The Security Officers Management and Analysis Project's site (https://www.somap.org) contains a portfolio of sub-projects that make up the Open Source IT Risk Management project:

1. The Open Risk and Compliance Tool
2. The Open Risk and Compliance Framework
3. The Open Risk Model Repository
4. The Open Governance, Risk, and Compliance Maturity Management Methodology