Code Security · Audit & Attestation
GitHub for SOX ITGC
What GitHub’s data evidences toward SOX ITGC today, and how to connect it.
What GitHub evidences here
- Branch protection & merge approvals feeds Change Management
This is where GitHub’s data is documented as relevant on our SOX ITGC page — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
How you connect GitHub
Branch protection and merge-approval settings across your organisation’s repositories — the SOC 2 CC8.1 / ISO A.8.32 evidence that a change cannot reach production without review. Plain GitHub; no Advanced Security licence required.
About SOX ITGC
IT general controls — access, change management, and operations — for the technology half of a SOX programme.