In small shops I have created a simple Excel spreadsheet, updated weekly and moved on. Enterprise level your probably looking at RSA Archer or similar products that don't sound like they meet your needs.
Best advice would be to look at your last audit and follow your particular guidelines, otherwise anything I could offer would be so generic as to not be particularly helpful.
- b/eads
