IT General Controls Review

General controls apply to all areas of the organization. These include policies and practices established by management to provide reasonable assurances that specific objectives will be achieved. The control procedures include:

• Internal accounting controls, primarily directed at accounting operations, that concern the safeguarding of the assets and the reliability of financial records.
• Operational controls related to the day-to-day operations, functions and activities, and that ensure the operation is meeting it's business objectives.
• Administrative controls relating to operational efficiency in functional areas and adherence to management policies. Administrative controls support the operational controls specifically concerned with operating efficiency and adherence to organizational policies:
  • Organizationally sound, logical security policies and procedures to ensure proper authorization of transactions and activities.
  • Overall policies for the design and use of adequate documents and records to help ensure proper recording of transactions and transactional audit trails.
  • Procedures and features to ensure adequate safeguards over access to and use of assets and facilities.
  • Physical security policies for all data centers