Payroll Business Continuity and Key-Person Risk

What Happens When Your Payroll Administrator Is Suddenly Unavailable?

Payroll is one of the few business processes that cannot simply wait until someone returns.

Employees expect to be paid accurately and on time. Statutory declarations and payments still have deadlines. Yet in many businesses, almost the entire process depends on one payroll administrator.

What happens if that person becomes ill, takes emergency leave, resigns unexpectedly or cannot access the system?

If the answer is unclear, your business has a key-person risk.


Why payroll is particularly vulnerable

Payroll administrators often hold a large amount of knowledge that has never been formally documented.

They may know:

  • When payroll inputs are due
  • Which employees receive variable pay
  • How overtime and allowances are handled
  • Who approves changes
  • Which reports management requires
  • How payment files are created
  • Which monthly declarations must be completed
  • Where supporting documents are stored
  • Who to contact when something goes wrong

The Sage software and payroll data may still be available, but that does not mean another employee can immediately complete the process.


Document the complete payroll cycle

Your payroll procedure should allow an appropriately authorised backup person to understand what happens before, during and after every pay run.

Document:

  • Payroll input deadlines
  • Employee onboarding and termination procedures
  • Leave, overtime, commission and deduction processes
  • Required supporting documents
  • Review and approval responsibilities
  • Payroll finalisation steps
  • Bank payment procedures
  • Payslip distribution
  • EMP201 preparation
  • Reconciliation requirements
  • Month-end and year-end reports
  • Escalation contacts

The document should describe your actual process, not an ideal version that employees do not follow.

Review it whenever the payroll process, legislation, software or responsible personnel change.


Establish secure backup access

Business continuity does not mean giving several people unrestricted payroll access.

Payroll information is highly confidential. Access should be limited according to each person’s role and should follow proper approval procedures.

Check that:

  • At least one authorised backup person can access the system
  • Login details are not shared informally
  • Multi-factor authentication and recovery methods are controlled
  • User permissions are appropriate
  • Departing employees’ access can be removed promptly
  • Banking and SARS access are not dependent on one person
  • Passwords are handled through an approved secure process

Emergency access should be tested before an emergency occurs.


Separate processing from approval

Where possible, no single person should control every stage of payroll.

A sound process should distinguish between:

  • Supplying payroll inputs
  • Capturing or importing changes
  • Processing payroll
  • Reviewing exception and variance reports
  • Approving the payroll
  • Releasing the bank payment
  • Submitting statutory information

Even in a small business, an owner, director or senior manager should review payroll totals and significant changes before payments are released.

This reduces fraud and error risk while creating greater familiarity with the overall process.


Keep a payroll calendar

A central payroll calendar should record all critical dates, including:

  • Input cut-off
  • Processing date
  • Review and approval
  • Payment file preparation
  • Employee payment date
  • Payslip distribution
  • EMP201 submission and payment
  • Interim and annual employer reconciliations
  • Software updates or legislative changes
  • Internal reporting deadlines

Add responsible and backup people to each task. The calendar should be accessible to authorised management rather than sitting in one person’s inbox.


Maintain reliable records and backups

Payroll continuity depends on accurate records.

Maintain organised copies of:

  • Employee master data
  • Approved payroll inputs
  • Payroll reports
  • Payment approvals
  • Submission confirmations
  • Proof of statutory payments
  • Tax directives
  • Reconciliation documents
  • Relevant correspondence

Your Sage environment and payroll data should also form part of the company’s tested backup and recovery plan.


Test your continuity plan

Do not wait for an absence to discover that the backup person cannot complete the pay run.

Arrange a controlled test in which the designated backup person works through the procedure. This often reveals missing permissions, outdated instructions or knowledge that was never documented.

Review the continuity plan at least annually and whenever the payroll administrator or service provider changes.


Consider a managed Payroll Bureau

For businesses with limited internal payroll capacity, a managed bureau can provide greater continuity.

An outsourced provider can maintain an established processing team, documented procedures and backup resources. The employer still needs to provide correct information and approve the payroll, but the processing responsibility no longer rests entirely with one internal employee.

This can be particularly useful where payroll is complex, confidentiality is a concern or the business cannot justify employing several payroll specialists.


Would your payroll continue without its usual administrator?

MRBM’s managed Payroll Bureau helps South African businesses process payroll accurately and consistently while reducing reliance on a single internal employee.
Contact us to discuss a more resilient payroll process.