Which statement best captures the key internal controls for payroll?

• A. Segregation of duties, documented processes, independent review, access restrictions, and audit trails.
• B. Segregation of duties alone.
• C. Documentation without segregation of duties.
• D. Occasional manual checks without formal procedures.

Answer: (A)

The main idea is that payroll controls should be layered and comprehensive, combining preventive and detective measures to reduce both errors and fraud. Segregation of duties limits the opportunity for misuse by ensuring no single person handles all parts of the payroll process. Documented processes give everyone a clear, consistent path to follow, which aids training and audits. An independent review adds an extra layer of oversight to catch mistakes or unusual activity. Access restrictions limit who can view or change payroll data, reducing the chance of unauthorized alterations. Audit trails create a traceable record of every action, supporting accountability and investigations.

When these elements work together, they form a strong defense against payroll risks and provide a clear framework for monitoring and accountability. Relying on only one control, like segregation of duties alone or just documentation, leaves gaps. Occasional manual checks without formal procedures typically aren’t enough to deter or detect systematic issues.