Michelle has been with Strike Graph even before it became Strike Graph and is currently responsible for all framework development within the Strike Graph product. With nearly 20 years of IT compliance experience, Michelle advocates a risk-based approach to data security and data privacy decisions and has deep subject matter expertise in building, operating, and auditing IT compliance programs. She has assisted organizations of different sizes in various industries, from Fortune 100 social media conglomerates to venture-backed start-ups, in various aspects of their GRC journies. Her framework expertise includes SOX (ICFRs and ITGCs), SOC 1, SOC 2, GDPR, CCPA, ISO 27001, CIS, and NIST CSF/800-53/800-171. Michelle is Certified in Risk and Information Systems Control’s (CRISC) and has a Masters in Accounting(MAcc). In a past life, she was a Certified Internal Auditor (CIA) and Certified Information Systems Auditor (CISA), Director of Internal Audit, and ran a consulting practice coaching organizations on GRC initiatives. On the weekends you can find her cheering on the Seattle Seawolves Rugby team, volunteering for Girl Scouts, or lost in a forest.