How do you incorporate open source into risk management?

Open source explained in plain language.

Treat open source as part of normal risk management. Look at licensing, maintenance, security, dependencies and continuity.

The risk is not that something is open source, but that use occurs unconsciously or unattended.