(a) In administering the guidelines for a comprehensive risk management program under Section 412.011(b)(4), the office must:
(1) at least biennially review the guidelines to determine whether they are appropriate and current; and
(2) at least every five years, update the guidelines to be consistent with up-to-date industry best practices and current law.
(b) In updating the guidelines under Subsection (a)(2), the office must solicit feedback from state entities concerning topics for inclusion in the guidelines and ways for making the guidelines more user-friendly.