A business accepts a low-impact risk because remediation costs exceed the expected loss. What should accompany that decision?

1. Deleting the risk from all future reviews
2. Silent closure by any help-desk employee
3. Documented acceptance by the appropriate risk owner
4. Calling the risk eliminated