Section 22(1) in U.P. Information Technology (Electronic Service Delivery) Rules, 2016
(1)The Director of Electronic Service Delivery shall cause audit to be conducted of the records and accounts of the Authorised Service Providers and` their Authorised Agents in the State at such intervals as deemed necessary by an agency empanelled as an information security auditing organisation.
