What is two-person integrity and how does it apply to personnel records?

• A. A policy requiring two people to sign every email.
• B. The practice of requiring two authorized personnel to review/approve sensitive actions to prevent error or fraud.
• C. A procedure for backup data storage.
• D. An audit process used only for financial records.

Answer: (B)

Two-person integrity is a control that requires two independent authorized people to review and approve sensitive actions, creating a check against mistakes and fraud. In personnel records, this means any important change—such as updating pay rates, adjusting benefits, changing access permissions to systems, or recording terminations—must be approved by two distinct individuals. This dual-approval process helps catch errors, ensures the change reflects true intent, and creates an audit trail showing who reviewed and signed off on the action. For example, a proposed salary adjustment would need both a supervisor and a payroll/HR administrator to approve it before the change is made, so no single person can alter critical data alone. This concept isn’t about signing every email, backing up data, or conducting audits of financial records; it’s about enforcing dual authorization for high-risk actions to protect confidential personnel information.