Updating Risk Details

The Update Risk API allows you to update any risk in the OneTrust application. The API is able to update the base and custom information. This API is used when updating a risk within OneTrust from another system using an integration.

What parameters are required to update risk details?

  • The unique risk ID represented by riskId

Step 1: Obtaining the unique risk ID riskId

The POST /risks/pages endpoint can be used to retrieve the list of all risks within the OneTrust application. If there are any known filters, they can be used to obtain a specific risk list.

Example Request:

POST /risks/pages
Host: https://trial.onetrust.com
Content-Type: application/json
Authorization: Bearer {OAuth Access Token})

Request Body:

{
  "type": "object",
  "properties": {
    "filters": {
      "type": "object",
      "description": "filters, which is a map of the field name and the value"
    },
    "fullTextSearch": {
      "type": "string",
      "description": "full text search term"
    }
  },
  "title": "RiskSearchRequest"
}

Response Body:

{
  "type": "object",
  "properties": {
    "content": {
      "type": "array",
      "items": {
        "type": "object",
        "title": "RiskViewInformation",
        "properties": {
          "associatedInventories": {
            "type": "array",
            "description": "List of associated inventories to this risk",
            "items": {
              "type": "object",
              "title": "InventoryInformation",
              "properties": {
                "inventoryId": {
                  "type": "string",
                  "format": "uuid",
                  "description": "Inventory GUID value"
                },
                "inventoryName": {
                  "type": "string",
                  "description": "Inventory name"
                },
                "inventoryType": {
                  "type": "string",
                  "description": "Inventory Type",
                  "enum": [
                    "ASSETS",
                    "PROCESSING_ACTIVITIES",
                    "VENDORS",
                    "ENTITIES"
                  ]
                },
                "organizationId": {
                  "type": "string",
                  "format": "uuid",
                  "description": "Inventory's Organization Guid"
                }
              }
            }
          },
          "attributeValues": {
            "type": "object",
            "description": "Risk Custom attribute values",
            "additionalProperties": {
              "type": "array",
              "items": {
                "type": "object",
                "title": "AttributeValueInformation",
                "properties": {
                  "id": {
                    "type": "string",
                    "format": "uuid",
                    "description": "Attribute option GUID"
                  },
                  "value": {
                    "type": "string",
                    "description": "Attribute option value"
                  },
                  "valueKey": {
                    "type": "string",
                    "description": "Attribute option value key for translation"
                  },
                  "additionalAttributes": {
                    "type": "object",
                    "description": "Additional information like Source Questions, Approver Ids, Inventory Type. This will be a Map of String Key and Object value"
                  }
                }
              }
            }
          },
          "categories": {
            "type": "array",
            "description": "Risk Categories",
            "items": {
              "type": "object",
              "title": "RiskCategoryInformation",
              "properties": {
                "id": {
                  "type": "string",
                  "format": "uuid",
                  "description": "Identifier for Risk Category"
                },
                "name": {
                  "type": "string",
                  "description": "Risk Category Name"
                },
                "nameKey": {
                  "type": "string",
                  "description": "Risk Category Name Key value for translation"
                }
              }
            }
          },
          "controlsIdentifier": {
            "type": "array",
            "description": "Risk Control Identifiers CSV",
            "items": {
              "type": "string"
            }
          },
          "createdUTCDateTime": {
            "type": "string",
            "format": "date-time",
            "description": "Risk Created Date"
          },
          "creationType": {
            "type": "string",
            "description": "Creation Type"
          },
          "dateClosed": {
            "type": "string",
            "format": "date-time",
            "description": "Risk closed Date"
          },
          "deadline": {
            "type": "string",
            "format": "date-time",
            "description": "Risk Deadline Date"
          },
          "description": {
            "type": "string",
            "description": "Risk Description"
          },
          "id": {
            "type": "string",
            "format": "uuid",
            "description": "Risk UUID value"
          },
          "impactLevel": {
            "type": "string",
            "description": "Risk Residual Impact Level Name"
          },
          "impactLevelId": {
            "type": "integer",
            "format": "int64",
            "description": "Risk Residual impact level ID"
          },
          "inherentRiskLevel": {
            "type": "object",
            "title": "RiskLevelDetails",
            "properties": {
