Which practice best strengthens internal controls over payroll processing?

• A. Payroll checks reconciled by the payroll manager
• B. One person handling all payroll tasks
• C. Segregation of duties and restricted access to payroll data
• D. Payroll data openly accessible to all employees

Answer: (C)

Segregation of duties and restricted access create strong checks and balances in payroll processing. When different people handle each step—timekeeping, payroll calculation, disbursement, and reconciliation—there’s a built-in safeguard against errors and fraud because no one controls the entire process end-to-end. Limiting who can view or modify payroll data protects sensitive information and prevents unauthorized changes to hours, pay rates, or personal details, while leaving an audit trail of who did what. This combination makes it much harder for mistakes to go unnoticed or for someone to manipulate payroll without detection, which is why it’s the best approach to strengthen internal controls.

Having one person perform all payroll tasks eliminates essential separation of duties, increasing the risk of both errors and fraudulent activity. Reconciliations by the same person who handles the payroll can conceal discrepancies. Allowing payroll data to be openly accessible to all employees undermines confidentiality and increases the chance of tampering or privacy breaches.