(a) The commissioner:
(1) shall establish procedures for the administration of assessment instruments adopted or developed under § 39.023, including procedures designed to ensure the security of the assessment instruments; and
(2) may establish record retention requirements for school district records related to the security of assessment instruments.
(a-1) In establishing procedures under Subsection (a)(1) for the administration of assessment instruments, the commissioner shall ensure that the procedures are designed to minimize disruptions to school operations and the classroom environment. In implementing the procedures established under Subsection (a)(1) for the administration of assessment instruments, a school district shall minimize disruptions to school operations and the classroom environment.

(b) The commissioner may develop and implement statistical methods and standards for identifying potential violations of procedures established under Subsection (a) to ensure the security of assessment instruments adopted or developed under § 39.023. In developing the statistical methods and standards, the commissioner may include indicators of:
(1) potential violations that are monitored annually; and
(2) patterns of inappropriate assessment practices that occur over time.
(c) The commissioner may establish one or more advisory committees to advise the commissioner and agency regarding the monitoring of assessment practices and the use of statistical methods and standards for identifying potential violations of assessment instrument security, including standards to be established by the commissioner for selecting school districts for investigation for a potential assessment security violation under Subsection (e). The commissioner may not appoint an agency employee to an advisory committee established under this subsection.
(d) Any document created for the deliberation of an advisory committee established under Subsection (c) or any recommendation of such a committee is confidential and not subject to disclosure under Chapter 552, Government Code. Except as provided by Subsection (e), the statistical methods and standards adopted under this section and the results of applying those methods and standards are confidential and not subject to disclosure under Chapter 552, Government Code.
(e) The agency may conduct an investigation of a school district for a potential violation of assessment instrument security in accordance with the standards described by Subsection (c). Each school year, after completing all investigations of school districts selected for investigation, the agency shall disclose the identity of each district selected for investigation and the statistical methods and standards used to select the district.
(f) At any time, the commissioner may authorize the audit of a random sample of school districts to determine the compliance of the districts with procedures established under Subsection (a). The identity of each school district selected for audit under this subsection is confidential and not subject to disclosure under Chapter 552, Government Code, except that the agency shall disclose the identity of each district after completion of the audit.
(g) The state auditor may conduct a risk-based audit of a school district at any time to ensure the security of assessment instruments administered under § 39.023 in the district.