1. A computer-implemented method for vulnerability risk management of an enterprise computer system, comprising the steps of: receiving, by an expert system, a list of potential vulnerabilities of the enterprise computer system from a vulnerability risk management module, wherein the expert system and the vulnerability risk management module are instantiated by a cloud computing system; modifying the list of potential vulnerabilities into a refined list of vulnerabilities; and transmitting the refined list of vulnerabilities to the vulnerability risk management module.