(1) The Controller may conduct or cause to be conducted performance audit of the Certifying Authority in each year.
(2) The Controller may, for the purpose of the performance audit referred to in Sub-section (1), appoint any recognized auditor, who has
expertise in computer security or any computer expert.
(3) The Controller shall publish the report of the performance audit in the electronic form made under Sub-section (1) by maintaining in his/her
computer database.
(4) The qualification of the performance auditor or remuneration and the procedures of such audit shall be as prescribed.
(5) The Controller shall fix the standard of the service of Certifying Authority and publish a notice thereof publicly for the information to the
public-in-general.