Internal Audit Heroes

Norman Marks, CRMA, CPA, is a vice president for SAP and has been a chief audit executive and chief risk officer at major global corporations for more than 20 years.


I am going to talk about Bruce Carpenter, the Vice President of Internal Audit at Sybase.

Like others in the Silicon Valley, Bruce was a respected internal audit leader at his company when he was asked to take on not only risk management but compliance as well. Now, we can argue whether those represented conflicts or not, but being the hero that Bruce is he accepted the challenge.

Bruce and top management (he had the very active support of the CEO) decided that risk and compliance (he refers to it as GRC) needed to function "with the rhythm of the business." He saw it as not only protecting value but helping management drive performance.

With the help of consultants from Protiviti, Bruce led the implementation of technology solutions to enable his GRC program: solutions to manage access to the new SAP ERP, risk management, SOX, and compliance management.

Sybase not only felt that the implementation and the enhanced risk and compliance processes were successul, but that they helped the company drive significant improvements in revene, profits, and share price.

The company has now been recognized by OCEG for its (and Bruce's) achievement, giving their flagship Principled Performance award to the company.

You can hear Bruce (and later, the CEO of Sybase) talk about this achievement in this video.

Who are your internal audit heroes?

Posted on Jul 5, 2012 by Norman Marks

Share This Article:    

  1. I agree that there are a plethora of heroes including Hans Spoel on whose committee on restructuring the IIA Board I was privileged to serve. I would also have to single out such luminaries as Peter Wilson in his role as President(Mr "can do"), Bill Taylor who chaired the International Relations committee for many years but my personal hero was the late Jim Hooper who did so much for the IIA South Africa when we became a National Institute and, at a national level, RRD "Scotch" Duncan Anderson whowas the President of the IIA South Africa when I joined 29 years ago.
  1. Hi Sir Mark! Can I seek some wisdom from you? Is there a need to discuss audit reports on irregularities to Finance Department before releasing it for the Audit Committee? Thanks.

Leave a Reply