Governments struggle to exercise control over their digitalization efforts, often with many risks and uncertainties. Literature on IT control provides a fragmented understanding of government-specific digitalization areas. This paper systematically identifies and analyzes different areas of IT control through a systematic literature review, resulting in a novel classification. The literature review reveals that the current classifications of IT controls are fragmented, lack coherence, are incomplete, and depend on the research field and the language in which the data was collected. The novel classification presented in the paper focuses not only on technology, but also on the whole domain of digitalization, including the arrangements of organizations and projects, data management, agreements with other organizations, and the achievement of political ambitions and goals. This paper gives insights into the areas of control and argues that more research is needed to understand differences among government IT control approaches.