When the findings pile up and resources are limited, deciding where to start matters. Heritage Assurance Partners helps you make that call—and put a practical plan behind it.
Woman & veteran owned · Based in Central Ohio
Michelle’s experience includes leadership and service at
For leaders building a program, strengthening an existing one, or working through a specific risk decision.
Make the program easier to run—and the risk easier to explain.
Clarify responsibilities, assess gaps, and focus effort on the issues that matter to your business. Turn findings into priorities that technology teams and leadership can work through together.
Work may include: risk assessments, program reviews, remediation priorities, and executive reporting.
Discuss your program ↗Look beyond the questionnaire to the dependency behind it.
Understand which vendors matter most, what access or data they hold, and where additional assurance is needed. Build oversight that reflects how each relationship supports your business.
Work may include: vendor tiering, assessment reviews, escalation criteria, and ongoing oversight.
Discuss your vendor risks ↗Bring a seasoned perspective to a difficult decision.
Work through control gaps, customer assurance requests, and competing priorities. Get help translating requirements into clear actions, with responsibilities and evidence your team can maintain.
Work may include: control design, readiness reviews, leadership briefings, and risk decision support.
Talk through the challenge ↗Select a situation to see how we would frame the conversation. The scope follows the problem you need to solve.
Michelle has led cybersecurity and technology risk programs, worked alongside application and infrastructure teams, and presented risk to executives and boards. She understands the pressure to keep the business moving while addressing what could go wrong.
At Heritage Assurance Partners, she brings that experience to organizations that need practical help with governance, third-party risk, and security decisions. The work takes account of your people, resources, and business priorities.
At Aon, Michelle led cybersecurity and technology risk management, including enterprise GRC and third-party risk programs.
Her JPMorgan Chase experience spans technology risk, cybersecurity oversight, security operations, and technology delivery.
Her career began in the U.S. Air Force and developed through military, government contracting, and corporate environments.
Practical conversations for business owners, leadership teams, and the people doing the work.
A discussion of everyday decisions that affect business resilience: access to accounts, suspicious requests, sensitive information, and how employees report a concern. Includes how AI can make impersonation and deceptive messages more convincing.
Focus: Help people identify the next action they can take—and the questions their business needs to answer.
Ask about a session ↗Work through how risk reporting supports decisions about investment, remediation, and acceptance. Explore the questions leaders should ask when the information is incomplete and the tradeoffs are real.
Focus: A clearer discussion of business consequences, options, accountability, and the decision being requested.
Discuss an executive session ↗Use a practical scenario to move from findings to priorities. Examine what matters most, where evidence is missing, who should own each action, and how to communicate the recommendation.
Focus: Practice a repeatable way to turn assessment results into a plan the team can explain and maintain.
Plan a team workshop ↗Session scope, format, and length are agreed around your audience and goals.
What prompted the conversation? What needs to change? We begin with your priorities, constraints, and the people involved.
Define the questions to answer, the deliverables, and the support you need. Set scope, timing, and fees before the engagement begins.
Work through recommendations with your team so responsibilities, decisions, and follow-up are clear.
A vendor decision, a growing list of findings, a customer requirement, or a team that needs training—tell Michelle where you need help.
hello@heritageassurancepartners.comYou’re welcome to email directly, or use the fields to prepare your message.