Section 2(c) in The Information Technology (Certifying Authorities) Rules, 2000
(c)"auditor" means any internationally accredited computer security professional or agency appointed by the Certifying Authority and recognized by the Controller for conducting technical audit of operation of Certifying Authority;
