Section 8(2) in The Information Technology (Electronic Service Delivery) Rules, 2011
(2)The audit may cover aspects such as the security, confidentiality and the privacy of information, the functionality and performance of any software application used in the electronic service delivery and the accuracy of accounts kept by the service providers and authorised agents.
