CPA LogoCPA Exam Prep

General IT Controls (GITCs)

Understanding General Controls

General IT Controls (GITCs) apply across the entire information technology environment. They ensure that IT systems are developed, operated, maintained, and secured appropriately, providing a reliable foundation for all applications.

  • Access management.
  • Change management.
  • Backup and recovery.
  • Physical security.
  • Network security.
  • System monitoring.
  • Configuration management.

Strong application controls cannot compensate for weak general controls.

Summary
General IT Controls establish organization-wide security, reliability, and operational stability.