You are managing a government IT project following predictive methodologies. During a phase gate review at the end of the design phase, the project governance board expresses concern that several technical risks identified in the risk register have not been actively managed, though none have materialized yet. The board notes that risk response plans were documented during planning but asks for evidence of ongoing risk monitoring activities. Your risk register has not been updated in six weeks. How should you address this situation moving forward?