Alongside the risk register, you also need to maintain an active ‘issues list’, which includes all those risks which have already happened, and therefore become issues, and how you are managing them. This may be the same as the original mitigation, or it may require different action now the event has definitely happened.