Mark Goodge
Senior BCM & InfoSec Consultant, CGBC
Mark is a senior business continuity and information security consultant with more than 15 years’ auditing experience, who builds ISO 22301, 27001, 27701 and 42001 management systems that turn compliance into business resilience.
Mark Goodge: Senior Business Continuity and Information Security Consultant
Mark Goodge is Senior Business Continuity and Information Security Consultant at CG Business Consulting (CGBC). He has more than 15 years’ auditing experience and designs management systems that reduce risk and build real resilience, not just tick compliance boxes.
What standards does Mark Goodge specialise in?
Mark specialises in ISO 22301 business continuity, ISO 27001 information security, ISO 27701 privacy and ISO 42001 AI management, alongside ISO 20000 and ISO 9001. He is an ISO/IEC 42001 Principal Auditor, an ISO 22301 Lead Auditor and an ISO 9001 Lead Auditor.
How does Mark help businesses with business continuity and information security?
Mark designs and embeds business continuity and information security management systems that sustain certification and strengthen operational resilience. He turns regulatory obligations, including NIS2, DORA, GDPR and SOC 2, into practical policies and controls. He also helps boards see compliance as a strategic enabler rather than a cost.
How does Mark help organisations with AI governance?
Mark advises on responsible AI governance under ISO 42001 and the EU AI Act. He builds policy, audit and control structures that sit alongside information security, privacy and quality systems.
What is Mark’s professional background?
Mark has worked in information security, quality and IT service management as a consultant, practitioner and third-party certification auditor. He has led information security and quality management systems from the inside, and has built internal audit and compliance capability through training and mentoring.
Who does Mark work with?
Mark advises SMEs and corporates across public and private sectors, including multi-site and multi-jurisdictional organisations. He is known for a pragmatic approach to governance, risk and compliance.
Qualifications and certifications
- ISO/IEC 42001:2023 Principal Auditor
- BCMS (ISO/IEC 22301:2012) Lead Auditor
- QMS (ISO 9001:2015) Lead Auditor
- ISO/IEC 27701:2019 Requirements Training Course
- Lead auditor status in ISO 27001 and ISO 20000
- CISMP qualified
Want to talk about ISO certification, sustainability or digital compliance? Contact CGBC - HERE to speak with Mark and the team in Dublin.