(1) The controller may conduct an examination of the performance of the certifying body every year.
(2) The controller may appoint a recognized auditor or a computer expert who has expertise in computer security to test the execution of work as per sub-section (1).
(3) The controller shall publish the report of the performance test conducted in accordance with sub-section (1) in electronic form based on his computer data.
(4) The qualification, remuneration and procedure of the examination of the examiner who conducts the performance test shall be as prescribed.
(5) The controller shall determine the service level of the certifying body and publish the information publicly for the information of the general public.