ISC — Quick Sheet
IT General Controls (ITGCs)
Read time: ~5 minutes
One-minute revision
- 4 ITGC categories: Access, Change management, Program development/SDLC, IT operations
- Weak ITGCs undermine reliance on all automated application controls in that system
- Access controls = highest-risk category typically tested
- General controls (environment-wide) ≠ application controls (process-specific)