              "impactLevel": {
                "type": "string",
                "description": "Risk Impact Level name"
              },
              "impactLevelId": {
                "type": "integer",
                "format": "int64",
                "description": "Risk Impact level Id"
              },
              "level": {
                "type": "string",
                "description": "Risk Level Name"
              },
              "levelId": {
                "type": "integer",
                "format": "int64",
                "description": "Risk Level Id"
              },
              "probabilityLevel": {
                "type": "string",
                "description": "Risk Probability Level Name"
              },
              "probabilityLevelId": {
                "type": "integer",
                "format": "int64",
                "description": "Risk Probability Level Id"
              },
              "riskScore": {
                "type": "number",
                "description": "Risk Score"
              }
            }
          },
          "justification": {
            "type": "string",
            "description": "Justification value"
          },
          "level": {
            "type": "string",
            "description": "Residual Level Name"
          },
          "levelId": {
            "type": "integer",
            "format": "int64",
            "description": "Residual level id"
          },
          "mitigatedDate": {
            "type": "string",
            "format": "date-time",
            "description": "Risk Mitigated Date"
          },
          "mitigation": {
            "type": "string",
            "description": "Risk Mitigation Value"
          },
          "number": {
            "type": "integer",
            "format": "int64",
            "description": "Numeric identifier for the risk"
          },
          "orgGroup": {
            "type": "object",
            "title": "BasicEntityDetail",
            "properties": {
              "id": {
                "type": "string",
                "format": "uuid",
                "description": "entity GUID"
              },
              "name": {
                "type": "string",
                "description": "entity name"
              }
            }
          },
          "previousState": {
            "type": "string",
            "enum": [
              "IDENTIFIED",
              "RECOMMENDATION_ADDED",
              "RECOMMENDATION_SENT",
              "REMEDIATION_PROPOSED",
              "EXCEPTION_REQUESTED",
              "REDUCED",
              "RETAINED",
              "ARCHIVED_IN_VERSION"
            ]
          },
          "probabilityLevel": {
            "type": "string",
            "description": "Residual Probablity Level Name"
          },
          "probabilityLevelId": {
            "type": "integer",
            "format": "int64",
            "description": "Residual Probability Level Id"
          },
          "recommendation": {
            "type": "string",
            "description": "Risk Recommendation"
          },
          "remediationProposal": {
            "type": "string",
            "description": "Proposed Remediation"
          },
          "reminderDays": {
            "type": "integer",
            "format": "int64",
            "description": "Reminder days for deadline"
          },
          "requestedException": {
            "type": "string",
            "description": "Requested exception"
          },
          "result": {
            "type": "string",
            "description": "Risk result",
            "enum": [
              "Accepted",
              "Avoided",
              "Reduced",
              "Rejected",
              "Transferred",
              "Ignored"
            ]
          },
          "riskApprovers": {
            "type": "string",
            "description": "risk approvers name CSV"
          },
          "riskApproversId": {
            "type": "array",
            "description": "Risk Approvers Id List",
            "items": {
              "type": "string",
              "format": "uuid"
            }
          },
          "riskCategoryNames": {
            "type": "string",
            "description": "Risk Categories Name CSV"
          },
          "riskOwnersId": {
            "type": "array",
            "description": "List of Risk Owners ID",
            "items": {
              "type": "string",
              "format": "uuid"
            }
          },
          "riskOwnersName": {
            "type": "string",
            "description": "Risk Owners Name CSV"
          },
          "riskScore": {
            "type": "number",
            "description": "Risk Score"
          },
          "source": {
            "type": "object",
            "required": [
              "id",
              "name",
              "type"
            ],
            "title": "RiskSourceInformation",
            "properties": {
              "additionalAttributes": {
                "type": "object",
                "description": "Additional information about the Source Entity. This will be a Map of String Key and Object value"
              },
              "id": {
                "type": "string",
                "format": "uuid",
                "description": "Source Entity Id"
              },
              "name": {
                "type": "string",
                "description": "Source Entity Name"
              },
              "type": {
                "type": "string",
                "description": "Source Entity Type",
                "enum": [
                  "PIA",
                  "RA",
                  "GRA",
                  "INVENTORY",
                  "INCIDENT",
