3General controls refers to the structure, policies, and procedures-which apply to all or a large segment of an organization's information systems-that help to ensure proper operation, data integrity, and security.