This nice article on ROAM explains the acronym to be used to manage a risk:.
|The risk can be completely or partially avoided. If partial resolution, there is a residual risk
|The risk is not fully resolved/accepted/mitigated. Someone is assigned to work on it.
|We accept to take the (residual) risk.
|Mitigation is what we will do if the risk happens in order to reduce the impact