To obtain greater assurance about the effectiveness of pharmacy benefit managers' internal controls and compliance with state requirements, the commission shall:
(1) periodically audit each pharmacy benefit manager that contracts with a managed care organization; and
(2) develop, document, and implement a monitoring process to ensure that managed care organizations correct and resolve negative findings reported in performance audits or agreed-upon procedures engagements of pharmacy benefit managers.