There are 2 parts to this control and both must be tested. In the first part you must select a sample of payroll changes. In the second part you need to review a system-generated report of all payroll changes made in the month and check that it has been reviewed by an appropriate person (cannot only be the same person who approves the changes). There are some companies which cannot generate this report and in such cases an alternative control must be identified and tested.