General Controls Definitions

Question 1

What general control component includes the physical and virtual hardware, software, networks, and facilities that support the entire IT environment?

Answer 1

IT INFRASTRUCTURE

Question 2

What general control component involves policies and procedures to protect systems and data from unauthorized access, including user authentication and physical security?

Answer 2

SECURITY MANAGEMENT

Question 3

What general control component covers controls over how software is selected, developed, tested, and updated to ensure it meets business needs and is secure?

Answer 3

SOFTWARE ACQUISITION, DEVELOPMENT, AND MAINTENANCE

Question 4

What general control component includes procedures to keep systems running smoothly, such as backups, system monitoring, and incident response?

Answer 4

OPERATIONS AND MAINTENANCE

Question 5

What general control component involves mechanisms that restrict system and data access to authorized users only, often involving passwords, roles, and permissions?

Answer 5

ACCESS CONTROLS

Question 6

What general control component includes controls over the physical environment (like power and cooling) and network security to ensure reliable and secure IT operations?

Answer 6

DATA CENTER AND NETWORK OPERATIONS

Question 7

What general control component involves processes to manage and authorize changes to IT systems and software, minimizing risks from unauthorized or faulty modifications?

Answer 7

CHANGE MANAGEMENT

Question 8

Which general control area covers the physical and virtual components like servers, networks, and software that support IT operations?

Answer 8

IT INFRASTRUCTURE

Question 9

What control area involves establishing policies and safeguards to prevent unauthorized access to systems and data?

Answer 9

SECURITY MANAGEMENT

Question 10

Which general control ensures that software is properly acquired, developed, tested, and updated to meet organizational requirements?

Answer 10

SOFTWARE ACQUISITION, DEVELOPMENT, AND MAINTENANCE

Question 11

What area focuses on procedures like backups, system monitoring, and routine maintenance to keep IT systems running effectively?

Answer 11

OPERATIONS AND MAINTENANCE

Question 12

Which control restricts system and data access to authorized individuals through mechanisms like passwords and permissions?

Answer 12

ACCESS CONTROLS

Question 13

What general control area manages the physical environment of data centers and network security to ensure reliable IT operations?

Answer 13

DATA CENTER AND NETWORK OPERATIONS

Question 14

Which control area governs the process of approving and managing changes to IT systems and software to avoid unauthorized modifications?

Answer 14

CHANGE MANAGEMENT