Correct Answer: B
The statement"Regardless of role, everyone in the organization should receive the same curriculum and the same education activities to ensure consistent understanding"isFALSEbecause education plans must betailoredto the specific roles, responsibilities, and risks associated with different job functions.
* Why Tailored Education is Necessary:
* Different roles have distinct responsibilities and exposure to risks.
* A one-size-fits-all approach is inefficient and may not address critical role-specific needs.
* Why Other Statements are True:
* A: Education plans should address the specific GRC responsibilities of target populations.
* C: Needs assessments identify high-risk areas and ensure targeted training.
* D: Legal mandates often specify education requirements for compliance.
References:
* OCEG GRC Capability Model: Recommends role-specific training plans for effective GRC implementation.
* ISO 37301 (Compliance Management Systems): Highlights the importance of needs assessments and tailored training.