The board by rule shall establish advisory committees under Section 2054.033 that advise the board on governing the department and cover in subject matter the department's primary functions, including at least one advisory committee for each of the following subjects:
(1) procurement under Subchapter B, Chapter 2157;
(2) the development and implementation of information security programs; and
(3) the preparation of the state strategic plan required by Section 2054.091.