offending act or conduct. (4) Where the Controller is satisfied that the measures under subsection (3) are not sufficient, the Controller may— (a) suspend the licence, registration or recognition for a specified period; or (b) revoke the licence, registration or recognition. 14. Surrendering a licence, registration or recognition (1) A licensee or recognized certification service provider, repository provider or date and time stamp service provider may discontinue providing services and surrender the licence, registration or recognition (a) in the case of a certification service provider, after notifying subscribers listed in valid certificates issued by the certification service provider; (b) in the case of provider of repository services, after notifying certification service providers for which any certificates have been published; after making arrangements for the secure preservation of the records of the provider; in a manner that will cause minimal disruption to the subscribers of valid certificates and to relying parties. (2) A certification service provider, repository or date and time stamp provider shall surrender the licence, registration or recognition under sub regulation (1) after the Controller is satisfied that the conditions specified in this regulation have been complied with. (3) The notifications referred to in sub regulation (1) shall be in the form specified in Schedule 1. PART IV- CERTIFICATION SERVICE PROVIDERS 15. Particulars of certification service provider disclosure records (1) For the purposes of section 21(3) of the Act the disclosure records of every licensed or recognized certification service provider shall contain (a) a statement that the certification service provider disclosure record