payroll/HR permissions best practice

pma111
pma111 used Ask the Experts™
on
we are looking at controls for a new HR and Payroll system. We need to ensure users permissions in the system are free from fraud/misuse, through effective separation of duties and granting of access permissions. Are there any specific types of permission in HR and payroll systems where no one officer should be able to perform multiple tasks without a secondary officer involved, e.g. separation of duties/'high risk' functions from a fraud/inappropriate use angle.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Distinguished Expert 2018
Commented:
IT people aren't necessarily the best people to ask for that type of answer. You should be working with HR and payroll to determine that one. If they're unsure, then it would make more sense to get advice from consultants in the HR or payroll arena rather than on EE.

Author

Commented:
Will leave it open as my thinking was technical developers may be tasked with defining security roles with this subject in mind.
Distinguished Expert 2018

Commented:
I get why you asked, but the question you're asking is more of a process question than a technical one. That's why it makes more sense for HR and payroll to answer.
Blue Street TechLast Knight
Distinguished Expert 2018
Commented:
Hi pma111,

I'd mirror what @masnrock has mentioned.

If you were to ask, "what type of security mechanisms should be in place to insure an internal employee does not have the ability to compromise or infiltrate the security boundary of the HR department's network" that might be an example of something we (IT) could offer advise on. But as it stands your questions is much more related to a compliance officer, CPA within the realm of compliance, a process control officer or an HR manager.

You are in the right spot for all things IT but for this question, I'd recommend you lookup some HR specific forums.

Let me know if you have any other questions!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial