--- updatedAt: 2026-05-27T12:53:27.000Z agentTools: projectIndex: https://developer.onetrust.com/onetrust/llms.txt --- # Get List of Risks Use this API to retrieve a paginated list of risks based on search criteria and sorting options. # OpenAPI definition ```json { "openapi": "3.1.0", "info": { "title": "Tech Risk & Compliance - IT Risk Management", "description": "The IT Risk Management API provides comprehensive REST endpoints for managing enterprise security controls, threats, vulnerabilities, and their implementations with OAuth2 security and extensive customization capabilities.", "version": "1.0", "contact": { "name": "OneTrust Support", "url": "https://my.onetrust.com/s/contactsupport" }, "license": { "name": "Apache 2.0", "url": "https://www.apache.org/licenses/LICENSE-2.0" } }, "servers": [ { "url": "https://{hostname}", "variables": { "hostname": { "default": "hostname", "description": "The OneTrust hostname such as app.onetrust.com, app-eu.onetrust.com, app-de.onetrust.com, app-uk.onetrust.com, app-apac.onetrust.com, trial.onetrust.com, or uat.onetrust.com." } } } ], "tags": [ { "name": "Risks", "description": "APIs to manage the complete risk lifecycle including creation, updates, deletion, search, and retrieval of risk details and attributes.", "externalDocs": { "description": "OpenAPI 3.1.0 - Download Definition", "url": "https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json" }, "x-displayName": "Risks" } ], "paths": { "/api/risk/v2/risks/pages": { "post": { "operationId": "getRiskPageViewUsingPOST", "summary": "Get List of Risks", "description": "Use this API to retrieve a paginated list of risks based on search criteria and sorting options.", "tags": [ "Risks" ], "x-onetrust": { "spec-label": "https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json" }, "parameters": [ { "name": "page", "in": "query", "description": "Results page to be retrieved (0..N)", "schema": { "type": "integer", "format": "int32", "example": 0, "default": 0, "minimum": 0 } }, { "name": "size", "in": "query", "description": "Number of records per page (1..50)", "schema": { "type": "integer", "format": "int32", "example": 20, "default": 20, "maximum": 100, "minimum": 1 } }, { "name": "sort", "in": "query", "description": "Sorting criteria in the format: property(,asc|desc). Default sort order is descending.", "schema": { "type": "string", "example": "createdDate,desc", "default": "createdDate,desc", "enum": [ "number,asc", "number,desc", "name,asc", "name,desc", "orgGroupId,asc", "orgGroupId,desc", "createdDate,asc", "createdDate,desc", "description,desc", "description,asc", "controlImplementationCount,desc", "controlImplementationCount,asc" ] } } ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/TechRiskCompliance-Risk_RiskSearchRequest" } } } }, "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/TechRiskCompliance-Risk_Page" } } } }, "400": { "description": "Bad Request" }, "401": { "description": "Unauthorized" }, "403": { "description": "Forbidden" }, "429": { "description": "Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).", "headers": { "Retry-After": { "schema": { "description": "The number of seconds after which requests will be allowed again.", "format": "int32" } }, "ot-period": { "schema": { "description": "The unit of time for which the rate limit applies", "enum": [ "HOUR", "MINUTE" ] } }, "ot-ratelimit-event-id": { "schema": { "description": "The unique identifier for the rate-limiting event.", "format": "uuid" } }, "ot-request-made": { "schema": { "description": "The number of requests made within the specified period.", "format": "int32" } }, "ot-requests-allowed": { "schema": { "description": "The number of requests allowed within the specified period.", "format": "int32" } } } }, "500": { "description": "Internal Server Error" } }, "security": [ { "TechRiskCompliance-Risk_OAUTH2": [ "INTEGRATION", "RISK", "RISK_READ" ] } ] } } }, "components": { "schemas": { "TechRiskCompliance-Risk_Page": { "type": "object", "properties": { "totalElements": { "type": "integer", "format": "int64" }, "totalPages": { "type": "integer", "format": "int32" }, "size": { "type": "integer", "format": "int32" }, "content": { "items": { "type": "object" }, "type": "array" }, "number": { "type": "integer", "format": "int32" }, "sort": { "$ref": "#/components/schemas/TechRiskCompliance-Risk_SortObject" }, "first": { "type": "boolean" }, "last": { "type": "boolean" }, "numberOfElements": { "type": "integer", "format": "int32" }, "pageable": { "$ref": "#/components/schemas/TechRiskCompliance-Risk_PageableObject