This nice article on ROAM explains the acronym to be used to manage a risk:.
https://www.linkedin.com/pulse/what-does-mean-own-risk-shawn-yates-csm-spc/
| Resolved | The risk can be completely or partially avoided. If partial resolution, there is a residual risk |
| Owned | The risk is not fully resolved/accepted/mitigated. Someone is assigned to work on it. |
| Accepted | We accept to take the (residual) risk. |
| Mitigated | Mitigation is what we will do if the risk happens in order to reduce the impact |