Consider the following statements: I. Aligning risk appetite and strategy-Helps manage the uncertainty with consideration of the goals of the organization. II. Enhancing risk response decisions-Improves the ability to make better decisions about how to manage risk. III. Reducing operational surprises and losses-Enhances the organization's ability to identify potential events or threats and react appropriately. The above are all key components of: a. CAG b. ERM c. GAPP d. NCP