Audit of the Information Systems and Accounts of Authorised Service Provider and authorised agents.

(1) The Director of Electronic Service Delivery shall cause an audit to be conducted of the records and accounts of the Authorised Service Providers and their authorised agents in the State at such intervals as deemed necessary by an agency empanelled as an information security auditing organization. (2) The audit referred to in sub-rule (I) may cover aspects such as security, confidentiality and privacy of information, the functionality and performance of any application software used in the electronic delivery of services and the accuracy of accounts kept by the Authorised Service Providers and their authorised agents. (3) It shall be incumbent on the Authorised Service Provider and their authorised agents to provide such information and assistance to the audit agencies appointed by the Director of Electronic Service Delivery to comply with the directions given by the audit agencies and to rectify the defects and deficiencies pointed out by the audit agencies.