If you are looking for open source ERM software, you can try: SimpleRisk, Eramba, SourceForge, Open Source Risk Engine, Open Risk, and more.