In evaluating the security of a newly implemented payroll system, which control is least likely to be a security measure?

• A. Limited system access
• B. Regular data back-up and storage
• C. System edits
• D. Protection against computer viruses

Answer: (C)

When evaluating security for a payroll system, focus on safeguards that prevent or detect unauthorized access and protect data integrity and availability. Limiting system access is a fundamental security control because it directly restricts who can view or modify payroll data. Regular data backup and storage supports continuity and data integrity, ensuring information can be recovered after loss or disaster. Protection against computer viruses helps prevent malware from compromising or corrupting payroll information. System edits, however, describe changes to the system itself rather than a protective safeguard; they’re more about how the system is maintained and updated. While change management processes may govern edits, the act of editing isn’t a security measure in itself and can introduce risk if not properly controlled. So, system edits are the least likely to be a security measure among the options.