Recommend you use ticketing systems you already use such as Jira or you may use a specialized tool such as ThreadFix - https://code.google.com/p/threadfix/. +# '''Utilize Bug Tracking/Ticketing System''' - Enter the vulnerability information into a bug tracking system for tracking purposes and metrics.