What is required for an optimal risk response?

Select an answer:

It should be a low$-$cost endeavor, properly documented, and signed off by the owner.

It should be timely, cost$-$effective, and resource$-$free.

It should be appropriate for the risk's significance, cost$-$effective, and realistic.