Skip to content
Cyber Horizon
All frameworks

// Financial

Sarbanes-Oxley IT General Controls Compliance Software

IT general controls supporting Sarbanes-Oxley financial reporting reliability.

Framework at a glance

Short name

SOX ITGC

Version

2002

Category

Financial

Controls

24

What SOX ITGC covers

24 controls across 5 domains — every one tracked, owned and evidenced in Cyber Horizon.

Access to Programs & Data

7 controls
  • APD-01 User Access Provisioning
  • APD-02 User Access Deprovisioning
  • APD-03 Privileged and Administrative Access
  • APD-04 Periodic User Access Reviews
  • APD-05 Segregation of Duties

Program Changes

5 controls
  • CHG-01 Change Authorisation and Approval
  • CHG-02 Change Testing and User Acceptance
  • CHG-03 Segregation of Development and Production
  • CHG-04 Emergency Changes
  • CHG-05 Migration to Production

Program Development

3 controls
  • DEV-01 System Development Life Cycle Governance
  • DEV-02 Data Conversion and Migration
  • DEV-03 Pre-Implementation Testing and Approval

Computer Operations

5 controls
  • OPS-01 Job Scheduling and Batch Processing
  • OPS-02 Batch Monitoring and Exception Handling
  • OPS-03 Backup and Recovery
  • OPS-04 Incident and Problem Management
  • OPS-05 Operations Logging and Monitoring

ICFR Governance

4 controls
  • SOX-01 Management Review Controls
  • SOX-02 ITGC-to-ICFR Scoping and Linkage
  • SOX-03 Evidence and Audit-Trail Retention
  • SOX-04 Service Organisation (SOC Report) Oversight

How Cyber Horizon automates SOX ITGC

Every SOX ITGC control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.

Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.

Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.

Frequently asked questions

What is Sarbanes-Oxley IT General Controls?

IT general controls supporting Sarbanes-Oxley financial reporting reliability.

How many controls does Sarbanes-Oxley IT General Controls have?

Sarbanes-Oxley IT General Controls (2002) has 24 controls in Cyber Horizon's catalogue, organised across 5 domains.

How does Cyber Horizon help with Sarbanes-Oxley IT General Controls?

Cyber Horizon maps Sarbanes-Oxley IT General Controls into a shared control library alongside every other framework you run, so evidence collected once counts towards SOX ITGC and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.

See SOX ITGC mapped to your environment

Start with the free 20-question readiness check — no signup — or get a personal walkthrough of SOX ITGC in Cyber Horizon.