                  "GENERIC"
                ]
              }
            }
          },
          "stage": {
            "type": "object",
            "title": "BasicEntityDetail",
            "properties": {
              "id": {
                "type": "string",
                "format": "uuid",
                "description": "entity GUID"
              },
              "name": {
                "type": "string",
                "description": "entity name"
              }
            }
          },
          "state": {
            "type": "string",
            "description": "Risk State",
            "enum": [
              "IDENTIFIED",
              "RECOMMENDATION_ADDED",
              "RECOMMENDATION_SENT",
              "REMEDIATION_PROPOSED",
              "EXCEPTION_REQUESTED",
              "REDUCED",
              "RETAINED",
              "ARCHIVED_IN_VERSION"
            ]
          },
          "targetRiskLevel": {
            "type": "object",
            "title": "RiskLevelDetails",
            "properties": {
              "impactLevel": {
                "type": "string",
                "description": "Risk Impact Level name"
              },
              "impactLevelId": {
                "type": "integer",
                "format": "int64",
                "description": "Risk Impact level Id"
              },
              "level": {
                "type": "string",
                "description": "Risk Level Name"
              },
              "levelId": {
                "type": "integer",
                "format": "int64",
                "description": "Risk Level Id"
              },
              "probabilityLevel": {
                "type": "string",
                "description": "Risk Probability Level Name"
              },
              "probabilityLevelId": {
                "type": "integer",
                "format": "int64",
                "description": "Risk Probability Level Id"
              },
              "riskScore": {
                "type": "number",
                "description": "Risk Score"
              }
            }
          },
          "threatName": {
            "type": "string",
            "description": "risk threat Name"
          },
          "treatment": {
            "type": "string",
            "description": "risk treatment"
          },
          "treatmentStatus": {
            "type": "string",
            "description": "treatment status",
            "enum": [
              "InProgress",
              "UnderReview",
              "ExceptionRequested",
              "Approved",
              "ExceptionGranted"
            ]
          },
          "type": {
            "type": "string",
            "description": "risk type",
            "enum": [
              "ASSESSMENTS",
              "ASSETS",
              "PROCESSING_ACTIVITIES",
              "VENDORS",
              "ENTITIES",
              "INCIDENTS"
            ]
          },
          "typeRefIds": {
            "type": "array",
            "description": "list of questionIds for assessment risks",
            "items": {
              "type": "string",
              "format": "uuid"
            }
          },
          "vulnerabilityNames": {
            "type": "string",
            "description": "vulnerabilities name CSV"
          },
          "workflow": {
            "type": "object",
            "title": "BasicEntityDetail",
            "properties": {
              "id": {
                "type": "string",
                "format": "uuid",
                "description": "entity GUID"
              },
              "name": {
                "type": "string",
                "description": "entity name"
              }
            }
          }
        }
      }
    },
    "empty": {
      "type": "boolean"
    },
    "first": {
      "type": "boolean"
    },
    "last": {
      "type": "boolean"
    },
    "number": {
      "type": "integer",
      "format": "int32"
    },
    "numberOfElements": {
      "type": "integer",
      "format": "int32"
    },
    "pageable": {
      "type": "object",
      "title": "Pageable",
      "properties": {
        "offset": {
          "type": "integer",
          "format": "int64",
          "description": "Offset to be taken according to the underlying page and page size"
        },
        "pageNumber": {
          "type": "integer",
          "format": "int32",
          "description": "Returned Page's Number"
        },
        "pageSize": {
          "type": "integer",
          "format": "int32",
          "description": "Number of records per Page"
        },
        "paged": {
          "type": "boolean",
          "description": "Indicator whether the resposne is paged"
        },
        "sort": {
          "type": "object",
          "title": "Sort",
          "properties": {
            "empty": {
              "type": "boolean"
            },
            "sorted": {
              "type": "boolean"
            },
            "unsorted": {
              "type": "boolean"
            }
          }
        },
        "unpaged": {
          "type": "boolean",
          "description": "Indicator whether the response is unpaged"
        }
      }
    },
    "size": {
      "type": "integer",
      "format": "int32"
    },
    "sort": {
      "type": "object",
      "title": "Sort",
      "properties": {
        "empty": {
          "type": "boolean"
        },
        "sorted": {
          "type": "boolean"
        },
        "unsorted": {
          "type": "boolean"
        }
      }
    },
    "totalElements": {
      "type": "integer",
      "format": "int64"
    },
    "totalPages": {
      "type": "integer",
      "format": "int32"
    }
  },
  "title": "Page«RiskViewInformation»"
}

