In view of these developments, the Centre for Information System Auditing was established in April, 2011 at PAAA Lahore as per directive of the Auditor General of Pakistan. The purpose of this Centre is:
• Developing Capacity of Department of the Auditor General of Pakistan in the field of Information System Auditing.
• Continuous research and development in the field of IS Auditing.
i) CISA Course:
The main objective of the training is to familiarize participants with the theoretical concepts of IS Auditing and to impart training on IS audit process, know about information systems, IS controls and evaluate areas such as IT Governance, Security of Information Assets, Business Continuity and Disaster Management, Application of CAATs for effective desk audit and data analysis as well as IS Auditing controls, checklists of guidelines in different I.T areas. The course is designed as per prescribed criterion by ISACA for CISA exam. The advance level courses cover Network Security of Penetration Testing, Ethical Hacking, Advance Information Security, Database Audit, Web Server Audit etc.
ii) Audit Command Language (ACL):
The course is designed to enable the auditors to understand basic knowledge of ACL, the concepts used in ACL and to employ ACL to analyze data and add value to audits. While attending the two weeks course on ACL, the participants have the opportunity to understand the data analysis cycle, the methodologies used in data access, verifying data integrity, create expressions and apply data analysis commands in the light of relevant rules and regulations to identify data anomalies. In addition, the participants are given practical exposure to extract data from SAP R/3 system (both HR and FI), upload it in ACL and perform data analysis.
SAP-R/3 is the software being used by the C.G.A for purpose of preparing accounts. The courses for Accounts offices are designed on SAP-R/3 FI & HR modules. The main purpose of the courses is that the participants should acquire user level understanding of the FI and HR modules. The course provided them opportunity to get hands on experience so that they may become proficient in components such as payroll, hiring, GP fund, Pension, prepare Monthly Civil Accounts and Annual Accounts and generate necessary reports related to both modules.
iv) Basic IT/MS IT Office:
One week IT courses are conducted for BS 11-17 officers. The participants are given opportunity to develop an understanding of computer hardware and software. The course further helps them in developing skills in MS Office applications such as MS Word, Excel and MS PowerPoint.