Jira, as risks naturally map on to issues, and it handles many types of custom fields. Most of us create issue types of "risk" and use them in their own risk projects for generalised risks and often within the projects for risks directly related to the project.
There are some add-ons in the marketplace that are worth a look, they can help greatly with reporting on risk.
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG