This section of Protiviti's “Guide to the Sarbanes-Oxley Act: IT Risks and Controls – Frequently Asked Questions" addresses activity and process-level considerations for general controls. Topics covered include: What are “general IT controls?” What types of controls are “general IT controls?” And, what does the Section 404 compliance project team look for when evaluating security administration?