---
updatedAt: 2026-05-27T12:53:27.000Z
agentTools:
  projectIndex: https://developer.onetrust.com/onetrust/llms.txt
---

# Create or Update Risk

Use this API to create a new risk or update an existing one based on matching attributes. If a risk with matching attributes exists, it will be updated; otherwise, a new risk will be created.

# OpenAPI definition

```json
{
  "openapi": "3.1.0",
  "info": {
    "title": "Tech Risk & Compliance - IT Risk Management",
    "description": "The IT Risk Management API provides comprehensive REST endpoints for managing enterprise security controls, threats, vulnerabilities, and their implementations with OAuth2 security and extensive customization capabilities.",
    "version": "1.0",
    "contact": {
      "name": "OneTrust Support",
      "url": "https://my.onetrust.com/s/contactsupport"
    },
    "license": {
      "name": "Apache 2.0",
      "url": "https://www.apache.org/licenses/LICENSE-2.0"
    }
  },
  "servers": [
    {
      "url": "https://{hostname}",
      "variables": {
        "hostname": {
          "default": "hostname",
          "description": "The OneTrust hostname such as app.onetrust.com, app-eu.onetrust.com, app-de.onetrust.com, app-uk.onetrust.com, app-apac.onetrust.com, trial.onetrust.com, or uat.onetrust.com."
        }
      }
    }
  ],
  "tags": [
    {
      "name": "Risk Management",
      "description": "APIs to manage risk configurations, scoring settings, categories, and metadata used across the risk management system.",
      "externalDocs": {
        "description": "OpenAPI 3.1.0 - Download Definition",
        "url": "https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"
      },
      "x-displayName": "Risk Management"
    }
  ],
  "paths": {
    "/api/risk/v2/risks/upsert": {
      "put": {
        "operationId": "createUpdateRiskUsingPUT",
        "summary": "Create or Update Risk",
        "description": "Use this API to create a new risk or update an existing one based on matching attributes. If a risk with matching attributes exists, it will be updated; otherwise, a new risk will be created.",
        "tags": [
          "Risk Management"
        ],
        "x-onetrust": {
          "spec-label": "https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"
        },
        "parameters": [
          {
            "name": "matchAttributes",
            "in": "query",
            "description": "List of attributes to match for upsert operation",
            "required": true,
            "schema": {
              "type": "string"
            },
            "example": "name"
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskCreateRequest"
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskInformation"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request"
          },
          "401": {
            "description": "Unauthorized"
          },
          "403": {
            "description": "Forbidden"
          },
          "429": {
            "description": "Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).",
            "headers": {
              "Retry-After": {
                "schema": {
                  "description": "The number of seconds after which requests will be allowed again.",
                  "format": "int32"
                }
              },
              "ot-period": {
                "schema": {
                  "description": "The unit of time for which the rate limit applies",
                  "enum": [
                    "HOUR",
                    "MINUTE"
                  ]
                }
              },
              "ot-ratelimit-event-id": {
                "schema": {
                  "description": "The unique identifier for the rate-limiting event.",
                  "format": "uuid"
                }
              },
              "ot-request-made": {
                "schema": {
                  "description": "The number of requests made within the specified period.",
                  "format": "int32"
                }
              },
              "ot-requests-allowed": {
                "schema": {
                  "description": "The number of requests allowed within the specified period.",
                  "format": "int32"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error"
          }
        },
        "security": [
          {
            "TechRiskCompliance-Risk_OAUTH2": [
              "INTEGRATION",
              "RISK"
            ]
          }
        ]
      }
    }
  },
  "components": {
    "schemas": {
      "TechRiskCompliance-Risk_AssociatedAttributeValueInformation": {
        "type": "object",
        "properties": {
          "id": {
            "description": "Unique identifier for the attribute option",
            "type": "string",
            "format": "uuid",
            "example": "a34ccec7-1ec0-4d65-9075-bdd0d923f1d1"
          },
          "value": {
            "description": "Attribute value",
            "type": "string",
            "example": "Text Value"
          },
          "valueKey": {
            "description": "Translation key used for localizing the value",
            "type": "string",
            "example": "attribute.option.valueKey"
          },
          "colorCode": {
            "description": "Color code associated with the option. Used for score-based attributes.",
            "type": "string",
            "example": "red"
          }
        },
        "required": [
          "value"
        ]
      },
      "TechRiskCompliance-Risk_AttributeValueInformation": {
        "type": "object",
        "properties": {
          "id": {
            "description": "Unique identifier for the attribute option",
            "type": "string",
            "format": "uuid",
