Centre for Information System Auditing


During the last few years, technological landscape of Government of Pakistan has dramatically changed. Accounting and budgeting systems have been computerized on SAP/R3 ERP software and integrated through IT interventions; impressive work has been done in automation of taxes, National ID cards and passports. Huge IT infrastructure comprising LANs and WANs has been set up to ensure effective communication in a reliable automated environment. These developments have posed a great challenge for the organisation of Auditor General of Pakistan and have the following two implications.

• Build capacity to undertake audits in the computerized environments.
• Equip personnel of the DAGP with the skills to use latest IT tools to bring in efficiency, economy and effectiveness within the department.

In view of these developments, the Centre for Information System Auditing was established in April, 2011 at PAAA Lahore as per directive of the Auditor General of Pakistan. The purpose of this Centre is:

• Developing Capacity of Department of the Auditor General of Pakistan in the field of Information System Auditing.
• Continuous research and development in the field of IS Auditing.

Courses Offered

i) CISA Course:

The main objective of the training is to familiarize participants with the theoretical concepts of IS Auditing and to impart training on IS audit process, know about information systems, IS controls and evaluate areas such as IT Governance, Security of Information Assets, Business Continuity and Disaster Management, Application of CAATs for effective desk audit and data analysis as well as IS Auditing controls, checklists of guidelines in different I.T areas. The course is designed as per prescribed criterion by ISACA for CISA exam. The advance level courses cover Network Security of Penetration Testing, Ethical Hacking, Advance Information Security, Database Audit, Web Server Audit etc.

ii) Audit Command Language (ACL):

The course is designed to enable the auditors to understand basic knowledge of ACL, the concepts used in ACL and to employ ACL to analyze data and add value to audits. While attending the two weeks course on ACL, the participants have the opportunity to understand the data analysis cycle, the methodologies used in data access, verifying data integrity, create expressions and apply data analysis commands in the light of relevant rules and regulations to identify data anomalies. In addition, the participants are given practical exposure to extract data from SAP R/3 system (both HR and FI), upload it in ACL and perform data analysis.

iii) SAP-R/3:

SAP-R/3 is the software being used by the C.G.A for purpose of preparing accounts. The courses for Accounts offices are designed on SAP-R/3 FI & HR modules. The main purpose of the courses is that the participants should acquire user level understanding of the FI and HR modules. The course provided them opportunity to get hands on experience so that they may become proficient in components such as payroll, hiring, GP fund, Pension, prepare Monthly Civil Accounts and Annual Accounts and generate necessary reports related to both modules.

iv) Basic IT/MS IT Office:

One week IT courses are conducted for BS 11-17 officers. The participants are given opportunity to develop an understanding of computer hardware and software. The course further helps them in developing skills in MS Office applications such as MS Word, Excel and MS PowerPoint.

Training Facilities

i) A state of the art computer lab comprising 25 computers has been established as per part of the Centre for Information System Auditing at Lahore. In addition a class room having seating capacity of 25 people has been constructed.

ii) A computer lab comprising 42 computers was also been functioning in PAAA since 2005 to conduct computer based short courses like ACL, SAP-R/s, Comprehensive Computer Practical Training (C.C.P.T) and Basic I.T courses. This lab has also been brought under the ambit of the CISA Centre.

PAAA, Lahore-Calendar 2016-2017 at a Glance (IT & CISA Wing)

August 2016                             Duration
1. IS Auditing 05 Days
2. MS Office 03 Days
3. SAP (HR) 03 Days
September 2016  
4. Preparatory Course for CISA (Islamabad) 15 Days
5. SAP (FI) 03 Days
October 2016  
6. Preparatory Course for CISA (Lahore) 15 Days
7. Budget Preparation with MS Excel 05 Days
November 2016  
8. IS Auditing (Islamabad) 05 Days
9. MS Excel Advance 03 Days
10. SAP (HR) 03 Days
December 2016  
11. Data Extraction 03 Days
12. MS Office 03 Days
13. SAP (FI) 05 Days
January 2017  
14. IS Auditing (Peshawar) 05 Days
15. IS Auditing (Islamabad) 05 Days
16. ACL (Foundation) 03 Days
February 2017  
17. IS Auditing (Karachi) 05 Days
18. Data Extraction 03 Days
19. Budget Preparation with MS Excel 03 Days
20. ACL (Foundation) 03 Days
March 2017  
21. Preparatory Course for CISA (Karachi) 03 Days
22. ACL (Intermediate) 03 Days
23. MS excel (Advanced) 03 Days
April 2017  
24. Preparatory Course for CISA (Lahore) 15 Days
25. ACL (Advanced) 03 Days
May 2017  
26. IS Auditing 05 Days
27. Data Extraction 03 Days