Regulations on Required Information for Certification Practice Statements Article 24

A certification service provider shall specify the physical, procedural, and personnel security controls it adopts.
中文原文 憑證實務作業基準應載明事項準則第24條
憑證機構應於其作業基準中載明其所採行之實體、運作程序及人員安全之控管措施。

English translation for reference only; the Chinese text prevails. Not legal advice.