10 Payroll Resolutions Every Department Should Make
7/1/2026
Most payroll improvement lists are aspirational. This one is not — every item below prevents a specific, documented failure mode, and each is achievable by a department that already has more work than time.
They are ordered by return on effort. If you adopt only the first three, you will have addressed the majority of what actually goes wrong.
1. Reconcile Quarterly, Not Annually
Tie the payroll register to each Form 941 as you file it — total wages, federal income tax withheld, Social Security wages and tax, Medicare wages and tax.
What it prevents: an error introduced in March being discovered in January, after four quarters of wrong returns and a full population of wrong Forms W-2.
Why it is the highest-return item: an error found in April requires one Form 941-X. The same error found in January requires four, plus a Form W-2c population, plus amended state filings. And critically, under-withheld employee FICA can still be recovered from the employee within the same calendar year — after year end it generally cannot, and the employer absorbs it.
Budget one hour per quarter. See our year-end reconciliation guide and Payroll Reconciliation And Reporting.
2. Separate Who Enters From Who Releases
Ensure the person who adds employees, changes rates, and modifies bank details is not the person who approves and releases the payroll.
What it prevents: the two most common payroll fraud schemes — ghost employees and inflated hours — both of which require one person to control the whole chain.
How to do it in a small department: the release does not require a second payroll professional. A manager, controller, or owner reviewing a variance report and authorizing release is sufficient, and takes minutes.
Add three supporting controls: review new and changed bank account details each cycle, watch for multiple employees sharing one account, and reconcile HR's active roster against the payroll register periodically. See our How to Prevent Payroll Fraud session.
3. Run a Pre-Release Variance Report Every Cycle
Flag any employee whose net pay moved beyond a set threshold versus the prior period, and require an explanation before release.
What it prevents: almost everything — a doubled deduction, a disappeared deduction, a rate keyed wrong, a duplicate payment, a terminated employee still being paid, a garnishment that reset.
Why it works: payroll errors are almost always visible as an anomaly against the prior period. Fifteen minutes of comparison catches what hours of subsequent investigation would.
4. Audit Worker Classification Annually
Pull every 1099 recipient and re-test anyone paid continuously for more than a year, paid more than a comparable employee's salary, working exclusively for you, supervising your employees, or performing work central to your business.
What it prevents: the single most expensive payroll exposure — reclassification, which cascades into employer FICA, the employee share you failed to withhold, unemployment taxes with interest, up to three years of unpaid overtime doubled by liquidated damages, retroactive benefit claims, and mandatory attorney fees.
The specific discipline: write a short classification memo per engagement applying the governing tests to the facts. That memo converts an assumption into a considered determination, which is what reasonable-basis relief turns on. And maintain consistency within roles — treating some people in a role as W-2 and others as 1099 generally forfeits Section 530 relief.
Note that the federal standard has been in motion, so confirm the current position rather than working from a prior conclusion. See our employee vs. independent contractor guide.
5. Inventory Every Earnings and Deduction Code Against Every Tax Base
Build a grid of every code against federal income tax, Social Security, Medicare, and unemployment wages. Verify each cell against the plan documents rather than against how it has always been set.
What it prevents: the most common cause of a Form W-2 that will not reconcile — most often a traditional 401(k) deferral flagged as reducing FICA wages, which it does not.
The maintenance discipline: re-verify whenever a new code is created. Mapping errors rarely come from the original configuration; they come from a new benefit added mid-year by someone who copied an existing code.
See our pre-tax vs. post-tax deductions guide.
6. Make Any Address Change That Crosses a State Line a Compliance Event
An employee moving states is not a mailing update. It can trigger a withholding registration, an unemployment account, new hire reporting, paid family leave contributions, a different pay statement requirement, a different final-pay deadline, different garnishment limits, and — in some cases — a loss of exempt status where the new state's salary threshold is higher.
What it prevents: unregistered withholding accruing penalties from the first paycheck, and a jeopardized FUTA credit where state unemployment goes unpaid in the correct state.
How: a trigger on the state field, generating a task with an owner and a checklist. See our multi-state payroll tax guide.
7. Write the Procedures Down
Document the cycle: what happens on which day, who approves what, how each exception is handled, where each reference lives.
What it prevents: the department becoming unable to function when one person is unavailable — and it is also the artifact an examiner is most reassured to see.
The realistic approach: do not attempt a complete manual. Write one procedure per month, starting with the ones only one person knows. Twelve months later you have a manual.
See documenting payroll procedures, Best Practices For Payroll Policies And Procedures, and The Payroll Operations Procedures Manual.
8. Test the Continuity Plan
Confirm you can run payroll if the primary system is unavailable, the bank connection fails, the office is inaccessible, or the payroll manager is out.
What it prevents: a missed payday, which is a wage payment violation in most states regardless of cause, and a missed tax deposit, which carries its own penalties.
Minimum viable plan: documented access credentials held by more than one person, a current export of employee and rate data stored securely offline, a manual check capability, knowledge of how to deposit taxes without the usual system, and a communication plan for employees.
Test it once a year, at least on paper. See cybersecurity and keeping payroll processing going during an outage.
