How do I track technology risks and fixes in one place?

Use one risk and action register with a clear owner, severity, due date, status, and evidence of closure. Link related vulnerabilities, audit findings, vendor issues, or system changes to the same record when possible. Review overdue high-risk items regularly instead of keeping separate lists in email and spreadsheets.