Section 3(l) in The Information Technology (Certifying Authority) Regulations, 2001
(l)All changes in Certificate Policy and certification practice statement shall be published on the web site of the Certifying Authority and brought to the notice of the Controller well in advance of such publication. However any change shall not contravene any provision of the Act, rule or regulation or made