9. Verify Bank Account Changes Through a Second Channel
Never accept a direct deposit change by email alone. Verify through a channel other than the one the request arrived on, hold the first payment to a newly changed account briefly, and alert the employee at their on-file address whenever bank details change.
What it prevents: payroll diversion fraud — a phishing email impersonating an employee requests a bank change, and one pay period later the wages are gone with limited recovery prospects.
Why it belongs on the list: this attack is common, cheap to attempt, and entirely preventable by one procedural rule.
10. Schedule the Self-Audit
Put a recurring appointment on the calendar: classification spot-check, exempt status re-test, regular-rate validation, garnishment recalculation, I-9 sample review, deposit timing confirmation, state footprint review, and a segregation-of-duties walkthrough.
What it prevents: everything on this list from quietly reverting. Controls decay, and the audit is what detects the decay.
Why the timing matters: voluntary correction programs, penalty abatement for reasonable cause, and plan self-correction are generally unavailable once an examination begins. The entire financial value of a self-audit is that it happens first.
Document each audit — scope, procedures, findings, corrections, dates. That file is your evidence of reasonable care, which is the standard most penalty abatement turns on. See our payroll audit guide and How To Do A Payroll Audit — Former Auditor's Expert Advice.
Making These Stick
Two observations from departments that succeed at this.
Assign an owner and a date to each item. A resolution without a name next to it is a wish. Even in a one-person department, writing "quarterly reconciliation — me — the second week after each quarter closes" changes the outcome.
Pick three, not ten. A department that adopts quarterly reconciliation, segregation of duties, and the pre-release variance report has addressed most of what actually goes wrong. Attempting all ten in January generally produces none of them by March.
For structured development alongside these process changes: Payroll Management Operations Training & Certification Program, Certified Payroll Administrator, and Certified Payroll Manager.
Two Resolutions Worth Adding If You Have Capacity
Not in the top ten because they take longer to pay off, but both are genuinely valuable.
Reconcile to the recordkeeper and the general ledger, not just to the returns. The Form 941 tie-out finds tax errors. Three other comparisons find different classes of problem: bank disbursements to the payroll register is the only control that catches a manual check issued outside the system; general ledger benefit expense to imputed income reported finds taxable benefits that were paid but never imputed, which is exactly the comparison an examiner makes; and payroll deferrals to the retirement recordkeeper catches transmission gaps, missed enrollments, and compensation-definition errors while a plan correction is still inexpensive.
Build a state footprint document. One row per state where any employee performs work, with the withholding registration number, unemployment account and current rate including add-ons, local registrations, paid leave program status, workers' compensation policy, minimum wage, exempt threshold, final-pay deadline, and pay statement requirements. Review it each January and whenever someone moves.
That document does more than organize information. It converts multi-state compliance from a series of recollections into a maintained record — which means a new hire in an existing state requires no research, a new state has an obvious checklist, and an examiner sees evidence of a managed process rather than an improvised one.
Neither of these prevents a failure next month. Both change what the department is capable of within a year, which is why they belong on a list of resolutions rather than a list of fixes.
Frequently Asked Questions
What are the most important payroll best practices?
Quarterly reconciliation of the payroll register to each Form 941, separation of the person who enters changes from the person who releases payroll, and a pre-release variance report reviewed every cycle. Those three address the majority of what actually goes wrong — undetected configuration errors, internal fraud, and single-cycle mistakes — and each takes under an hour.
How often should payroll be reconciled?
Quarterly, as each Form 941 is filed. An error found in April requires one Form 941-X; the same error found in January requires four plus a Form W-2c population plus amended state filings. Under-withheld employee FICA can also still be recovered from the employee within the same calendar year, whereas after year end the employer generally absorbs it.
How can a small payroll department achieve segregation of duties?
The second person does not need to be another payroll professional. A manager, controller, or owner who reviews the pre-release variance report and authorizes release provides the separation, and it takes minutes. Supplement it by reviewing new and changed bank account details each cycle, watching for multiple employees sharing one account, and periodically reconciling HR's active roster to the payroll register.
How often should worker classification be audited?
Annually at minimum. Pull every 1099 recipient and re-test anyone paid continuously for over a year, paid more than a comparable employee's salary, working exclusively for you, supervising employees, or performing work central to your business. Write a short classification memo per engagement, and keep treatment consistent within roles — inconsistency generally forfeits Section 530 relief.
How do you prevent payroll diversion fraud?
Never accept a direct deposit change by email alone. Verify every account change through a channel other than the one the request arrived on, place a brief hold on the first payment to a newly changed account, alert the employee at their on-file address whenever bank details change, and review accounts shared by multiple employees. The attack is common and cheap to attempt, and one procedural rule prevents it.
Why does a self-audit have to be scheduled rather than done when needed?
Because the financial value depends entirely on doing it first. Reduced-rate settlement programs, penalty abatement for reasonable cause, and retirement plan self-correction are generally unavailable once an examination begins, so an audit performed in response to a notice arrives too late to access them. Scheduling it also detects control decay, which is what actually erodes the other practices over time.
Going Deeper
Assign an owner and a date to each item you adopt, and document each completed audit — the record of reasonable care is what most penalty abatement depends on.
