Skip to Main Content

Mark A. Caiazzo

Principal | CISA, CISM, CRISC, COBIT 5

Mark has led over 400 SOC exams and readiness assessments for state lotteries, racing venues, health and retirement plan recordkeepers, e-business providers, website hosting companies, and more. He also leads BerryDunn’s technology assurance service engagements in both the public and private sectors. Prior to joining the firm in 1988, Mark was the EDP Audit Officer in the internal audit department of a large regional bank holding company.

Mark is a Principal in the Management and IT Consulting Group and leader of BerryDunn’s IT Assurance Services team. He is charged with keeping abreast of Information Systems technology, IS audit standards and techniques, information security vulnerabilities and countermeasures. He is a Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), and Certified in Risk and Information Systems Control (CRISC), all designations of the Information Systems Audit and Control Association (ISACA).

Mark has led over 400 SOC exams and readiness assessments for state lotteries, racing venues, health and retirement plan recordkeepers, e-business providers, website hosting companies, and more. He also leads BerryDunn’s technology assurance service engagements in both the public and private sectors. Prior to joining the firm in 1988, Mark was the EDP Audit Officer in the internal audit department of a large regional bank holding company.

Mark is a Principal in the Management and IT Consulting Group and leader of BerryDunn’s IT Assurance Services team. He is charged with keeping abreast of Information Systems technology, IS audit standards and techniques, information security vulnerabilities and countermeasures. He is a Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), and Certified in Risk and Information Systems Control (CRISC), all designations of the Information Systems Audit and Control Association (ISACA).

Experience Highlights

Mark helps clients with a variety of issues including:

  • Security program reviews and architecture assessments
  • IT audits and operational reviews
  • Management and regulatory requirements for technology use
  • Internal audit planning and risk management
  • Technology planning

Publications and Presentations

  • NASPL 2017, “Business Continuity Management - an Auditor's Perspective”
  • PPC's 2013, “Guide to Audits of Financial Institutions”, Contributing Author

    Mark advises industry groups on the AICPA’s continuously changing SOC examination standards, with speaking engagements at the following association meetings:
  • National Association of State and Provincial Lotteries (NASPL)
  • Association of Racing Commissioners International (ARCI)
  • Maine and New Hampshire Hospital Associations

Insights

Articles

Press Releases

Resources

Success Stories

Education

BS, Accounting & Finance, University of Maine

Certifications

  • CISA
  • CISM
  • CRISC
  • COBIT 5