IT general controls should be followed for any better managed IT organization irrespective of regulatory requirements like SOX. (period) When it comes to verification of IT general controls for SOX audits (internal or external), it is not the question of best practice nor nice to have, but, it is a must have requirements. Generally in…