General IT General Controls

Overview

General IT General Controls (General ITGC) — Cross-industry ITGC catalog covering access management, change management, computer operations, SDLC, logging, and physical security — for internal audit and compliance programs beyond SOX-specific scoping. ComplAI maps this framework’s controls so your team can track implementation, evidence, and audit readiness.

15 controls available in ComplAI for this framework.

Who it's for

• Organizations that must demonstrate General ITGC compliance
• Security and compliance teams operating in Global
• Customers and partners that require General ITGC assurance

Why it matters

General ITGC is a recognized financial framework. Activating it in ComplAI lets you manage controls, evidence, and readiness in one place.

How ComplAI helps

• Activate General ITGC in the Framework Library to load its control catalog
• Assign owners, track compliance status, and attach evidence per control
• Use risk register and issues workflows when controls fail or deviate
• Export readiness views for leadership and auditors

Sample controls

• ITGC-GOV-1

  IT control environment

  governance

• ITGC-AC-1

  Access provisioning

  access control

• ITGC-AC-2

  Access recertification

  access control

• ITGC-AC-3

  Privileged access management

  access control

• ITGC-AC-4

  Authentication standards

  access control

• ITGC-CM-1

  Change management

  change management

Getting started

1. Open Framework Library and activate General ITGC
2. Review the control list and prioritize high-impact domains
3. Attach policies, procedures, and technical evidence
4. Mark controls audit-ready and monitor residual gaps