            "example": "a34ccec7-1ec0-4d65-9075-bdd0d923f1d1"
          },
          "value": {
            "description": "Attribute value",
            "type": "string",
            "example": "Text Value"
          },
          "valueKey": {
            "description": "Translation key used for localizing the value",
            "type": "string",
            "example": "attribute.option.valueKey"
          },
          "colorCode": {
            "description": "Color code associated with the option. Used for score-based attributes.",
            "type": "string",
            "example": "red"
          },
          "optionSelectionValue": {
            "description": "Selection score value linked to the option. Used for score-based or numerical-based attributes.",
            "type": "string",
            "example": "3.5"
          },
          "displayLabel": {
            "description": "Display name for the option, used for external attributes managed by other systems",
            "type": "string",
            "example": "United State | San Francisco"
          },
          "associatedAttributeValueInformation": {
            "description": "Associated attribute option information",
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/TechRiskCompliance-Risk_AssociatedAttributeValueInformation"
            }
          },
          "disabled": {
            "description": "Indicates whether this attribute option is currently disabled.",
            "type": "boolean",
            "example": false,
            "default": "false"
          }
        },
        "required": [
          "value"
        ]
      },
      "TechRiskCompliance-Risk_BasicEntityDetail": {
        "type": "object",
        "properties": {
          "id": {
            "description": "Unique Identifier for the Entity",
            "type": "string",
            "format": "uuid",
            "example": "e549ec16-b42a-4612-a402-3fcce7cc5f78"
          },
          "name": {
            "description": "Name for the Entity",
            "type": "string",
            "example": "Acme Corp, John Doe",
            "maxLength": 300
          }
        }
      },
      "TechRiskCompliance-Risk_BasicEntityDetailTranslation": {
        "type": "object",
        "properties": {
          "id": {
            "description": "Unique Identifier for the Entity",
            "type": "string",
            "format": "uuid",
            "example": "e549ec16-b42a-4612-a402-3fcce7cc5f78"
          },
          "name": {
            "description": "Name for the Entity",
            "type": "string",
            "example": "Acme Corp, John Doe",
            "maxLength": 300
          },
          "nameKey": {
            "description": "Name key for entity detail translation",
            "type": "string",
            "example": "entity.detail",
            "maxLength": 255
          },
          "badgeColor": {
            "description": "Badge Color of the Entity",
            "type": "string",
            "example": "New",
            "maxLength": 50
          }
        }
      },
      "TechRiskCompliance-Risk_BasicStageApproverDetails": {
        "type": "object",
        "properties": {
          "id": {
            "description": "UUID of the user",
            "type": "string",
            "format": "uuid",
            "example": "3f99b4ac-7c66-45b6-8ff4-63a67a3ec7be"
          },
          "firstName": {
            "description": "first Name of the user",
            "type": "string",
            "example": "John",
            "maxLength": 100
          },
          "lastName": {
            "description": "last name of the user",
            "type": "string",
            "example": "Doe",
            "maxLength": 100
          },
          "approvedTimeStamp": {
            "description": "time stamp when the stage was approved",
            "type": "string",
            "format": "date-time",
            "example": "32025-07-12T14:52:30.123Z"
          },
          "status": {
            "description": "status of the review",
            "type": "string",
            "example": "Accepted"
          }
        }
      },
      "TechRiskCompliance-Risk_BasicStageDetailTranslation": {
        "type": "object",
        "properties": {
          "id": {
            "description": "Unique Identifier for the Entity",
            "type": "string",
            "format": "uuid",
            "example": "e549ec16-b42a-4612-a402-3fcce7cc5f78"
          },
          "name": {
            "description": "Name for the Entity",
            "type": "string",
            "example": "Acme Corp, John Doe",
            "maxLength": 300
          },
          "currentStageApprovers": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/TechRiskCompliance-Risk_BasicStageApproverDetails"
            },
            "uniqueItems": true
          },
          "nameKey": {
            "description": "Name key for entity detail translation",
            "type": "string",
            "example": "entity.detail",
            "maxLength": 300
          },
          "badgeColor": {
            "description": "Badge Color of the Stage",
            "type": "string",
            "example": "New",
            "maxLength": 50
          }
        }
      },
      "TechRiskCompliance-Risk_EntityTypeInformation": {
        "type": "object",
        "properties": {
          "id": {
            "description": "Entity Type ID. This can be Assets, Entities, PIA, Engagement, Custom Object GUID in form of String.",
            "type": "string",
            "example": "3f99b4ac-7c66-45b6-8ff4-63a67a3ec7be"
          },
          "label": {
            "description": "Entity Type Name",
            "type": "string",
