Centre for Information System Auditing

Introduction

During the last few years, technological landscape of Government of Pakistan has dramatically changed. Accounting and budgeting systems have been computerized on SAP/R3 ERP software and integrated through IT interventions; impressive work has been done in automation of taxes, National ID cards and passports. Huge IT infrastructure comprising LANs and WANs has been set up to ensure effective communication in a reliable automated environment.
In view of these developments, the Centre for Information System Auditing was established in April, 2011 at PAAA Lahore as per directive of the Auditor General of Pakistan. The purpose of this Centre is:
 

• Building and Developing Capacity of Department of the Auditor General of Pakistan in the field of Information System Auditing.

• Equip personnel of the DAGP with the skills to use latest IT tools to bring in efficiency, economy and effectiveness within the department.

• Build capacity to undertake audits in the computerized environments.

• Continuous research and development in the field of IS Auditing.

 
cisa lab

Courses Offered

 

i) CISA Course:

The main objective of the training is to familiarize participants with the theoretical concepts of IS Auditing and to impart training on IS audit process, know about information systems, IS controls and evaluate areas such as IT Governance, Security of Information Assets, Business Continuity and Disaster Management. Application of CAATs for effective desk audit and data analysis as well as IS Auditing controls, checklists of guidelines in different I.T areas. The course is designed as per prescribed criterion by ISACA for CISA exam. The advance level courses cover Network Security of Penetration Testing, Ethical Hacking, Advance Information Security, Database Audit, Web Server Audit etc.

ii) Audit Command Language (ACL):

The course is designed to enable the auditors to understand basic concepts used in ACL which to employ ACL to analyze data which resultantly add value to audits. While attending the two weeks course on ACL, the participants have the opportunity to understand the data analysis cycle, the methodologies used in data access, verifying data integrity, create expressions and apply data analysis commands in the light of relevant rules and regulations to identify data anomalies. In addition, the participants are given practical exposure to extract data from SAP R/3 system (both HR and FI), upload it in ACL and perform data analysis.

iii) SAP-R/3:

SAP-R/3 is the software being used by the Controller General of Accounts for purpose of preparing accounts. The courses for Accounts Officers are designed on SAP-R/3 FI & HR modules. The main purpose of the courses is that the participants should acquire user level understanding of the FI and HR modules. The course provided them opportunity to get hands on experience so that they may become proficient in components such as payroll, hiring, GP fund, Pension, prepare Monthly Civil Accounts and Annual Accounts and generate necessary reports related to both modules.

iv) Basic IT/MS IT Office:

One week IT courses are conducted for BS 11-17 officers. The participants are given opportunity to develop an understanding of computer hardware and software. The course further helps them in developing skills in MS Office applications such as MS Word, Excel and MS PowerPoint.


Training Facilities

 

i) A state of the art computer lab comprising 25 computers has been established as per part of the Centre for Information System Auditing at Lahore. In addition a class room having seating capacity of 25 people has been constructed.

ii) A computer lab comprising 30 computers was also been functioning in PAAA since 2005 to conduct computer based short courses like ACL, SAP-R/s, Comprehensive Computer Practical Training (C.C.P.T) and Basic I.T courses. This lab has also been brought under the ambit of the CISA Centre.

 

PAAA, Lahore-Calendar 2025-2026 at a Glance (IT & CISA Wing)

Sr.#Course TitleDuration
 July-25
1.MS Office (Word, Excel, PowerPoint)3 Days
2.MCMC (Domain Specific) AMIS / Data Analytics5 Days
 Aug-25
3.Computer Competency Practical Training (CCPT)20 Days
 Sep-25
4.Qlik Sense2 Days
 5.SAP ( HR & FI )2 Days
 Oct-25
6.Preparatory Course on CISA (IS Audit)5 Days
7.STP SAP (HR/FI) Qlik Sense / AMIS Course for 52nd STP10 Days
 Nov-25
8.Understanding Data Biases and Mitigation Strategies (CPD Mandatory)2 Days
9.Cloud Computing5 Days
 Dec-25
10.Audit Management Information System (AMIS)2 Days
11.MCMC (Domain Specific) AMIS / Data Analytics5 Days
 Jan-26
12.MS Project4 Days
 Feb-26
13.Data Literacy and Analytics Using MS Power BI3 Days
 Mar-26
.
 Apr-26
14.Data Mining2 Days
 May-26
15.MCMC (Domain Specific) AMIS / Data Analytics5 Days
16Cyber Security and Data Protection2 Days
 June-26
 17.Computer Competency Practical Training (CCPT)20 Days