SECURITY OF AND PROCESSING CONTROLS OVER INFORMATION TECHNOLOGY SYSTEMS.

The commission shall:

(1) strengthen user access controls for the commission's accounts receivable tracking system and network folders that the commission uses to manage the collection of experience rebates;

(2) document daily reconciliations of deposits recorded in the accounts receivable tracking system to the transactions processed in:

(A) the commission's cost accounting system for all health and human services agencies; and

(B) the uniform statewide accounting system; and

(3) develop, document, and implement a process to ensure that the commission formally documents:

(A) all programming changes made to the accounts receivable tracking system; and

(B) the authorization and testing of the changes described by Paragraph (A).