I'm looking for a fully open quantitative risk assessment methodology.
Most of the methodologies have usage or licensing restrictions placed upon them.
I define open as methodology covered by something equivalent to the Creative Commons CC BY or CC BY-SA licenses.
I've looked ar FAIR, OCTAVE, CRAMM and a few others all of which have restrictive licenses.