Beverly Finch is an Executive Program Manager leading Lenovo's PSIRT from its inception just over 3 years ago. She has a passion for collaborating with industry peers to establish best practices in the area of vulnerability management and communications. Beverly is on MITRE's CVE Board and is currently chairing FIRST's Vendor SIG.Many PSIRTs have multiple brands and many products which are comprised of hundreds of components. Each component has hundreds (or thousands) of 3rd party source code/open source code with vulnerabilities reported every day. Exactly how does a PSIRT document, assign and track all this complexity? Handling large amounts of information across numerous vulnerabilities and communicating with everyone who needs the information can be tricky! In this presentation, you will see how Lenovo has matured over the course of 3 years from tracking a few vulnerabilities in spreadsheets to Jira ticketing and then most recently to an integrated Jira + database solution.