A small company does not have enough staff to effectively segregate duties to prevent error and fraud in payroll management. The Chief Information Security Offi...