Every year, the Auditor General of Pakistan presents hundreds—often thousands—of audit observations highlighting irregular expenditure, weak financial controls, unauthorized payments, procurement violations, un-reconciled accounts, idle assets, and non-recovery of government dues. These observations, commonly known as audit paras, find their way into annual audit reports, are discussed in Departmental Accounts Committees (DACs), and eventually reach the Public Accounts Committee (PAC).

Yet a fundamental question remains unanswered: why do the same audit observations continue to reappear year after year?

If public sector entities are being audited annually, why are the underlying weaknesses not being corrected? Why do ministries and departments repeatedly commit identical financial management mistakes despite decades of audits, circulars, manuals, and financial rules?

The answer lies not in the quality of audit itself, but in the broader ecosystem of governance, accountability, institutional incentives, and internal financial management.

47
Federal audit reports listed for audit year 2024–25
The Auditor-General’s published report catalogue shows the scale of the oversight pipeline. The harder question is whether findings change the systems that produced them.

An Audit Observation Is a Symptom, Not the Disease

An audit para is often viewed as an isolated error—an unauthorized payment, a procurement irregularity, an unsupported expenditure, or an accounting omission.

In reality, however, every audit observation represents a symptom of a deeper institutional weakness.

For example, an audit observation on procurement may actually indicate:

  • weak planning;
  • inadequate segregation of duties;
  • absence of procurement oversight;
  • poor documentation practices;
  • ineffective internal audit; or
  • lack of management supervision.

Similarly, an observation regarding non-recovery of government dues rarely reflects a single administrative oversight. Instead, it may expose systemic weaknesses in billing systems, enforcement mechanisms, legal follow-up, and financial monitoring.

Focusing solely on settling an audit para without addressing its underlying cause is akin to treating a fever without diagnosing the infection.

The repeat-para cycle
A PublicFinance.pk analytical framework
01 · Before auditControl
weakness
02 · TransactionIrregular
expenditure
03 · External auditAudit
observation
04 · ResponseReply or
settlement
05 · Follow-upPartial
correction
06 · Next yearRepeat
observation
The cycle is an explanatory model, not a measured annual series. It shows why administrative closure can coexist with continued control failure.

The Compliance Mindset

One of the biggest reasons audit paras survive is the culture of compliance rather than correction.

Many departments regard audit as an annual event rather than a continuous management function. Once an audit report is issued, considerable effort is devoted to preparing replies, collecting missing documents, obtaining post-facto approvals, or defending existing practices.

Success is frequently measured by the number of audit paras “settled” instead of the number of weaknesses permanently eliminated.

As a result, departments often become proficient at answering auditors rather than improving financial management systems.

Weak Internal Controls

Internationally, organizations rely on internal controls to prevent irregularities before they occur.

These include:

  • authorization procedures;
  • segregation of duties;
  • supervisory reviews;
  • reconciliations;
  • budgetary controls;
  • physical verification of assets; and
  • continuous monitoring.

Where these controls operate effectively, audit observations naturally decline.

Unfortunately, in many public institutions, internal controls exist on paper but are inconsistently implemented.

Routine reconciliations remain pending for months. Asset registers are incomplete. Procurement committees function irregularly. Supporting documentation is poorly maintained. Budgetary controls are overridden under administrative pressure.

When preventive controls fail, auditors merely document the consequences.

Prevention sits upstream of the audit report
Control layers that should stop an irregularity before external audit
Framework reference: Public Finance Management Act 2019, amended through 30 June 2024, including commitment control, principal accounting officer responsibility and internal audit provisions.
This is a control map, not a scorecard. The farther a weakness travels before detection, the more likely the system is recording a consequence rather than preventing a loss.

Internal Audit: An Underutilized Defence Mechanism

Across advanced public financial management systems, internal audit serves as management’s independent assurance function.

Its objective is not merely to identify irregularities but to evaluate risk management, governance, and internal controls before external auditors arrive.

However, internal audit remains underdeveloped in many public sector entities.

In some organizations, internal audit units lack independence.

In others, staffing remains inadequate or personnel possess limited professional training.

Frequently, internal audit focuses on checking vouchers instead of assessing systemic risks.

Consequently, management loses an important opportunity to identify and resolve weaknesses proactively.

Accountability Often Ends with the Audit Report

Another significant challenge lies in the follow-up process.

Once audit reports are finalized, observations proceed through DAC meetings and eventually, in selected cases, reach the PAC.

Yet implementation of agreed corrective actions is often slow.