Note that a 404 error will return if the user is unauthorized to get the risk records or if the GUID is not found.

Step 2: Updating the Risk Details

Once the required changes are identified, use the PUT /risks/{riskId} endpoint to update a risk in the application.

Example Request:

PUT /risks/{riskId} 
Host: https://trial.onetrust.com
Content-Type: application/json
Authorization: Bearer {OAuth Access Token})

Request Body:

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string",
      "description": "risk action value, populate this based on corresponding attribute value update.",
      "enum": [
        "RECOMMENDATION_ADDED",
        "RECOMMENDATION_REMOVED",
        "REMEDIATION_PROPOSED",
        "REMEDIATION_REMOVED",
        "EXCEPTION_REQUESTED",
        "EXCEPTION_REMOVED"
      ]
    },
    "attributeValues": {
      "type": "object",
      "description": "Custom Attributes",
      "additionalProperties": {
        "type": "array",
        "items": {
          "type": "object",
          "title": "AttributeValueInformation",
          "properties": {
            "id": {
              "type": "string",
              "format": "uuid",
              "description": "Attribute option GUID"
            },
            "value": {
              "type": "string",
              "description": "Attribute option value"
            },
            "valueKey": {
              "type": "string",
              "description": "Attribute option value key for translation"
            },
            "additionalAttributes": {
              "type": "object",
              "description": "Additional information like Source Questions, Approver Ids, Inventory Type. This will be a Map of String Key and Object value"
            }
          }
        }
      }
    },
    "categoryIds": {
      "type": "array",
      "description": "List of Category Ids",
      "items": {
        "type": "string",
        "format": "uuid"
      }
    },
    "deadline": {
      "type": "string",
      "format": "date-time",
      "description": "deadline, format - YYYY-MM-DDTHH:MM:SS.FFFZ"
    },
    "description": {
      "type": "string",
      "description": "description"
    },
    "impactLevelId": {
      "type": "integer",
      "format": "int64",
      "description": "Residual Impact level id"
    },
    "inherentRiskLevel": {
      "type": "object",
      "title": "RiskLevelDetails",
      "properties": {
        "impactLevel": {
          "type": "string",
          "description": "Risk Impact Level name"
        },
        "impactLevelId": {
          "type": "integer",
          "format": "int64",
          "description": "Risk Impact level Id"
        },
        "level": {
          "type": "string",
          "description": "Risk Level Name"
        },
        "levelId": {
          "type": "integer",
          "format": "int64",
          "description": "Risk Level Id"
        },
        "probabilityLevel": {
          "type": "string",
          "description": "Risk Probability Level Name"
        },
        "probabilityLevelId": {
          "type": "integer",
          "format": "int64",
          "description": "Risk Probability Level Id"
        },
        "riskScore": {
          "type": "number",
          "description": "Risk Score"
        }
      }
    },
    "levelId": {
      "type": "integer",
      "format": "int64",
      "description": "Residual Risk Level Id"
    },
    "mitigation": {
      "type": "string",
      "description": "mitigation"
    },
    "orgGroupId": {
      "type": "string",
      "format": "uuid",
      "description": "organization group id"
    },
    "probabilityLevelId": {
      "type": "integer",
      "format": "int64",
      "description": "Residual Probability level id"
    },
    "recommendation": {
      "type": "string",
      "description": "recommendation"
    },
    "reminderDays": {
      "type": "integer",
      "format": "int64",
      "description": "number of days before the deadline when the reminder will be sent"
    },
    "requestedException": {
      "type": "string",
      "description": "requested exception"
    },
    "riskApproversId": {
      "type": "array",
      "description": "list of approver ids",
      "items": {
        "type": "string",
        "format": "uuid"
      }
    },
    "riskOwners": {
      "type": "array",
      "description": "list of risk owners",
      "items": {
        "type": "object",
        "title": "BasicEntityDetail",
        "properties": {
          "id": {
            "type": "string",
            "format": "uuid",
            "description": "entity GUID"
          },
          "name": {
            "type": "string",
            "description": "entity name"
          }
        }
      }
    },
    "riskScore": {
      "type": "number",
      "description": "risk score"
    },
    "targetRiskLevel": {
      "type": "object",
      "title": "RiskLevelDetails",
      "properties": {
        "impactLevel": {
          "type": "string",
          "description": "Risk Impact Level name"
        },
        "impactLevelId": {
          "type": "integer",
          "format": "int64",
          "description": "Risk Impact level Id"
        },
        "level": {
          "type": "string",
          "description": "Risk Level Name"
        },
        "levelId": {
          "type": "integer",
          "format": "int64",
          "description": "Risk Level Id"
        },
        "probabilityLevel": {
          "type": "string",
          "description": "Risk Probability Level Name"
        },
        "probabilityLevelId": {
          "type": "integer",
          "format": "int64",
          "description": "Risk Probability Level Id"
        },
        "riskScore": {
          "type": "number",
          "description": "Risk Score"
        }
      }
    },
    "threatId": {
      "type": "string",
      "format": "uuid",
      "description": "Threat id"
    },
    "treatment": {
      "type": "string",
      "description": "AKA remediation in current workflow"
    },
    "vulnerabilityIds": {
      "type": "array",
      "description": "List of vulnerabilityIds",
      "items": {
        "type": "string",
        "format": "uuid"
      }
    }
  },
  "title": "RiskUpdateRequest"
}

