(a) A state agency shall send its information resources deployment review to the quality assurance team for analysis.
(a-1) If the department determines that an agency's deployment decision is not in compliance with the state strategic plan, a state statute, or department rules or standards, the department shall require the agency to develop a corrective action plan that specifies the manner in which deficiencies will be corrected. The department shall report the status of corrective action plans to the state auditor and the Legislative Budget Board.
(b) Any member of the quality assurance team may report to the governor and the presiding officer of each house of the legislature that an agency's deployment decision is not in compliance with the state strategic plan, a state statute, or department rules or standards.
(c) Once every two years, the department shall conduct a limited evaluation of the information resources deployment review of at least five state agencies to verify the accuracy of those reviews. The department may limit the evaluation to review responses on subjects that represent the highest risks or greatest opportunities for improvement regarding the state agency's software, hardware, compliance, and cybersecurity.
(d) The department is not required to conduct site visits as part of the limited evaluation required by Subsection (c).
(e) The department shall use information received from the limited evaluation required by Subsection (c) to:
(1) update trainings for and outreach to information resources managers on accurately completing the information resources deployment review; and
(2) recommend information resources technology solutions to state agencies as needed.