528 No. 41 of 2021] Electronic Government PART V INFORMATION SYSTEMS SECURITY 25. The Division shall establish the Public Key Infrastructure for public bodies. Security of information 26. A public body shall, in accordance with information security standards issued by the Division— (a) develop and enforce security measures to safeguard information collected or used in connection with egovernment services from unauthorised disclosure; and (b) take reasonable steps to ensure that every officer of the public body concerned with delivering services or collecting, placing, positing or disseminating information or services is aware of and complies with the security measures regarding the management and protection of information. Access to and sharing of information Act No. 3 of 2021 27. (1) Subject to this Act, a public body may in the provision of Government services share with a private body information in accordance with the Data Protection Act, 2021. Audit of public body 28. (1) The Division may cause audits of a public body to be performed to evaluate compliance with the provisions of this Part. (2) An audit under subsection (1) may be performed by an inspector or an independent auditor. (2) The access to information shall be in accordance with the user rights and access levels as prescribed. (3) The Division shall, where an audit reveals that a public body has contravened any provision of this Act, notify the public body in writing, stating the— (a) finding of the audit report; (b) action required to remedy the non-compliance; and (c) period within which a public body shall take the remedial action.