The failed control is reauthorization. The employee’s job responsibility changed when another accountant became responsible for one of the business units, but the senior payroll accountant’s access rights remained unchanged. A reauthorization or access recertification control should periodically confirm that existing access is still appropriate based on current job duties. Authorization controls are involved when access is initially approved, but this scenario concerns access that should have been reviewed and adjusted after responsibilities changed. Authentication controls verify identity, not whether access remains appropriate. Segregation of duties may be relevant to payroll access design, but the specific failure described is the unchanged access rights attestation. Therefore, Option A is correct.