            "example": "Inventory",
            "maxLength": 512
          },
          "translationKey": {
            "description": "Translation Key of Entity Type ID",
            "type": "string",
            "example": "OBJ.Objective",
            "maxLength": 255
          },
          "seeded": {
            "description": "For Base Entity Type Seeded is true and false for Custom Object/Entity Types by default.",
            "type": "boolean",
            "example": false
          },
          "sourceType": {
            "description": "Indicates whether this type can be source type or not in Risk",
            "type": "boolean",
            "example": false
          },
          "riskType": {
            "description": "Indicates whether this type can be risk type or not in Risk",
            "type": "boolean",
            "example": true
          },
          "eligibleForEntityLink": {
            "description": "Indicates whether entity type is eligible for linking/relating with risk or not",
            "type": "boolean",
            "example": false
          },
          "enabled": {
            "description": "Indicates whether the entity type is enabled or not.",
            "type": "boolean",
            "example": false
          },
          "moduleName": {
            "description": "Name of the module",
            "type": "string",
            "example": "Objective",
            "maxLength": 255
          }
        },
        "required": [
          "id"
        ]
      },
      "TechRiskCompliance-Risk_InventoryInformation": {
        "type": "object",
        "properties": {
          "inventoryId": {
            "description": "Unique Identifier of the Inventory",
            "type": "string",
            "format": "uuid",
            "example": "57a87cd3-0a1f-4439-bd5b-917e1d23eb5c"
          },
          "inventoryName": {
            "description": "Name of the Inventory",
            "type": "string",
            "example": "Raw Materials Inventory",
            "maxLength": 2000
          },
          "inventoryType": {
            "description": "Type of the Inventory",
            "type": "string",
            "example": "VENDORS",
            "enum": [
              "ASSETS",
              "PROCESSING_ACTIVITIES",
              "VENDORS",
              "ENTITIES"
            ],
            "deprecated": true
          },
          "sourceType": {
            "description": "Type of Inventory",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_EntityTypeInformation"
          },
          "softInherited": {
            "description": "Soft Inherited flag",
            "type": "boolean",
            "example": true
          },
          "organizationId": {
            "description": "Unique Identifier of the organization",
            "type": "string",
            "format": "uuid",
            "example": "f8583fd1-21cb-4c7c-a337-2982246418e5"
          }
        }
      },
      "TechRiskCompliance-Risk_RiskCategoryInformation": {
        "type": "object",
        "properties": {
          "id": {
            "description": "Risk Category unique identifier",
            "type": "string",
            "format": "uuid",
            "example": "46c58be9-4ab9-42ca-8f49-29fec6a5fb6e"
          },
          "name": {
            "description": "Risk Category name",
            "type": "string",
            "example": "Financial",
            "maxLength": 100
          },
          "nameKey": {
            "description": "Risk Category nameKey for localization support",
            "type": "string",
            "example": "RiskCategory.Financial",
            "maxLength": 100
          },
          "seeded": {
            "description": "Seeded category",
            "type": "boolean",
            "example": false
          }
        }
      },
      "TechRiskCompliance-Risk_RiskInformation": {
        "type": "object",
        "properties": {
          "id": {
            "description": "Unique identifier for the risk",
            "type": "string",
            "format": "uuid",
            "example": "a34ccec7-1ec0-4d65-9075-bdd0d923f1d1"
          },
          "level": {
            "description": "Level for the risk",
            "type": "string",
            "example": "Low"
          },
          "probabilityLevel": {
            "description": "Probability Level for the risk",
            "type": "string",
            "example": "Low"
          },
          "impactLevel": {
            "description": "Impact Level for the risk",
            "type": "string",
            "example": "Low"
          },
          "actionId": {
            "description": "ActionId for the Risk",
            "type": "integer",
            "format": "int64",
            "example": 1
          },
          "createdBy": {
            "description": "UUId of the user who created the the risk",
            "type": "string",
            "format": "uuid",
            "example": "a34ccec7-1ec0-4d65-9075-bdd0d923f1d1"
          },
          "state": {
            "description": "State of the risk",
            "type": "string",
            "example": "REDUCED",
            "enum": [
              "IDENTIFIED",
              "RECOMMENDATION_ADDED",
              "RECOMMENDATION_SENT",
              "REMEDIATION_PROPOSED",
              "EXCEPTION_REQUESTED",
              "REDUCED",
              "RETAINED",
              "ARCHIVED_IN_VERSION"
            ],
            "maxLength": 20
          },
          "previousState": {
            "description": "Previous State of the risk",
            "type": "string",
            "example": "REDUCED",
            "enum": [
              "IDENTIFIED",
              "RECOMMENDATION_ADDED",
              "RECOMMENDATION_SENT",
