Indiana Code Title 4. State Offices and Administration § 4-30-6-7

Sec. 7. (a) After the first full year of ticket sales to the public, or sooner if the director considers necessary, the commission shall engage an independent firm experienced in security procedures, including computer security and systems security, to conduct a comprehensive study and evaluation of all aspects of security in the operation of the division of security.

(b) The part of the security report containing the overall evaluation of the commission shall be presented to the commission and the governor.  Any part of the security report containing information protected from disclosure by IC 5-14-3 shall not be disclosed by the commission or by the governor.

(c) After the initial security study, similar studies of security shall be conducted as the commission determines to be appropriate but at least once every two (2) years.