Norman Marks
CONTRIBUTING AUTHOR
San Francisco
COVERS
GRC, Records Managment, Information Management
CONNECT
Norman Marks, CPA, CRMA is an evangelist for “better run business,” focusing on corporate governance, risk management, internal audit, enterprise performance, and the value of information. He is also a mentor to individuals and organizations around the world, the author of World-Class Risk Management and publishes regularly on his own blog.
Norman was the chief audit executive of major global corporations for 20 years and is a globally-recognized thought leader in the professions of internal auditing and risk management. In addition, he has served as chief risk officer, compliance officer, and ethics officer, and managed what would now be called the IT governance function (information security, contingency planning, methodologies, standards, etc.) He ran the Sarbanes-Oxley Section 404 (SOX) programs and investigation units at several companies.
He is the author of the Institute of Internal Auditors’ “Minimize Costs & Increase the Value of Your Sarbanes-Oxley 404 Program” (previously published as “Sarbanes-Oxley Section 404: A Guide for Management by Internal Control Practitioners”), which has been described as “the best Sarbanes-Oxley 404 guide out there for management”. Norman is a member of the review boards of several audit and risk management publications (including the magazines of ISACA and the IIA), a frequent speaker internationally, the author of several award-winning articles, and a prolific blogger about better run business (consistently rating as one of the top global influencers in social media on the topics of GRC, internal audit, risk management, and governance).
Norman was profiled in publications of the AICPA and the IIA as an innovative and successful internal auditing leader. He has also been honored as a Fellow of the Open Compliance and Ethics Group for his GRC thought leadership, and as an Honorary Fellow of the Institute of Risk Management for his contributions to risk management.
Norman can be found at: • Marks on Governance • Norman Marks on Governance, Risk Management, and Internal Audit • on Twitter @normanmarks
Please Note
If you are looking to submit press releases or other forms of news for consideration, the best approach is to email [email protected]. That is an actively monitored distribution list.
Norman's Recent Tweets
Tweets by @normanmarksNorman's Recent Articles
- Cybersecurity Isn't an IT Risk, It's a Business Risk Jul 15, 2022
- The Greatest Risk and the Greatest Asset: People Jun 28, 2022
- The Great Resignation Risk Jun 17, 2022
- What Happens if We Ban Audit Reports? May 2, 2022
- Is This the Greatest Risk? Mar 9, 2022
- Are Your Risk Appetite Statements Compliance Exercises? Feb 10, 2022
- Revisiting the Concept of Risk Appetite Jan 21, 2022
- Internal Audit: Getting From Recommendations to Actions Dec 8, 2021
- Remove the Restraints of the Audit Report Format Oct 21, 2021
- Enterprise Risk Management and the Internal Audit Plan Sep 30, 2021
- How Do We Fix Risk Management? Sep 23, 2021
- The Risk of Excessive Red Tape Sep 16, 2021
- Risk Management and Cloud Computing: Two Approaches Aug 31, 2021
- Exploring the Positive Side of Risk Aug 20, 2021
- How Risk Management Can Build Credibility With Management Aug 3, 2021
- Revitalizing Risk Management Through a Changed Reporting Structure Jul 21, 2021
- Assessing and Addressing Technology Risk Jul 20, 2021
- Is Risk-Based Audit the Best Approach? Jun 16, 2021
- Is It Time We Retire the GRC Acronym? Jun 7, 2021
- Is Agile Auditing the Latest Fad or a Really Great Practice? May 21, 2021
- Should We Abandon Risk Assessment, Risk Management and Risk Appetite? May 7, 2021
- Another Look at Risk Appetite Mar 30, 2021
- How Should We Be Thinking About Risk, Purpose and Objectives? Mar 24, 2021
- Optimizing Board Decision-Making Mar 16, 2021
- Are You Too Risk Averse? Mar 10, 2021
- The Concept of Resilience: A New Buzzword Mar 5, 2021
- What Is Wrong With a Typical Risk Register? Feb 26, 2021
- Getting the Most Out of Internal Audit Jan 15, 2021
- Delivering Value From IT Audit Jan 13, 2021
- A Simple Risk-Driven Decision Technique Nov 11, 2020