SimpleRisk is an open-source tool that helps security professionals manage risk management activities. It is intended to be used by firms that cannot afford to buy governance, risk and compliance software. It replaces spreadsheets that are often used to organize data and make risk-based decisions. SimpleRisk presents the user with a risk management dashboard that presents the status of systems and teams and security technologies as well as any ongoing risk mitigation projects at the organization. An open-risk screen categorizes risks based on security policies and other factors. The tool was created by Josh Sokol, a security researcher who works as information security program owner at National Instruments.