              "REMEDIATION_PROPOSED",
              "EXCEPTION_REQUESTED",
              "REDUCED",
              "RETAINED",
              "ARCHIVED_IN_VERSION"
            ]
          },
          "type": {
            "description": "Type of risk",
            "type": "string",
            "example": "ASSETS",
            "enum": [
              "ASSESSMENTS",
              "ASSETS",
              "PROCESSING_ACTIVITIES",
              "VENDORS",
              "ENTITIES",
              "INCIDENTS",
              "ESG",
              "GENERAL"
            ],
            "deprecated": true
          },
          "riskType": {
            "description": "Type information of the risk",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_EntityTypeInformation"
          },
          "typeRefIds": {
            "description": "Type ref Ids for the risk",
            "type": "array",
            "items": {
              "type": "string",
              "format": "uuid"
            },
            "example": [
              "a34ccec7-1ec0-4d65-9075-bdd0d923f1d1",
              "d1622fad-2186-4ed6-8133-33e3fde47759"
            ]
          },
          "sourceType": {
            "description": "Source Type for the risk",
            "type": "string",
            "example": "PIA",
            "enum": [
              "PIA",
              "GRA",
              "INVENTORY",
              "INCIDENT",
              "ENGAGEMENT",
              "GENERIC"
            ],
            "deprecated": true
          },
          "riskSourceType": {
            "description": "Source type information of the risk",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_EntityTypeInformation"
          },
          "source": {
            "description": "Source information of the risk",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskSourceInformation"
          },
          "description": {
            "description": "Description for the risk",
            "type": "string",
            "example": "Ability to obtain sufficient liquidity for funding capacity",
            "maxLength": 4000
          },
          "recommendation": {
            "description": "Recommendation for the risk",
            "type": "string",
            "example": "Establish a Liquidity Buffer",
            "maxLength": 4000
          },
          "remediationProposal": {
            "description": "Remediation Proposal for the risk",
            "type": "string",
            "example": "Develop a Liquidity Management Policy"
          },
          "riskOwnerId": {
            "description": "Unique identifier of the risk owner",
            "type": "string",
            "format": "uuid",
            "example": "54a5730b-205b-4256-a9cf-59a7808ccb79",
            "deprecated": true
          },
          "riskOwner": {
            "description": "Name of the risk owner",
            "type": "string",
            "example": "John Doe",
            "deprecated": true
          },
          "riskOwnersId": {
            "description": "List of unique identifiers of the risk owners",
            "type": "array",
            "items": {
              "type": "string",
              "format": "uuid"
            },
            "example": [
              "a34ccec7-1ec0-4d65-9075-bdd0d923f1d1",
              "d1622fad-2186-4ed6-8133-33e3fde47759"
            ],
            "deprecated": true
          },
          "riskOwnersName": {
            "description": "Name of the risk owner",
            "type": "string",
            "example": "John Doe",
            "deprecated": true
          },
          "orgGroup": {
            "description": "Org group details for the Risk",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_BasicEntityDetail"
          },
          "riskApproversId": {
            "description": "List of unique identifiers of the risk Approvers",
            "type": "array",
            "items": {
              "type": "string",
              "format": "uuid"
            },
            "example": [
              "a34ccec7-1ec0-4d65-9075-bdd0d923f1d1",
              "1622fad-2186-4ed6-8133-33e3fde47759"
            ],
            "deprecated": true
          },
          "requestedException": {
            "description": "Requested Exception of the risk",
            "type": "string",
            "example": "Established, undrawn committed credit facilities"
          },
          "mitigation": {
            "description": "Mitigation of the risk",
            "type": "string",
            "example": "Funding diversification efforts are ongoing "
          },
          "justification": {
            "description": "Justification of the risk",
            "type": "string",
            "example": "Efforts to improve working capital management"
          },
          "deadline": {
            "description": "deadline for the risk",
            "type": "string",
            "format": "date-time",
            "example": "2025-07-10T14:30:45.123Z"
          },
          "mitigatedDate": {
            "description": "Mitigated date for the risk",
            "type": "string",
            "format": "date-time",
            "example": "2025-07-10T14:30:45.123Z"
          },
          "references": {
            "description": "References for the risk",
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskReferenceInformation"
            }
          },
          "createdUTCDateTime": {
            "description": "created timestamp for the risk",
            "type": "string",
            "format": "date-time",
            "example": "2025-07-10T14:30:45.123Z"
          },
          "lastModifiedUTCDateTime": {
            "description": "last updated timestamp for the risk",
            "type": "string",
