This nice article on ROAM explains the acronym to be used to manage a risk:.
||The risk can be completely or partially avoided. If partial resolution, there is a residual risk
||The risk is not fully resolved/accepted/mitigated. Someone is assigned to work on it.
||We accept to take the (residual) risk.
||Mitigation is what we will do if the risk happens in order to reduce the impact