Auditing · Internal Controls

Consider the following statements regarding internal controls in an IT system: A. All computer terminals are to be located in parts of the building that have code entry systems to limit unauthorized access. B. Off-site backups are to be kept of all patient records. C. Automated checks that all patient records have been completed with all necessary data will be enforced. D. Unique identification numbers will be issued for all users, allowing each piece of data input to be traced to a relevant staff member. E. Training for all staff members in the correct use of the system will be put in place. F. Authorization controls will be enacted so that employees can only input information on the system that they are entitled to input or amend. G. Password systems on all terminals will be created. H. Validity checks will be made on data entered, such as age and height of patients. Which group consists entirely of general controls?