No. According to the NIST guidance, in rare cases, the system owner can argue that the risk is acceptable to them and therefore it does not need to be corrected. If that risk posture is approved, it often comes with requirements to be reviewed annually thereafter to make sure that the underlying threat level isn’t greater than initially estimated.