            "format": "date-time",
            "example": "2025-07-10T14:30:45.123Z"
          },
          "updatedBy": {
            "description": "Details of the user who last updated the risk",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_BasicEntityDetail"
          },
          "probabilityLevelId": {
            "description": "Probability Level Id of the risk",
            "type": "integer",
            "format": "int64",
            "example": 2
          },
          "impactLevelId": {
            "description": "Impact Level Id of the risk",
            "type": "integer",
            "format": "int64",
            "example": 2
          },
          "riskScore": {
            "description": "Risk score",
            "type": "number",
            "example": 2
          },
          "levelId": {
            "description": "Level Id of the risk",
            "type": "integer",
            "format": "int64",
            "example": 2
          },
          "levelDisplayName": {
            "description": "Level Name of the risk",
            "type": "string",
            "example": "Low"
          },
          "viewOnly": {
            "type": "boolean"
          },
          "number": {
            "description": "Number of the risk, autogenerated",
            "type": "integer",
            "format": "int64",
            "example": 2
          },
          "controlsIdentifier": {
            "description": "List of Controls associated with the risk",
            "type": "array",
            "items": {
              "type": "string"
            },
            "example": [
              "1.0.0",
              "1.0"
            ]
          },
          "creationType": {
            "description": "Creation Type of the risk",
            "type": "string"
          },
          "categories": {
            "description": "Categories associated with the risk",
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskCategoryInformation"
            }
          },
          "associatedInventories": {
            "description": "Inventories associated with the risk",
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/TechRiskCompliance-Risk_InventoryInformation"
            }
          },
          "riskApprovers": {
            "description": "Name of the risk approver",
            "type": "string",
            "example": "John Doe",
            "deprecated": true
          },
          "inherentRiskLevel": {
            "description": "Inherent Risk Level",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskLevelDetails"
          },
          "targetRiskLevel": {
            "description": "Target Risk Level",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskLevelDetails"
          },
          "treatment": {
            "description": "Treatment of the risk",
            "type": "string",
            "example": "Mitigation"
          },
          "result": {
            "description": "Result of the risk",
            "type": "string",
            "example": "Approved"
          },
          "treatmentStatus": {
            "description": "Treatment Status of the risk",
            "type": "string",
            "example": "In Progress"
          },
          "resultDetails": {
            "description": "Result Details of the risk",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_AttributeValueInformation"
          },
          "treatmentStatusDetails": {
            "description": "Treatment Status Details of the risk",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_AttributeValueInformation"
          },
          "workflow": {
            "description": "Details of the workflow for this risk",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_BasicEntityDetailTranslation"
          },
          "stage": {
            "description": "Details of the stage for this risk",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_BasicStageDetailTranslation"
          },
          "deleteType": {
            "description": "Delete type of the risk",
            "type": "string",
            "example": "SOFT",
            "enum": [
              "SOFT",
              "ARCHIVE",
              "MIGRATED"
            ]
          },
          "dateClosed": {
            "description": "Date closed for the risk",
            "type": "string",
            "format": "date-time",
            "example": "2025-07-10T14:30:45.123Z"
          },
          "threat": {
            "description": "threat for the risk",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_ThreatInformation"
          },
          "vulnerabilities": {
            "description": "list of vulnerabilities for the risk",
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/TechRiskCompliance-Risk_VulnerabilityInformation"
            }
          },
          "attributeValues": {
            "description": "Custom Attributes",
            "type": "object",
            "example": {
              "attributeSingleSelectValue.value1": [
                {
                  "id": "0d2455f5-0a3d-463c-831a-671b620f5d8c",
                  "value": "1",
                  "valueKey": "Risk.Attributes.44cc7a47-fc22-4339-a4f9-8bba492eba7f"
                }
              ],
              "attributeSingleSelectValue.value2": [],
              "attributeSingleSelectValue.value11": [],
              "attributeSingleSelectValue.value12": [],
              "attributeSingleSelectValue.value18": []
            },
            "additionalProperties": {
              "type": "array",
              "items": {
                "$ref": "#/components/schemas/TechRiskCompliance-Risk_AttributeValueInformation"
              }
            }
          },
          "typeRefId": {
