What are the major functions, duties and powers of a Controller as per Electronic Transaction Act, 2063?

The Controller (Office of Controller of Certification) under the Ministry regulates digital signatures and CAs. Consistent with Gazetted-Second paper.

Functions/duties/powers:

1. License CAs — Grant, renew, suspend/cancel certificates to issue digital signatures; unlicensed operation prohibited.
2. Supervise CAs — Inspect security, key storage, staff; order corrections.
3. Set standards — Asymmetric crypto, hash, secure devices for legally valid signatures (Sec 10).
4. Trust repository — Maintain central records of CAs, issued/suspended/revoked certificates for public verification.
5. Investigate and punish — Inquire into misuse/breach; suspend licenses, recommend prosecution for hacking/fraud (fine/imprisonment under Ch. 9).
6. Advise and promote — Guide government on e-transactions, support e-governance/e-commerce, coordinate police/courts on digital evidence.

One line: Controller = NRB of digital trust — without it, online hospital billing and e-tender have no legal base.