Centre for Information System Auditing


During the last few years, technological landscape of Government of Pakistan has dramatically changed. Accounting and budgeting systems have been computerized on SAP/R3 ERP software and integrated through IT interventions; impressive work has been done in automation of taxes, National ID cards and passports. Huge IT infrastructure comprising LANs and WANs has been set up to ensure effective communication in a reliable automated environment.
In view of these developments, the Centre for Information System Auditing was established in April, 2011 at PAAA Lahore as per directive of the Auditor General of Pakistan. The purpose of this Centre is:

• Building and Developing Capacity of Department of the Auditor General of Pakistan in the field of Information System Auditing.

• Equip personnel of the DAGP with the skills to use latest IT tools to bring in efficiency, economy and effectiveness within the department.

• Build capacity to undertake audits in the computerized environments.

• Continuous research and development in the field of IS Auditing.

cisa lab

Courses Offered


i) CISA Course:

The main objective of the training is to familiarize participants with the theoretical concepts of IS Auditing and to impart training on IS audit process, know about information systems, IS controls and evaluate areas such as IT Governance, Security of Information Assets, Business Continuity and Disaster Management. Application of CAATs for effective desk audit and data analysis as well as IS Auditing controls, checklists of guidelines in different I.T areas. The course is designed as per prescribed criterion by ISACA for CISA exam. The advance level courses cover Network Security of Penetration Testing, Ethical Hacking, Advance Information Security, Database Audit, Web Server Audit etc.

ii) Audit Command Language (ACL):

The course is designed to enable the auditors to understand basic concepts used in ACL which to employ ACL to analyze data which resultantly add value to audits. While attending the two weeks course on ACL, the participants have the opportunity to understand the data analysis cycle, the methodologies used in data access, verifying data integrity, create expressions and apply data analysis commands in the light of relevant rules and regulations to identify data anomalies. In addition, the participants are given practical exposure to extract data from SAP R/3 system (both HR and FI), upload it in ACL and perform data analysis.

iii) SAP-R/3:

SAP-R/3 is the software being used by the Controller General of Accounts for purpose of preparing accounts. The courses for Accounts Officers are designed on SAP-R/3 FI & HR modules. The main purpose of the courses is that the participants should acquire user level understanding of the FI and HR modules. The course provided them opportunity to get hands on experience so that they may become proficient in components such as payroll, hiring, GP fund, Pension, prepare Monthly Civil Accounts and Annual Accounts and generate necessary reports related to both modules.

iv) Basic IT/MS IT Office:

One week IT courses are conducted for BS 11-17 officers. The participants are given opportunity to develop an understanding of computer hardware and software. The course further helps them in developing skills in MS Office applications such as MS Word, Excel and MS PowerPoint.

Training Facilities


i) A state of the art computer lab comprising 25 computers has been established as per part of the Centre for Information System Auditing at Lahore. In addition a class room having seating capacity of 25 people has been constructed.

ii) A computer lab comprising 30 computers was also been functioning in PAAA since 2005 to conduct computer based short courses like ACL, SAP-R/s, Comprehensive Computer Practical Training (C.C.P.T) and Basic I.T courses. This lab has also been brought under the ambit of the CISA Centre.


PAAA, Lahore-Calendar 2021-2022 at a Glance (IT & CISA Wing)

Sr.#Course TitleDuration
 1.SAP FI3 Days
 2.I.S Auditing5 Days
 3.Foundation Course on ACL and Data Extraction5 Days
 4.Intermediate Course on ACL2 Days
 5.ACL Scripting3 Days
 6.Budget Preparation with M.S Excel   el3 Days
 7.SAP (FI)3 Days
 8.Audit Sampling and Use of CAATs3 Days
 9.Auditing I.T Business Continuity Plans2 Days
 10.SAP (HR)3 Days
 11.Preparatory Course on CISA20 Days
 12.M.S Excel Advance3 Days
 13.MS Office3 Days
 14.SAP (HR)3 Days
 15.CCPT Training (100 Hours)  20 Days
 16.Budget Preparation with MS Excel3 Days
 17.ACL Course for 48th STP10 Days
 18.IS Auditing05 Days
 19.Foundation Course on ACL and Data Extraction5 Days
 20.Intermediate Course on ACL Workshop2 Days
 21.ACL Scripting3 Days
 22.Preparatory Course for CISA20 Days
 23.M S Office3 Days
 24.Foundation Course on ACL and Data Extraction5 Days
 25.Intermediate Course on ACL Workshop2 Days
 26.ACL Scripting3 Days
 27.  Information Security Audit5 Days
 28.MS Excel Advance3 Days
 29.Audit Sampling and Use of CAATs3 Days
 30.SAP Course for 48th STP10 Days
 31.CCPT Training (100 Hours)  20 Days
 32Audit of Quality Management Framework (AQMF-EY)02 Days