            "description": "Type ref Id for the risk, deprecated in favour of typeRefIds",
            "type": "string",
            "format": "uuid",
            "example": "92b48b97-c212-4b6c-9c47-2ebdc18da455",
            "deprecated": true
          },
          "reminderDays": {
            "description": "Duration in days after which a reminder will be sent",
            "type": "integer",
            "format": "int64",
            "example": 4
          },
          "ruleRootVersionId": {
            "description": "Unique identifier for the rule root version",
            "type": "string",
            "format": "uuid",
            "example": "5c91cf60-c6d1-4f7d-ba74-e4f1601b54fa"
          },
          "riskTemplate": {
            "description": "Risk Template details of the risk",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_BasicEntityDetail"
          },
          "owners": {
            "description": "Risk Owners details of the risk",
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/TechRiskCompliance-Risk_BasicEntityDetail"
            }
          },
          "approvers": {
            "description": "Risk Approvers details of the risk",
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/TechRiskCompliance-Risk_BasicEntityDetail"
            }
          },
          "name": {
            "description": "Name of the risk",
            "type": "string",
            "example": "Financial Risk",
            "maxLength": 300
          },
          "closed": {
            "description": "Indicates if the risk is closed",
            "type": "boolean",
            "example": true
          },
          "currentStageApproversCount": {
            "description": "The count of approvers of the current stage",
            "type": "integer",
            "format": "int64",
            "example": 1
          },
          "migrationStatus": {
            "description": "Migration status of the risk",
            "type": "string",
            "example": "IN_PROGRESS",
            "enum": [
              "PENDING",
              "IN_PROGRESS",
              "IN_COMPLETE",
              "SUCCESS",
              "FAILED"
            ]
          },
          "ownersId": {
            "type": "array",
            "items": {
              "type": "string",
              "format": "uuid"
            }
          },
          "riskManager": {
            "description": "List of Risk Managers associated with the risk",
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/TechRiskCompliance-Risk_BasicEntityDetail"
            }
          }
        }
      },
      "TechRiskCompliance-Risk_RiskLevelDetails": {
        "type": "object",
        "properties": {
          "levelId": {
            "description": "Risk level identifier",
            "type": "integer",
            "format": "int64"
          },
          "level": {
            "description": "Risk level name",
            "type": "string"
          },
          "impactLevelId": {
            "description": "Impact level identifier",
            "type": "integer",
            "format": "int64"
          },
          "impactLevel": {
            "description": "Impact level name",
            "type": "string"
          },
          "probabilityLevelId": {
            "description": "Probability level identifier",
            "type": "integer",
            "format": "int64"
          },
          "probabilityLevel": {
            "description": "Probability level name",
            "type": "string"
          },
          "riskScore": {
            "description": "Calculated risk score",
            "type": "number"
          },
          "levelGuid": {
            "description": "Risk level unique identifier",
            "type": "string",
            "format": "uuid"
          },
          "levelKey": {
            "description": "Risk level key",
            "type": "string"
          },
          "colorCode": {
            "description": "Risk level color code",
            "type": "string"
          },
          "impactLevelGuid": {
            "description": "Impact level unique identifier",
            "type": "string",
            "format": "uuid"
          },
          "impactLevelKey": {
            "description": "Impact level key",
            "type": "string"
          },
          "probabilityLevelGuid": {
            "description": "Probability level unique identifier",
            "type": "string",
            "format": "uuid"
          },
          "probabilityLevelKey": {
            "description": "Probability level key",
            "type": "string"
          }
        }
      },
      "TechRiskCompliance-Risk_RiskReferenceInformation": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "format": "uuid"
          },
          "type": {
            "type": "string",
            "enum": [
              "ASSESSMENT",
              "INVENTORY",
              "INCIDENT",
              "ENGAGEMENT",
              "GENERIC"
            ],
            "deprecated": true
          },
          "referenceType": {
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_EntityTypeInformation"
          },
          "name": {
            "type": "string"
          },
          "additionalAttributes": {
            "type": "object",
            "additionalProperties": {
              "type": "object"
            }
          }
        }
      },
      "TechRiskCompliance-Risk_RiskSourceInformation": {
        "type": "object",
        "properties": {
          "id": {
            "description": "Source Entity Id",
            "type": "string",
            "format": "uuid",
            "example": "d974c78a-c2f0-480a-aa27-4d40c44bb890"
          },
          "type": {
            "description": "Source Type for the risk",