Departments change leadership.

Financial managers are transferred.

Institutional memory is lost.

Recommendations remain partially implemented or forgotten altogether.

Without structured monitoring of agreed corrective actions, the same weaknesses simply reappear in subsequent audits.

The cycle repeats.

The Human Factor

Financial management systems ultimately depend on people.

Frequent transfers of finance officers, inadequate professional development, shortages of qualified accountants, and limited understanding of public financial management frameworks all contribute to recurring weaknesses.

New officers frequently inherit unresolved audit observations without sufficient briefing or ownership.

Moreover, performance evaluation systems rarely reward improvements in financial governance.

Managers are assessed primarily on project delivery or expenditure utilization rather than the quality of financial controls.

Consequently, prevention receives less attention than spending.

Technology Alone Cannot Solve the Problem

Governments worldwide have invested heavily in Integrated Financial Management Information Systems (IFMIS), Enterprise Resource Planning (ERP) systems, and digital procurement platforms.

Pakistan has similarly expanded automation across budgeting, accounting, payroll, and treasury functions.

These systems undoubtedly reduce manual errors and improve transparency.

However, technology cannot compensate for weak governance.

A sophisticated financial system can still produce poor outcomes if users bypass established procedures, approvals remain ineffective, reconciliations are ignored, or management fails to act on warning signals.

Digital systems are powerful tools—but only when supported by disciplined financial management.

From Individual Audit Paras to Root Cause Analysis

Perhaps the most significant reform required is a change in perspective.

Instead of asking:

“How do we settle this audit para?”

Departments should ask:

“Why did this happen in the first place?”

Every recurring audit observation should trigger a structured root cause analysis.

For example:

  • Why were procurement rules repeatedly violated?
  • Why are advances remaining outstanding?
  • Why are bank reconciliations delayed?
  • Why are recoveries not pursued?
  • Why do unsupported expenditures continue?

Only after answering these questions can lasting solutions emerge.

This approach shifts attention from paperwork to performance.

What Good Organisations Do Differently

Leading public sector institutions around the world treat audit reports as management improvement tools rather than compliance documents.

Common features include:

  • executive ownership of audit recommendations;
  • centralized monitoring of corrective actions;
  • risk-based internal audit plans;
  • periodic review of repeat observations;
  • mandatory timelines for implementation;
  • continuous professional training; and
  • strong oversight by audit committees.

Importantly, these organizations analyse trends rather than isolated observations.

If the same weakness appears repeatedly, management investigates the underlying system—not merely the individual transaction.

Breaking the Cycle

Reducing repeat audit observations requires more than stricter audits.

It requires stronger institutions.

Several practical reforms deserve consideration:

  • Establish electronic tracking systems for implementation of audit recommendations.
  • Strengthen Departmental Accounts Committees through regular meetings and documented follow-up.
  • Modernize internal audit using risk-based methodologies aligned with international standards.
  • Introduce key performance indicators relating to financial governance and control effectiveness.
  • Conduct mandatory root cause analysis for significant repeat observations.
  • Strengthen professional capacity in accounting, procurement, and financial management.
  • Use data analytics within IFMIS to identify emerging control weaknesses before year-end.
  • Ensure senior management personally reviews recurring audit findings and approves corrective action plans.

None of these reforms is revolutionary.

Together, however, they can substantially reduce recurring irregularities.

Audit Should Improve Government—Not Merely Report on It

Public sector auditing was never intended simply to identify errors after public money has already been spent.

Its broader purpose is to strengthen governance, improve accountability, and enhance the stewardship of public resources.

An audit report should therefore be viewed as a management roadmap rather than a catalogue of failures.

If the same audit paras continue appearing year after year, the problem is no longer one of compliance—it is one of institutional learning.

Pakistan possesses comprehensive financial rules, increasingly sophisticated accounting systems, experienced auditors, and an established parliamentary oversight mechanism. The next stage of reform is to ensure that these components operate as an integrated system focused on continuous improvement rather than periodic compliance.

Only then will audit observations cease to become annual rituals and instead become catalysts for lasting public sector reform.

The true measure of success is not the number of audit reports produced, nor the number of audit paras settled. It is the number of weaknesses that never appear again. That is the hallmark of a mature public financial management system—and the benchmark toward which Pakistan’s public sector should aspire.

Sources

PublicFinance.pk Editorial Notice

© 2026 PublicFinance.pk. All rights reserved. This article belongs to PublicFinance.pk. Reproduction, republication or redistribution of this work is not permitted without prior written permission.