Information Technology (IT)

General Control Activities over Technology (ITGC)

This library of Information Technology (IT) Playbooks provides a set of fully loaded and editable templates that represent the core of what is generally required by management (including process owners), boards of directors and their audit committees, as well as internal and external auditors of relevant organizations, to document, assess, test, report and oversee the design and operating effectiveness of the typical key internal controls on which management is reliant to maintain compliance with IT Security regulatory requirements. They are drawn from a range of authoritative sources including the Committee of Sponsoring Organizations (COSO) and the American Institute of Certified Public Accountants (AICPA).

Download the Playbook

Unlock a wealth of information.

What is the General Control Activities over Technology (ITGC) Playbook?

The General Control Activities over Technology Playbook addresses the following areas:

  • Policy and Procedures
  • Program Development and Change Management
  • Security and Access – Logical
  • Security and Access – Physical
  • Data Backup
  • Third-Party Vendor Management
  • Application Controls
  • Problem and Incident Management
  • End-user Computing, and
  • Additional Considerations (including scope, IPE, MRCs and emerging technology risks)



You Also Get


Policy Document Template

These templates are designed to be a starting point for your clients, which can be tailored for your client's specific organizational needs.


Overview Flow Charts

A diagrammatic representation of the flow of assessment activities within your playbook.



Our instructions for use. These are the same for all our playbooks, once you know how to use one, you can use them all.



A PowerPoint tutorial on the specific playbook, covering the most important aspects of this area of assessment.

One Subscription. 100+ Playbooks.

You know what your clients need, let us help you deliver.

Related Playbooks

Playgroup Icon

General Control Activities over Technology (ITGC)

Playgroup Icon

Information Technology Application Controls (ITAC)

Playgroup Icon

System Development Life Cycle (SDLC)


What are they saying?

Learn more about the many benefits our Playbooks have offered organisations like yours.

Based on Authoritative Sources

Sign up for our newsletter and get the best of GRC Playbook straight to your inbox.
Leo-logo ERDF ESF