Group Reported Controls state that all time records (including vacation, sick pay and overtime) must be approved by line managers according to the employee’s policy before being input into the payroll system and must never be amended to preserve an audit trail. A review of six workers’ overtime records revealed that two of them had not been signed-off by the line manager. Proper review and authorisation process, evidenced by signatories is a preventive control to reduce the risk that discrepancies exist between hours worked, hours reported and hours paid resulting in incorrect payments.