(b) Undergo and pass an initial audit; and
(c) Fulfill other requirements relating to qualification, expertise, manpower,
financial resources and infrastructure facilities necessary to issue an advanced
electronic signature certificate as may be prescribed by the Commission from time
to time.
5. Recognition of foreign certification service Providers.
(1) The Commission may recognize a foreign certification service provider as a
certification service provider for the purposes of these Regulations, where the
foreign certification service provider—
(a) Is duly licensed or authorized by the relevant government authority in the
country in which it operates;
(b) Complies with internationally acceptable standards and requirements under the
Act and these Regulations; and
(c) Has established a local agent to provide the certification services in Kenya.
(2) A certificate issued by a certification service provider recognized under
paragraph (1) shall be valid for the purposes of the Act and these Regulations.
(3) Where the Commission is satisfied that a foreign certification service provider
has contravened any of the conditions and restrictions of recognition under
paragraph (1), it may revoke the recognition.
6. Certification practice statement.
(1) A certification service provider shall, before commencement of its operations,
prepare a certification practice statement, in accordance with these Regulations and
guidelines issued by the Commission from time to time and submit it, for approval
by the Commission.
(2) A certification service provider shall not change the certification practice
statement without the prior written approval of the Commission.
(3) A certification service provider shall specify, in its certification practice
statement-