Control Deficiencies

in an internal control question, the scenario is wages.

and the last para is as follows:

“the finance director reviews the list of total payments to be made as per payroll records to the list of total bank transfers”

so u had to point out the deficiency and then suggest a test of control.

my deficiency was correct that: this current review by the FD will not catch employees missed due to error or catch ghost employees. (as per answer given in kit)

but i mentioned a different test of control which was:

the payroll system shd be amended to produce an Employee Addition/Deletion report, which would highlight the employee movement and all dept heads must review this and sign off and the FD should confirm that all heads have done so and then signed off himself.

the answer in the kit was:

“the FD should on a sample basis, compare payroll records to payment list and vice versa to confirm that payments are being made only to bona fide employees”

my questions:

is my control an acceptable answer?
is it ok to suggest an enhancement in a software as a control?

thanks