Which of the following activities would BEST contribute to promoting an organization-wide risk-aware culture?

A. Communicating components of risk and their acceptable levels
B. Performing a benchmark analysis and evaluating gaps
C. Participating in peer reviews and implementing best practices
D. Conducting risk assessments and implementing controls