(h)
Specifying the terms and conditions subject to which auditors may be appointed and
the remuneration to be paid to them;
(i)
Facilitating the establishment of any electronic system by a Certifying Authority either
solely or jointly with other Certifying Authorities and the regulation of such system;
(j)
Specifying the manner in which the Certifying Authorities shall conduct their dealings
with the subscribers;
(k)
Resolving any conflict of interests between the Certifying Authorities and the
subscribers;
(l)
Laying down the duties of the Certifying Authorities;
(m)
Maintaining a data-base containing a disclosure record in respect of every Certifying
Authority containing such particulars as may be specified by regulations, which record
shall be accessible to public.
18.(1)
The Controller shall be the repository of all Digital Signature Certificates issued under this Act.
(2)
The Controller shall —
(a)
Make use of hardware and procedures that are secure from intrusion and misuse;
(b)
Observe such other standards as may be prescribed to ensure that the secrecy and
security of digital signatures are assured.
(3)
The Controller shall maintain a computerised database of all public keys in such a manner that the
database and the public keys are available to any member of the public.
Access to computers and data
19.
The Controller may, in writing, authorise the Deputy Controller, Assistant Controller or any other officer
to exercise any of the powers of the Controller under this Part.
20.
The Controller or any officer authorised by him in that behalf may investigate any contravention of the
provisions of this Act or regulations made thereunder.
Access to computers and data
21.(1) The Controller or any person authorised by him shall. if he has reasonable cause to suspect that any
contravention of the provisions of this Act or regulations made thereunder has been committed, have access to any
computer system, any apparatus, data or any other material connected with such system, for the purpose of
searching or causing a search to be made for obtaining any information or data contained in or available to such
computer system.
(2)
For the purposes of subsection (1), the Controller or any person authorised by him, may by order, direct
any person in charge of, or otherwise concerned with the operation of the computer system, data, apparatus or
material, to provide the Controller or the person authorised with such reasonable technical and other assistance as
he may consider necessary.
8