST 800-53 (Mod) Framework, a recognized standard in cybersecurity and risk management.

Technical AND security controls

Our Tools and Services

System & Management Services

From designing an architecture, to deployment, and ongoing support, Sherlock manages the entire solution:

  • Access control
  • Network & firewall configuration
  • Encryption at rest & transit
  • Backup, recovery, & archiving
  • Certificate authority
  • System health monitoring
Sherlock Cloud Services Systems & Management Man Sitting on Computer in Front of Data Server

Security Services

Every solution receives a comprehensive security posture assessment and lifecycle plan:

  • Vulnerability & patch management
  • Log collection & analysis
  • Intrusion detection
  • Antivirus & malware protection
  • VPN, Web proxy and mail relay
  • Hardened system configuration
Sherlock Cloud Services Security Man Standing on Front of Security Icons on Laptop

Compliance & Audit Services

Speeds up your compliance maturity and lets experts
manage audits and compliance documentation:

  • Policies & procedures
  • SOC 2 Type 2, CMMC, FISMA
  • Incidence response & contingency plans
  • 3rd party audits
  • Information risk assessment
  • Governance, risk & compliance (GRC)
Sherlock Cloud Services Compliance & Audit Man Searching Web Computer with Magnifying Glass

Personnel Services

Our solutions are staffed with and supported with vetted U.S. persons compliant with regulatory requirements:

  • Identity & account management
  • User support and helpdesk
  • Proposal partnership (Co-PI)
  • Annual background checks
  • Account auditing
  • Bridge to other center expertise
Sherlock Cloud Services Personnel Three People Online at a Desk
leading software

Best of Class Enterprise Products

We utilize best of class security and systems management tools to operate our services. We leverage our academic identity to negotiate favorable licensing costs, which helps reduce the cost of operations.  

Cisco Icon
Linux Logo
Amazon AWS Icon
Microsoft Azure Icon

Compliance in the Cloud

Sherlock has leveraged public Cloud platforms to extend our HIPAA and NIST 800-53 certified services, ensuring secure processing, storage, and transmission of PHI for our clients. While public Cloud offerings are not fully compliant, Sherlock fills this gap by providing the necessary services on top of public Cloud resources, offering our customers end-to-end compliance.


Multi-Cloud Approach

As Sherlock has secured the trifecta of major public Cloud platforms included within the Sherlock offered solutions, customers can choose the public Cloud platform that best aligns with their organizational, regulatory and research needs.


Notable Service Inclusions

System Lifecycle Plans & Policies

Sherlock maintains a whole set of lifecycle documents that are updated annually. We also have policies and procedures that govern how the overall environment is managed and operated. Sherlock customers inherit these lifecycle documents and can share them with their sponsors as required. 

  • System Security Plan
  • Configuration Management Plan
  • Contingency Plan
  • Incident Response Plan
  • Information Security Risk Assessment
  • Policies & Procedures (19)
  • Rules of Behavior
  • Account Management

Regulatory Frameworks


  • MovedSherlockAWS and GCP accounts under Strategic BluMovedSherlock AWS and GCP accounts under Strategic Blue
  • Providescost savings on cloud resources, and recommendations on cost governance
  • Trackcosts specific to each project, service, etc.
  • LeveragingBeam and custom QuickSight dashboards for spend analysis, alerts, etc.