1. A computer-implemented method for vulnerability risk management of an enterprise computing system, comprising the steps of: instantiating, by a cloud computing system employing a software-as-a-service multi-tenant architecture, a vulnerability risk management module and an expert system coupled to the vulnerability risk management module, the vulnerability risk management module configured for: receiving from an end user a type of vulnerability; determining a list of potential vulnerabilities of the enterprise computing system based on a non-intrusive scan of the enterprise computing system for the received type of vulnerability, wherein the scan includes a scan of an asset of the enterprise computing system associated with the type of vulnerability and wherein the scan is based on a preference of the end user regarding a specified date and time to conduct the scan; transmitting the list of potential vulnerabilities to the expert system; receiving from the expert system a refined list of potential vulnerabilities; and reporting the refined list of vulnerabilities to the end user.
1. A computer-implemented method for vulnerability risk management of an enterprise computing system, comprising the steps of: instantiating, by a cloud computing system employing a software-as-a-service multi-tenant architecture, a vulnerability risk management module and an expert system coupled to the vulnerability risk management module, the vulnerability risk management module configured for: receiving from an end user a type of vulnerability; determining a list of potential vulnerabilities of the enterprise computing system based on a non-intrusive scan of the enterprise computing system for the received type of vulnerability, wherein the scan includes a scan of an asset of the enterprise computing system associated with the type of vulnerability and wherein the scan is based on a preference of the end user regarding a specified date and time to conduct the scan; transmitting the list of potential vulnerabilities to the expert system; receiving from the expert system a refined list of potential vulnerabilities; and reporting the refined list of vulnerabilities to the end user. 6. The method of claim 1 , wherein the software-as-a-service multi-tenant architecture includes a dual factor log-in to prevent sharing of a database between the enterprise computing system and another enterprise computing system.