(a) Except as provided by Subsection (a-1), the commission shall review the personnel policies and procedures of each state agency on a six-year cycle to determine whether the policies and procedures comply with this chapter.
(a-1) The commission by rule shall develop risk-assessment criteria for determining the circumstances under which the commission may conduct a review of the personnel policies and procedures of a state agency more frequently than required by Subsection (a). The risk-assessment criteria must include:
(1) data on complaints against a state agency;
(2) previous review findings; and
(3) any other related information collected and maintained by the commission.

(b) The commission by rule shall establish a system to stagger the reviews of state agency personnel policies and procedures required under this section.
(c) If the commission determines that the personnel policies and procedures of a state agency do not comply with this chapter, the commission shall recommend appropriate revisions to the personnel policies and procedures.
(d) The state agency shall take these recommendations into consideration and determine whether to revise the personnel policies and procedures.
(e) The review of a state agency’s personnel policies and procedures shall be completed within one year.