IT, data & continuous
Application Controls
Controls embedded within business applications (ERP, financial software, etc.) that validate, authorize and record specific transactions or data processing. Application controls are system-specific, in contrast to ITGC, which apply organization-wide. Auditors test both the design and operating effectiveness of application controls.
Source: IIA GIAS 2024; ISAE 3402