HR-Glossar
Vier-Augen-Prinzip (four-eyes principle)
What the four-eyes principle is, where it bites in payroll and how it differs from approval workflows and segregation of duties.
1. What is Vier-Augen-Prinzip (four-eyes principle)?
The four-eyes principle is a control rule: a transaction takes effect only once a second person has independently checked and approved it. Whoever records does not approve – whoever approves did not record.
In payroll it bites at two points. At entry, every change to master or movement data is read back before it feeds the calculation: new employees, changes to pay, absences, one-off payments. At approval, the completed payroll run is checked as a whole before payments and reports are triggered.
As a preventive control it is a fixed component of an internal control system and appears equally in the authorisation concepts of IT baseline protection. Its purpose is not mistrust but a division of labour against a known weakness: whoever made an entry reads it back the way they meant it, not the way it stands. A second pair of eyes reads it for the first time.
2. Origin and development
The rule comes from accounting and banking supervision, where it has long been part of the basic equipment of internal control systems. It is not an invention of payroll but a transferred pattern.
It came into HR work by two routes: through the internal control system that auditors expect for processes relevant to financial reporting, and through the plain experience that payroll errors are expensive – as correction effort, as a retrospective demand at an audit, and as a loss of trust among employees.
3. Core principles and how it works
Separation of entry and approval
The two roles sit with different people. In the system this is mapped through authorisations, not through an understanding – otherwise the separation lasts exactly as long as it is convenient.
Independence of the second view
The checking person works against the source, not against the entry. The check is made against the employment contract, the time records, the sickness notification – not against the screen of the person who made the entry.
Demonstrability
Who approved what, and when, is logged. A control that cannot be evidenced is no help at an audit and is worthless to the internal control system.
Risk orientation
Not every transaction carries the same risk. New records, changes to pay, one-off payments and leavers deserve more attention than an unchanged monthly payroll – the depth of checking may follow that.
4. Who is Vier-Augen-Prinzip (four-eyes principle) relevant for?
- Payroll teams – for them the principle is the daily way of working, not an extra task. - Management and HR leadership – they are answerable for making the separation organisationally possible at all; in very small teams that is precisely the difficulty. - Auditors and inspectors – they ask about the internal control system and about evidence that it is lived. - Employees – they are the ones directly affected when an entry passes through wrongly.
5. How it differs from related terms
- Four-eyes principle and segregation of duties – segregation of duties distributes whole areas of responsibility permanently across different people; the four-eyes principle concerns the individual transaction. - Four-eyes principle and approval workflow – a workflow is the technical means. It can map the principle but does not replace it: a click without a check satisfies the rule neither formally nor in substance. - Four-eyes principle and plausibility checking – machine plausibility checks find outliers and formal errors. They do not find what is formally right and factually wrong – which is exactly where the second person starts. - Four-eyes principle and parallel payroll run – a parallel run compares two complete calculations and is limited to a transition; the four-eyes principle applies permanently and in ongoing operation.
6. Variants and adaptations
- Full check – every transaction is read back. Usual for new records, leavers and changes to pay. - Sample check – for uniform high-volume transactions, checking follows a fixed key. The key belongs documented, otherwise the sample is not one. - System-supported approval – the payroll system blocks the run until a second authorisation releases it. The technically most reliable form. - External second view – the check sits with a service provider or another organisational unit. The usual route where the team is too small for a genuine separation.
7. Advantages and challenges
Advantages
- Errors are found before payment, not after
- Corrections within the current month are considerably easier than retrospective ones
- The control is demonstrable and supports the internal control system
- Knowledge spreads within the team, because two people know every transaction
- Employees experience reliable payroll instead of recurring queries
Challenges
- It costs time — precisely when the payroll deadline is pressing
- In small teams a genuine separation is barely achievable organisationally
- Routine hollows out the check — whoever approves daily eventually stops looking
- A formal approval without a substantive check creates deceptive security
- Cover arrangements must be thought through, otherwise the run stalls during a holiday
8. Best practices for implementation
Anchor the separation technically
Entry and approval rights belong to separate roles in the system. An organisational understanding without a technical counterpart does not survive the first deadline pressure.
A checklist rather than instinct
What is checked belongs defined: new records, leavers, changes to pay, one-off payments, conspicuous variances against the previous month. A short list beats a long habit.
Arrange cover in advance
Holidays and sickness require a named second approval right. Without one, the rule is suspended when it matters – and that is exactly when the errors happen.
Analyse the findings, do not merely correct them
What the second person finds says something about the process. Recurring findings belong addressed at the cause, not in the monthly correction loop.
9. Tips for employers and employees
For employers
- **Check honestly whether your team can carry the separation** – with a single person in payroll it is not achievable; an external second view is then the more reliable answer
- **Do not let approval become a formality** – whoever merely clicks has abolished the control and still carries the risk
- **Keep the logs** – at an audit the evidence counts, not the description
- **Build the check into the schedule** – it needs time before the payment run, not after
For employees
- **Check the first payslip after any change particularly closely** – changes to pay, joiners and one-off payments are the most error-prone transactions
- **Report discrepancies promptly** – within the current year almost everything can be corrected cleanly; after that it becomes laborious
- **Keep your own documents** – the employment contract, side agreements and evidence are what the check is made against
10. Conclusion
The four-eyes principle is the simplest effective control a payroll operation can have – and at the same time the one that is dropped first under deadline pressure. It depends on two conditions: the separation must be anchored technically rather than merely agreed, and the second person must check against the source, not against the screen. Where both are in place, errors are found before payment. Where they are missing, a formal approval mainly produces a feeling of security.
For an international group, the second condition is where a group workflow tends to fail. An approval step in a shared system records that someone clicked; it does not record that anyone checked against the employment contract. And in a small German subsidiary a genuine separation usually cannot be staffed at all – which makes an external second view the honest answer rather than a separation that exists only on the organisation chart.
Sources
- Financial reporting and auditing (opens in a new tab)
- Internal audit standards (opens in a new tab)
- IT baseline protection (IT-Grundschutz) (opens in a new tab)
Related terms
Our promise
Software supports. People take responsibility.
Let us talk about your payroll – no strings attached, specific, and with a dedicated contact from day one.