Security Management and Risk Tracking (SMART) is a Web-based application to manage an information security program. This is a comprehensive solution that enables a corporation to manage an information security policy, security policy exception handling, security certification and accreditation, third party connection management, asset and vendor management, and issue tracking for security audit, pen testing, SOX, and so on. License: GNU General Public License v2 Changes:
This is a major update release. The biggest update is the inclusion of the PDF version of SC&A reports. The Security Certification And Accreditation (SC&A) process needs frequent reporting of risk issues in the form of documented risks. There are many other items which are simplified in this version from a usability perspective. Some changes to database schema were also made.

More...