A. Mitigating risk, and the risk register should be updated
B. Accepting risk, and the risk review document should be updated
C. Avoiding risk, and the risk review document should be updated
D. Exploiting risk, and the risk register should be updated.