Application and general controls

Think of general controls as affecting the whole IT system: physical security, back-up, anti virus, firewalls, ensuring programs are updated properly.

Application controls relate to specific applications. For example, making sure that in the wages system, hourse worked are entered completely and accurately, or in the sales system, making sure that no one could write off a debt without proper authorisation or access rights.