SimpleRisk: Enterprise risk management simplified
Written in PHP, with a MySQL database back-end, SimpleRisk was created in order to make risk management obtainable to all security practitioners, not just the ones with money to buy a GRC platform.
Due to it’s intuitive interface, this tool has actually been selected over the big name GRC tools in several instances.
The SimpleRisk Core product is free and downloadable. It should provide everything that you need in order to get started with risk management.