Which statement is FALSE? *

• Everyone in the organization should receive the same training and education about the GRC capability to ensure consistent understanding
• The organization should conduct a needs assessment to determine training that will address high risk situations and develop a training plan for each job or job family
• The organization should identify legally mandated education including who must be educated, the content required, the time required and methods that may be used for each required course
• The organization should have an awareness and education plan for each target population indicating what they should know about the GRC capability and their responsibilities for GRC activities