Section 31(2) in The Information Technology (Certifying Authorities) Rules, 2000
(2)[ The Certifying Authority shall conduct half yearly internal audit of the security policy, physical security, planning of its operations and the repository.] [ Substituted by G.S.R. 32(E), dated 18.1.2006 (w.e.f. 18.1.2006).]
