(5) The Controller shall fix the standard of the service of Certifying Authority and publish a notice thereof publicly for the information to the public-in-general. 28. The Controller to have the Access to Computers and data: (1) The Controller shall, if there is a reasonable ground to suspect that provision of this Act and Rules framed hereunder has been violated, have the power to have the access to any computer system, apparatus, devices, data, information system or any other materials connected with such system. (2) The Controller may, for the purpose of Sub-section (1), issue necessary directives to the owner of any computer system, apparatus, device, data, information system or any material connected with such system or to any other responsible person to provide technical or other cooperation as he/she deems necessary. (3) It shall be the duty of the concerned person to comply with such directive issued under Sub-section (2). 29. Record to be maintained: (1) The Controller shall maintain records of all Certificates issued under this Act. (2) The Controller shall, in order to ensure the privacy and security of the digital signatures, perform following functions: (a) To use Computer Security System, (b) To apply security procedures to ensure the privacy and integrity of digital signature, (c) To comply with the standard as prescribed, (3) The Controller shall maintain and update computerized data base of all public keys in a computer system. (4) For the purpose of verification of Digital Signature, the Controller shall make available a public key to any person requesting for such a key. 17