Section 3(d) in The Information Technology (Certifying Authority) Regulations, 2001
(d)The Certifying Authority shall be bound to comply with all the parameters against which it was audited prior to issue of licence and shall consistently and continuously comply with those parameters during the period for which the licence shall remain valid.
