Acceptable Risk (Documented)

Because "documented" isn't a mitigation strategy