            "type": "string",
            "example": "PIA",
            "enum": [
              "PIA",
              "GRA",
              "INVENTORY",
              "INCIDENT",
              "ENGAGEMENT",
              "GENERIC"
            ],
            "deprecated": true
          },
          "sourceType": {
            "description": "Source type information of the risk",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_EntityTypeInformation"
          },
          "name": {
            "description": "Source Entity Name",
            "type": "string",
            "example": "Raw Materials and Sales Inventory"
          },
          "additionalAttributes": {
            "description": "Additional information about the Source Entity. This will be a Map of String Key and Object value. 'inventoryType' key is mandatory to be passed when sourceType is 'Inventory', and it can have one of the following values, 20 - Assets, 30 - Processing Activities, 50 - Vendors, 60 - Entities",
            "type": "object",
            "additionalProperties": {
              "type": "object"
            }
          }
        },
        "required": [
          "id",
          "name"
        ]
      },
      "TechRiskCompliance-Risk_ThreatInformation": {
        "type": "object",
        "properties": {
          "id": {
            "description": "Threat Id",
            "type": "string",
            "format": "uuid",
            "example": "a34ccec7-1ec0-4d65-9075-bdd0d923f1d1"
          },
          "name": {
            "description": "Threat Name",
            "type": "string",
            "example": "Malware"
          },
          "identifier": {
            "description": "Threat Identifier",
            "type": "string",
            "example": "THRT123456"
          }
        }
      },
      "TechRiskCompliance-Risk_VulnerabilityInformation": {
        "type": "object",
        "properties": {
          "id": {
            "description": "Vulnerability Id",
            "type": "string",
            "format": "uuid",
            "example": "a34ccec7-1ec0-4d65-9075-bdd0d923f1d1"
          },
          "name": {
            "description": "Vulnerability Name",
            "type": "string",
            "example": "Cross-Site Scripting (XSS)"
          },
          "identifier": {
            "description": "Vulnerability Identifier",
            "type": "string",
            "example": "VULN123456"
          }
        }
      },
      "TechRiskCompliance-Risk_RiskCreateRequest": {
        "type": "object",
        "properties": {
          "type": {
            "description": "risk type",
            "type": "string",
            "example": "ASSETS"
          },
          "source": {
            "description": "source information",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskSourceInformation"
          },
          "associatedInventory": {
            "description": "associated inventory information",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskSourceInformation"
          },
          "description": {
            "description": "description",
            "type": "string",
            "example": "Ability to obtain sufficient liquidity for funding capacity",
            "maxLength": 4000,
            "minLength": 0
          },
          "recommendation": {
            "description": "recommendation",
            "type": "string",
            "example": "Implement the required controls ",
            "maxLength": 4000,
            "minLength": 0
          },
          "conditionGroupId": {
            "description": "condition Group Id for risk creation rule.",
            "type": "integer",
            "format": "int64"
          },
          "conditionGroupUuid": {
            "description": "condition Group uuid for risk creation rule.",
            "type": "string",
            "format": "uuid"
          },
          "riskOwnerId": {
            "description": "risk owner id",
            "type": "string",
            "format": "uuid",
            "deprecated": true
          },
          "riskOwner": {
            "description": "risk owner name",
            "type": "string",
            "example": "John Doe",
            "deprecated": true
          },
          "riskOwners": {
            "description": "list of risk owners",
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/TechRiskCompliance-Risk_BasicEntityDetail"
            },
            "example": [
              {
                "id": "1c412288-b9fa-4fd6-98be-467b2824d33a",
                "name": "Maya Mohan"
              }
            ]
          },
          "orgGroupId": {
            "description": "organization group id",
            "type": "string",
            "format": "uuid",
            "example": "b2dd4735-1347-4751-91c2-0b2d58174f9d"
          },
          "riskApproversId": {
            "description": "list of approver ids",
            "type": "array",
            "items": {
              "type": "string",
              "format": "uuid"
            },
            "example": [
              "1c412288-b9fa-4fd6-98be-467b2824d33a"
            ]
          },
          "deadline": {
            "description": "deadline, format - YYYY-MM-DDTHH:MM:SS.FFFZ",
            "type": "string",
            "format": "date-time",
            "example": "2021-04-13T04:00:00.000Z"
          },
          "reminderDays": {
            "description": "number of days before the deadline when the reminder will be sent",
            "type": "integer",
            "format": "int64",
            "example": 2
          },
          "probabilityLevelId": {
            "description": "probability level id",
            "type": "integer",
            "format": "int64",
