Open Source Risk Management Tools

Operational risk management is mostly the discipline of keeping a register honest - every risk scored, owned, and reviewed on a cadence - and the tooling matters far less than whether anyone updates it, which is why this stays a thin open source space. The options here give you a self-hosted register for logging risks, assessments, mitigations, and controls with the scoring rules visible and adjustable, so your risk methodology is something you define rather than inherit from a vendor's fixed matrix.