.svg)
Secure Cloud Services
Sherlock Cloud Services excels in secure hosting and compliant data management for academic, government, and industry partners. Our team's dedication, extensive experience, and in-depth knowledge give our clients a competitive advantage. At Sherlock, we collaborate closely to develop superior cyberinfrastructure that not only meets but exceeds organizational needs.
The Sherlock Approach
Ensuring robust compliance in the modern landscape requires a comprehensive approach that covers every facet of an organization's operations. With the goal of achieving end-to-end compliance, our strategy leverages the NIST 800-53 (Mod) Framework, a recognized standard in cybersecurity and risk management.
Our Tools and Services
System & Management Services
From designing an architecture, to deployment, and ongoing support, Sherlock manages the entire solution:
- Access control
- Network & firewall configuration
- Encryption at rest & transit
- Backup, recovery, & archiving
- Certificate authority
- System health monitoring
Security Services
Every solution receives a comprehensive security posture assessment and lifecycle plan:
- Vulnerability & patch management
- Log collection & analysis
- Intrusion detection
- Antivirus & malware protection
- VPN, Web proxy and mail relay
- Hardened system configuration
Compliance & Audit Services
Speeds up your compliance maturity and lets experts
manage audits and compliance documentation:
- Policies & procedures
- SOC 2 Type 2, CMMC, FISMA
- Incidence response & contingency plans
- 3rd party audits
- Information risk assessment
- Governance, risk & compliance (GRC)
Personnel Services
Our solutions are staffed with and supported with vetted U.S. persons compliant with regulatory requirements:
- Identity & account management
- User support and helpdesk
- Proposal partnership (Co-PI)
- Annual background checks
- Account auditing
- Bridge to other center expertise
Best of Class Enterprise Products
We utilize best of class security and systems management tools to operate our services. We leverage our academic identity to negotiate favorable licensing costs, which helps reduce the cost of operations.
Compliance in the Cloud
Sherlock has leveraged public Cloud platforms to extend our HIPAA and NIST 800-53 certified services, ensuring secure processing, storage, and transmission of PHI for our clients. While public Cloud offerings are not fully compliant, Sherlock fills this gap by providing the necessary services on top of public Cloud resources, offering our customers end-to-end compliance.
Multi-Cloud Approach
As Sherlock has secured the trifecta of major public Cloud platforms included within the Sherlock offered solutions, customers can choose the public Cloud platform that best aligns with their organizational, regulatory and research needs.
Notable Service Inclusions
& Policies
& Risk Assessments
& Visibility
System Lifecycle Plans & Policies
Sherlock maintains a whole set of lifecycle documents that are updated annually. We also have policies and procedures that govern how the overall environment is managed and operated. Sherlock customers inherit these lifecycle documents and can share them with their sponsors as required.
- System Security Plan
- Configuration Management Plan
- Contingency Plan
- Incident Response Plan
- Information Security Risk Assessment
- Policies & Procedures (19)
- Rules of Behavior
- Account Management
Regulatory Frameworks
Vendors
- MovedSherlockAWS and GCP accounts under Strategic BluMovedSherlock AWS and GCP accounts under Strategic Blue
- Providescost savings on cloud resources, and recommendations on cost governance
- Trackcosts specific to each project, service, etc.
- LeveragingBeam and custom QuickSight dashboards for spend analysis, alerts, etc.
