1. A computer-implemented method for vulnerability risk management of an enterprise computer system, comprising the steps of: instantiating, by a cloud computing system, a vulnerability risk management module and an expert system coupled vulnerability risk management module, the vulnerability risk management module configured for: receiving from an end user a type of vulnerability; determining a list of potential vulnerabilities of the enterprise computer system based the received type of vulnerability; transmitting the list of potential vulnerabilities to the expert system; receiving from the expert system a refined list of potential vulnerabilities; and reporting a refined set of vulnerabilities to the end user.