Select the set of concepts relating to enterprise risk management that are not considered within internal control but viewed as preconditions of internal control.

Group of answer choices

1) "The control environment, risk assessment, control activities, information and communication, and monitoring activities"

2) "The control environment, risk appetite, control activities, information and communication, and monitoring activities"

3) "Risk appetite, tolerance, strategy, and objectives"

4) "Risk assessment, budgeting, tolerance, strategy, and objectives"