Electronic Communications and Transactions [ N o . 21 of 2009 251 (3) For the purposes of paragraphs (b) and (c) of subsection (2), the hardware and software systems and procedures shall— (a) be reasonably secure from intrusion and misuse; (b) provide a reasonable level of availability, reliability and correct operation; (c) be reasonably suited to performing their intended functions; and (d) adhere to generally accepted security procedures. (4) For the purposes of subsection (1), where the products or s e r v i c e s are p r o v i d e d by a certification service provider, t h e A c c r e d i t a t i o n A u t h o r i t y m a y d e t e r m i n e , prior to a c c r e d i t i n g authentication products or s e r v i c e s — (a) the technical and other requirements to be met; (b) the requirements for issuing certificates; (c) the requirements for certification practice statements; (d) the responsibilities and liability of the certification service •provider; (e) the records to be kept and the manner in which, and length of time for which they must be kept; and (f) the suspension and revocation procedures. (5) The Accreditation Authority may impose any conditions or restrictions necessary for purposes of accrediting an authentication product or service. 3 1 . (1) T h e Accreditation Authority may suspend or revoke Revocation or an accreditation if it is satisfied that the authentication service suspension of provider has contravened the provisions of this A c t or failed or ceased to meet any of the requirements, conditions or restrictions subject to which the accreditation was granted or recognition given. a c c r e c (2) Subject to subsection (3), the Accreditation Authority shall not s u s p e n d or r e v o k e t h e a c c r e d i t a t i o n or r e c o g n i t i o n o f an authentication service provider unless it h a s — (a) notified the authentication service provider, in writing, o f its intention to do so; (b) given a description of the alleged breach of any of the requirements, conditions or restrictions subject to which the accreditation w a s granted or recognition was given; and l t a t l 0 n