Businesses can manage open-source software risks by regularly updating software, implementing proper code review processes, working with reputable vendors, conducting risk assessments, educating employees, and implementing supply chain management practices. Outsourcing to a managed service provider that specializes in open-source software security can also be beneficial for businesses without in-house expertise.