Section 17(1) in The Information Technology Act, 2000
(1)The Central Government may, by notification in the Official Gazette, appoint a Controller of Certifying Authorities for the purposes of this Act and may also by the same or subsequent notification, appoint such number of Deputy ControllersAssistant Controllers, other officers and employees as it deems fit.