" }, "empty": { "type": "boolean" } } }, "TechRiskCompliance-Risk_PageableObject": { "type": "object", "properties": { "offset": { "type": "integer", "format": "int64" }, "sort": { "$ref": "#/components/schemas/TechRiskCompliance-Risk_SortObject" }, "pageNumber": { "type": "integer", "format": "int32" }, "pageSize": { "type": "integer", "format": "int32" }, "paged": { "type": "boolean" }, "unpaged": { "type": "boolean" } } }, "TechRiskCompliance-Risk_SortObject": { "type": "object", "properties": { "empty": { "type": "boolean" }, "sorted": { "type": "boolean" }, "unsorted": { "type": "boolean" } } }, "TechRiskCompliance-Risk_AttributePredicate": { "type": "object", "properties": { "field": { "description": "The field name used to filter results.", "type": "string" }, "operator": { "description": "The relationship that must be met between the field and value.", "type": "string", "enum": [ "EQUAL_TO", "NOT_EQUAL_TO", "GREATER_THAN", "GREATER_THAN_EQUAL_TO", "LESS_THAN", "LESS_THAN_EQUAL_TO", "BETWEEN" ] }, "value": { "description": "The field value used to filter results. If filtering for a range of values, this would be the start of the range and should be used in conjunction with the `toValue` parameter. \nExamples by type: UUID = 'e68d49c4-f11f-4cd9-8f1b-0be8ef945b8f', LocalDate = '2023-01-01', OffsetDateTime = '2023-01-01T00:00:00Z', String = 'Closed', Number = 7", "type": "object", "oneOf": [ { "type": "string", "format": "uuid" }, { "type": "string", "format": "date" }, { "type": "string", "format": "date-time" }, { "type": "string" }, { "type": "number" } ] }, "toValue": { "description": "The field value for the end of the range. This field should be used in conjunction with the `value` parameter. \nExamples by type: LocalDate = '2023-01-01', OffsetDateTime = '2023-01-01T00:00:00Z', String = 'Closed', Number = 7", "type": "object", "oneOf": [ { "type": "string", "format": "date" }, { "type": "string", "format": "date-time" }, { "type": "string" }, { "type": "number" } ] } }, "required": [ "field" ] }, "TechRiskCompliance-Risk_RiskSearchRequest": { "type": "object", "properties": { "filters": { "description": "Map of field names to their filter values for exact matching +This will be a Map of String Key and Object value. 'fieldname' key is mandatory to be passed, followed by value, example could be like name as some riskName", "type": "object", "additionalProperties": { "type": "object" } }, "predicates": { "description": "Set of attribute predicates for complex search conditions", "type": "array", "items": { "$ref": "#/components/schemas/TechRiskCompliance-Risk_AttributePredicate" }, "uniqueItems": true }, "fullTextSearch": { "description": "Full text search term to search across risk fields", "type": "string", "example": "security breach" }, "visibleColumns": { "description": "List of column names to include in the response", "type": "array", "items": { "type": "string", "description": "List of column names to include in the response", "example": "[\"name\",\"state\",\"sourceType\"]" }, "example": [ "name", "state", "sourceType" ] }, "includeHierarchicalChildInventoryRisks": { "description": "Include risks associated with inventory related as children in Inventory hierarchy", "type": "boolean", "example": false, "default": "false" } } } }, "securitySchemes": { "TechRiskCompliance-Risk_OAUTH2": { "type": "oauth2", "flows": { "clientCredentials": { "tokenUrl": "https://{hostname}/api/access/v1/oauth/token", "scopes": { "RISK": "Risk Scope", "RISK_READ": "Risk read scope", "INTEGRATION": "Integration scope" } } } } } }, "x-readme": { "explorer-enabled": false, "proxy-enabled": false, "metrics-enabled": false }, "x-onetrust": { "spec-label": "OpenAPI 3.1.0" } } ``` # Sibling pages * [Unlink Risks](https://developer.onetrust.com/onetrust/reference/unlinkrisksfromentityusingpost.md) * [Get List of Risk Categories](https://developer.onetrust.com/onetrust/reference/getactivecategoriesusingget.md) * [Get Risk Matrix Configuration](https://developer.onetrust.com/onetrust/reference/getmatrixscoresettingusingget.md) * [Get Standard Risk Configuration](https://developer.onetrust.com/onetrust/reference/getstandardscoresettingusingget.md) * [Create Risk](https://developer.onetrust.com/onetrust/reference/createriskusingpost.md) * [Get List of Linked Risks](https://developer.onetrust.com/onetrust/reference/getlinkedrisksinformationusingpost.md) * [Get Risk](https://developer.onetrust.com/onetrust/reference/getriskusingget.md) * [Create Risk](https://developer.onetrust.com/onetrust/reference/createstandaloneriskusingpost.md)