Custom working paperMethodology
The path through the suite
Every engagement follows the same spine. The sample changes. The statutory period changes. The order of work does not, because that is how we keep findings traceable from a payslip back to a configuration flag.
We work from Persiaran Damai, Seksyen 11, Shah Alam. Fieldwork is usually on your premises or in a locked meeting room with a controlled export. We do not require a standing user in the live payroll suite. A named, time-bound read access for the sample period is enough, plus the interface files that were actually submitted.
Scoping letter
You send a redacted register extract, the name of the payroll processing suite and version, and the period you want reviewed. We reply with a letter that names the services, the sample size, the days on site, the fee, and what we will not do — including any statutory audit opinion that belongs to another firm.
Walkthrough
Payroll walks us through a live hire, a live pay run, and a live statutory interface job. We take notes against the screens, not against a vendor brochure. If a control exists only in a procedure manual, we record it as a compensating check, not as an application control.
Rebuild
We select the sample and rebuild gross-to-net and contributions outside the suite. Differences are written as exceptions with the wage type, the employee, the amount, and the rule we believe the suite applied.
Statutory match
The register is matched to EPF, SOCSO, EIS and PCB files, then to the bank. Residuals on leavers, wrong wage bases, and stale tax tables are classified separately so finance can fix the right layer.
Access and close
We list who can edit salaries, bank accounts, and reversals. We then issue a findings letter. You can ask us back to re-test a corrected flag; that is a short follow-on, not a new product.