# Jeff Willinger

Jeff Willinger works with organizations on Microsoft technology at Heartland Business Systems (HBS), focusing on Microsoft 365, Copilot and AI, security, Power Platform, and other Microsoft business tools. Their work includes helping businesses plan AI governance and adoption.

- Profile: https://b2binfluencer.marketing/creators/jeff-willinger/
- LinkedIn: https://www.linkedin.com/in/jeffwillinger
- LinkedIn followers: 25,146
- Topics: artificial-intelligence, cybersecurity, ai-governance, digital-transformation
- Based on 10 dated posts, latest 2026-09-16

## Summary

They are most useful for practical Microsoft Copilot adoption, governance, security, and AI Center of Excellence guidance.

- Best for: Fits Microsoft solutions integrators running enterprise Copilot governance and adoption campaigns.
- Not for: Does not fit intranet, employee experience, HR, or internal communications culture campaigns.
- Check first: Ask for LinkedIn follower analytics and recent engagement on Copilot governance posts.

### Takeaways

- A 90-day Copilot Center of Excellence addressed inconsistent use and unclear ownership.
- Reported outcomes: proposal time down 28%, executive prep down 35%, 14 workflows automated.
- AI governance combines data governance, identity and access, risk and compliance, accountability.

## Main ideas

- **AI governance is four jobs, not one**: Willinger’s central claim is that AI governance is not a single artifact or compliance checkbox. It comprises data governance, identity and access, risk and compliance, and accountability; skip any one, and the rest falls apart. In practice, a single tool or policy will not fix an AI rollout. The disciplines have to work together, starting with a clear view of the data, risks, and gaps.
- **Copilot licenses are not the transformation; a Center of Excellence is**: Willinger says the common failure is deploying Copilot widely without anyone owning the strategy, leaving usage uneven and returns unmeasurable. They recommend a phased Center of Excellence covering vision tied to business priorities, infrastructure readiness, policy and guardrails, role-based training, a business/IT cadence, and usage analytics. Their summary: deploying AI without a Center of Excellence is piloting, not transforming.
- **Security should start with business goals, and a risk assessment is only worth the decisions it triggers**: Willinger treats cybersecurity as table stakes and says reacting is not a strategy. Their sequence is deliberate: understand business goals, analyze the threat landscape, find the gaps, prioritize, then execute. A risk assessment that is prepared, shared, and filed without changing decisions has failed. They also call third-party risk the biggest blind spot: vendor access, weak service-level agreements, and absent governance quietly create exposure.
- **Data loss prevention has a new job covering AI prompts and AI output**: Willinger’s most specific technical position is that data loss prevention must keep sensitive information out of AI prompts and treat AI-generated output as governed data from the moment it is created. That shifts DLP from an outbound data-exfiltration control to a safeguard within Copilot and generative-AI workflows.
- **The effort is concentrated in the Microsoft partner channel and co-sell motion**: Willinger’s priorities are Microsoft-shaped: Modern Work, Microsoft 365, Copilot, AI, Power Platform, Dynamics, and security, with an explicit focus on building co-sell opportunities with Microsoft. They describe more than 20 years across SharePoint, intranets, digital transformation, sales, partnerships, consulting, and Microsoft MVP years as converging on this Microsoft-centered role.

## Work to read

- [From Experiment to Enterprise: a 90-day AI Center of Excellence for Microsoft 365 Copilot](https://www.linkedin.com/posts/jeffwillinger_microsoft365-copilot-aigovernance-activity-7434613599685341184-aGPY)
- [Secure Iowa conference recap: risk assessment, third-party risk, and AI governance](https://www.linkedin.com/posts/jeffwillinger_secureiowa-cybersecurity-microsoft-activity-7506015993203281920-957S)
- [Joining Heartland Business Systems: what Willinger does now](https://www.linkedin.com/posts/jeffwillinger_newjob-heartlandbusinesssystems-hbs-activity-7498016397923405825-soW-)

## Brand relationships

- **Heartland Business Systems** (employment)
- **Microsoft** (mention)

## Partnerships

Jeff Willinger is a specialized consultant and representative of Heartland Business Systems (HBS), guiding large enterprises through complex technology adoption and digital transformation. Their expertise centers on the Microsoft ecosystem, particularly Microsoft 365, AI, Copilot and Power Platform. Their engagements bridge technology implementation and measurable business value, often through structured governance frameworks such as an AI Center of Excellence to promote consistent, strategic use of enterprise tools. Their work includes developing modern-work strategies, strengthening cybersecurity against evolving threats and identifying co-selling opportunities within the Microsoft community.

## Alternatives

- John O'Donnell: For the same enterprise Copilot governance and adoption webinar, consider John O'Donnell if the integrator wants to emphasize Microsoft partnership strategy and the practical modernization of CRM and ERP estates. A post about Dynamics 365 Activate frames AI as a way to assess existing customizations and usage before migration or modernization, which could support a session for organizations connecting Copilot plans to broader business-app changes.
- E.C. Scherer-Malone: Choose E.C. Scherer-Malone if the webinar's main need is a focused, practitioner-level discussion of Microsoft Purview, sensitivity labels, and data protection foundations that affect Copilot readiness. The posts explain why labels organized by data type can become hard to use and scale, and why a proliferation of DLP policies may signal a problem with the programme rather than the technology.
- Arvind Suthar: Choose Arvind Suthar if the integrator needs the session anchored in GCC High, CMMC, or federal-contractor security decisions. The posts describe a detailed Securing GCC High resource, including CMMC control mappings, security hygiene, assessment checks, and preparation of data before enabling Copilot in GCC High. That is a closer match for an audience facing those specific compliance and deployment constraints.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/