[2-3] Employee access to payroll systems is limited based on job responsibilities and is reviewed periodically.