10. A system for vulnerability risk management of an enterprise computing system, comprising: a cloud computing system employing a software-as-a-service multi-tenant architecture, having a hardware processor and a memory configured to instantiate a vulnerability risk management module and an expert system coupled to the vulnerability risk management module, the vulnerability risk management module configured to: receive from an end user a type of vulnerability; determine a list of potential vulnerabilities of the enterprise computing system based on a non-intrusive scan of the enterprise computing system for the received type of vulnerability, wherein the scan includes a scan of an asset of the enterprise computing system associated with the type of vulnerability, and wherein the scan is based on a preference of the end user regarding a specified date and time to conduct the scan; transmit the list of potential vulnerabilities to the expert system; receive from the expert system a refined list of potential vulnerabilities; and report the refined list of vulnerabilities to the end user.
10. A system for vulnerability risk management of an enterprise computing system, comprising: a cloud computing system employing a software-as-a-service multi-tenant architecture, having a hardware processor and a memory configured to instantiate a vulnerability risk management module and an expert system coupled to the vulnerability risk management module, the vulnerability risk management module configured to: receive from an end user a type of vulnerability; determine a list of potential vulnerabilities of the enterprise computing system based on a non-intrusive scan of the enterprise computing system for the received type of vulnerability, wherein the scan includes a scan of an asset of the enterprise computing system associated with the type of vulnerability, and wherein the scan is based on a preference of the end user regarding a specified date and time to conduct the scan; transmit the list of potential vulnerabilities to the expert system; receive from the expert system a refined list of potential vulnerabilities; and report the refined list of vulnerabilities to the end user. 16. The system of claim 10 , wherein the vulnerability risk management module is configured to resolve at least one vulnerability from the refined list of vulnerabilities and remove the at least one vulnerability from the refined list of vulnerabilities.