Laws of Malaysia 24 ACT 562 Recognition of other licences 19. (1) The Commission may recognize, by order published in the Gazette, certification authorities licensed or otherwise authorized by governmental entities outside Malaysia that satisfy the prescribed requirements. (2) Where a licence or other authorization of a governmental entity is recognized under subsection (1),— (a) the recommended reliance limit, if any, specified in a certificate issued by the certification authority licensed or otherwise authorized by the governmental entity shall have effect in the same manner as a recommended reliance limit specified in a certificate issued by a licensed certification authority of Malaysia; and (b) Part V shall apply to the certificates issued by the certification authority licensed or otherwise authorized by the governmental entity in the same manner as it applies to a certificate issued by a licensed certification authority of Malaysia. Performance audit *20. (1) The operations of a licensed certification authority shall be audited a least once a year to evaluate its compliance with this Act. (2) The audit shall be carried out by a certified public accountant having expertise in computer security or by an accredited computer security professional. (3) The qualifications of the auditors and the procedure for an audit shall be as may be prescribed by regulations made under this Act. (4) The Commission shall publish in the certification authority disclosure record that it maintains for the licensed certification authority concerned the date and result of the audit. *NOTE—The Central Bank of Malaysia is exempted from the requirements of this section for the purpose of implementing the Real-Time Electronic Transfer of Funds and Securities System or also known as “RENTAS”—see P.U. (A) 300/1999.