ITGC (IT General Controls)

IT General Controls are the policies and procedures that govern the IT environment supporting financial reporting. ITGCs apply across applications and include access management, change management, computer operations, and program development. Auditors test ITGCs as part of SOX 404 attestation. Code-level ITGC evidence includes commit-level approval workflows, separation of duties enforcement, and tamper-evident audit logs.