            "example": 3
          },
          "probabilityLevel": {
            "description": "probability level name",
            "type": "string",
            "example": "High"
          },
          "impactLevelId": {
            "description": "impact level id",
            "type": "integer",
            "format": "int64",
            "example": 1
          },
          "impactLevel": {
            "description": "impact level name",
            "type": "string",
            "example": "Low"
          },
          "riskScore": {
            "description": "risk score",
            "type": "number",
            "example": 4
          },
          "levelId": {
            "description": "risk level Id",
            "type": "integer",
            "format": "int64",
            "example": 2
          },
          "systemCreated": {
            "description": "system created flag",
            "type": "boolean",
            "example": false
          },
          "categoryIds": {
            "description": "risk categories' Ids",
            "type": "array",
            "items": {
              "type": "string",
              "format": "uuid"
            },
            "example": [
              "5d83f96b-ffb8-444e-b440-248a3103c663"
            ]
          },
          "controlIds": {
            "description": "risk controls' Ids",
            "type": "array",
            "items": {
              "type": "string",
              "format": "uuid"
            },
            "example": []
          },
          "threatId": {
            "description": "risk threat' Id",
            "type": "string",
            "format": "uuid",
            "example": "1e235192-9987-4bae-b553-a3e3ca19d020"
          },
          "vulnerabilityIds": {
            "description": "risk vulnerability' Ids",
            "type": "array",
            "items": {
              "type": "string",
              "format": "uuid"
            },
            "example": [
              "bedb4c52-eb7c-4633-8e4d-264fe57b79a1"
            ]
          },
          "attributeValues": {
            "description": "Custom Attributes",
            "type": "object",
            "example": {
              "attributeSingleSelectValue.value1": [
                {
                  "id": "0d2455f5-0a3d-463c-831a-671b620f5d8c",
                  "value": "1",
                  "valueKey": "Risk.Attributes.44cc7a47-fc22-4339-a4f9-8bba492eba7f"
                }
              ],
              "attributeSingleSelectValue.value2": [],
              "attributeSingleSelectValue.value11": [],
              "attributeSingleSelectValue.value12": [],
              "attributeSingleSelectValue.value18": []
            },
            "additionalProperties": {
              "type": "array",
              "items": {
                "$ref": "#/components/schemas/TechRiskCompliance-Risk_AttributeValueInformation"
              }
            }
          },
          "ruleRootVersionId": {
            "description": "ruleRootVersion id",
            "type": "string",
            "format": "uuid",
            "example": "e0d3df1f-97c4-413d-a214-10b56d50f4bc"
          },
          "riskTemplate": {
            "description": "risk template",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskTemplateIdentifier"
          },
          "targetRiskLevel": {
            "description": "target risk level",
            "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskLevelDetails"
          },
          "name": {
            "description": "name for the risk",
            "type": "string",
            "example": "risk name for a test risk ",
            "maxLength": 300,
            "minLength": 0
          },
          "treatment": {
            "description": "AKA remediation in current workflow",
            "type": "string",
            "maxLength": 4000,
            "minLength": 0
          },
          "riskManager": {
            "description": "list of manager ids",
            "type": "array",
            "items": {
              "type": "string",
              "format": "uuid"
            },
            "uniqueItems": true
          }
        },
        "required": [
          "associatedInventory",
          "orgGroupId",
          "source",
          "type"
        ]
      },
      "TechRiskCompliance-Risk_RiskTemplateIdentifier": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "format": "uuid"
          }
        }
      }
    },
    "securitySchemes": {
      "TechRiskCompliance-Risk_OAUTH2": {
        "type": "oauth2",
        "flows": {
          "clientCredentials": {
            "tokenUrl": "https://{hostname}/api/access/v1/oauth/token",
            "scopes": {
              "RISK": "Risk Scope",
              "RISK_READ": "Risk read scope",
              "INTEGRATION": "Integration scope"
            }
          }
        }
      }
    }
  },
  "x-readme": {
    "explorer-enabled": false,
    "proxy-enabled": false,
    "metrics-enabled": false
  },
  "x-onetrust": {
    "spec-label": "OpenAPI 3.1.0"
  }
}
```

# Sibling pages

* [Update Risk Stage](https://developer.onetrust.com/onetrust/reference/changeriskstageusingpost.md)
* [Update Risk](https://developer.onetrust.com/onetrust/reference/updateriskusingput.md)
* [Delete Risk](https://developer.onetrust.com/onetrust/reference/deleteriskusingdelete.md)
* [Modify Risk](https://developer.onetrust.com/onetrust/reference/updateriskusingpatch.md)
* [Update Risk Approvers](https://developer.onetrust.com/onetrust/reference/updateriskapproversusingput.md)
* [Update Risk Categories](https://developer.onetrust.com/onetrust/reference/updateriskcategoriesusingput.md)
* [Update Risk Owners](https://developer.onetrust.com/onetrust/reference/updateriskownersusingput.md)