About the Author

Norman Marks, CPA, CRMA is an evangelist for "better run business", focusing on corporate governance, risk management, internal audit, enterprise performance, and the value of information. He is also a mentor to individuals and organizations around the world. Norman was the chief audit executive of major global corporations for twenty years and is a globally-recognized thought leader in the professions of internal auditing and risk management. In addition, he has served as chief risk officer, compliance officer, and ethics officer, and managed what would now be called the IT governance function (information security, contingency planning, methodologies, standards, etc.) He ran the Sarbanes-Oxley Section 404 (SOX) programs and investigation units at several companies. He is the author of the Institute of Internal Auditors' "Management's Guide to Sarbanes-Oxley Section 404: Maximize Value Within Your Organization"), which has been described as "the best Sarbanes-Oxley 404 guide out there for management", and "How Good is your GRC? Twelve Questions to Guide Executives, Boards, and Practitioners". Norman is a member of the review boards of several audit and risk management publications (including the magazines of ISACA and the IIA), a frequent speaker internationally, the author of multiple award-winning articles, and a prolific blogger about better run business (consistently rating as one of the top global influencers in social media on the topics of GRC, internal audit, risk management, and governance). Norman was profiled in publications of the AICPA and the IIA as an innovative and successful internal auditing leader. He has also been honored as a Fellow of the Open Compliance and Ethics Group for his GRC thought leadership, and as an Honorary Fellow of the Institute of Risk Management for his contributions to risk management.