Response Body:


{
  "type": "object",
  "properties": {
    "associatedInventories": {
      "type": "array",
      "description": "List of associated inventories to the risk",
      "items": {
        "type": "object",
        "title": "InventoryInformation",
        "properties": {
          "inventoryId": {
            "type": "string",
            "format": "uuid",
            "description": "Inventory GUID value"
          },
          "inventoryName": {
            "type": "string",
            "description": "Inventory name"
          },
          "inventoryType": {
            "type": "string",
            "description": "Inventory Type",
            "enum": [
              "ASSETS",
              "PROCESSING_ACTIVITIES",
              "VENDORS",
              "ENTITIES"
            ]
          },
          "organizationId": {
            "type": "string",
            "format": "uuid",
            "description": "Inventory's Organization Guid"
          }
        }
      }
    },
    "attributeValues": {
      "type": "object",
      "additionalProperties": {
        "type": "array",
        "description": "List of custom attributes",
        "items": {
          "type": "object",
          "title": "AttributeValueInformation",
          "properties": {
            "id": {
              "type": "string",
              "format": "uuid",
              "description": "Attribute option GUID"
            },
            "value": {
              "type": "string",
              "description": "Attribute option value"
            },
            "valueKey": {
              "type": "string",
              "description": "Attribute option value key for translation"
            },
            "additionalAttributes": {
              "type": "object",
              "description": "Additional information like Source Questions, Approver Ids, Inventory Type. This will be a Map of String Key and Object value"
            }
          }
        }
      }
    },
    "categories": {
      "type": "array",
      "description": "List of categories",
      "items": {
        "type": "object",
        "title": "RiskCategoryInformation",
        "properties": {
          "id": {
            "type": "string",
            "format": "uuid",
            "description": "Identifier for Risk Category"
          },
          "name": {
            "type": "string",
            "description": "Risk Category Name"
          },
          "nameKey": {
            "type": "string",
            "description": "Risk Category Name Key value for translation"
          }
        }
      }
    },
    "controlsIdentifier": {
      "type": "array",
      "description": "List of Control Identifiers",
      "items": {
        "type": "string"
      }
    },
    "createdUTCDateTime": {
      "type": "string",
      "format": "date-time",
      "description": "Risk created time"
    },
    "creationType": {
      "type": "string",
      "description": "Risk Creation Type"
    },
    "dateClosed": {
      "type": "string",
      "format": "date-time",
      "description": "Date when the risk is closed"
    },
    "deadline": {
      "type": "string",
      "format": "date-time",
      "description": "Deadline date for the risk"
    },
    "deleteType": {
      "type": "string",
      "description": "Risk delete type",
      "enum": [
        "SOFT"
      ]
    },
    "description": {
      "type": "string",
      "description": "Risk description"
    },
    "id": {
      "type": "string",
      "format": "uuid",
      "description": "Risk's uuid"
    },
    "impactLevel": {
      "type": "string",
      "description": "Residual impact level name"
    },
    "impactLevelId": {
      "type": "integer",
      "format": "int64",
      "description": "Residual impact level Id"
    },
    "inherentRiskLevel": {
      "type": "object",
      "title": "RiskLevelDetails",
      "properties": {
        "impactLevel": {
          "type": "string",
          "description": "Risk Impact Level name"
        },
        "impactLevelId": {
          "type": "integer",
          "format": "int64",
          "description": "Risk Impact level Id"
        },
        "level": {
          "type": "string",
          "description": "Risk Level Name"
        },
        "levelId": {
          "type": "integer",
          "format": "int64",
          "description": "Risk Level Id"
        },
        "probabilityLevel": {
          "type": "string",
          "description": "Risk Probability Level Name"
        },
        "probabilityLevelId": {
          "type": "integer",
          "format": "int64",
          "description": "Risk Probability Level Id"
        },
        "riskScore": {
          "type": "number",
          "description": "Risk Score"
        }
      }
    },
    "justification": {
      "type": "string"
    },
    "level": {
      "type": "string",
      "description": "Residual level name"
    },
    "levelDisplayName": {
      "type": "string",
      "description": "Residual level display name"
    },
    "levelId": {
      "type": "integer",
      "format": "int64",
      "description": "Residual level Id"
    },
    "mitigatedDate": {
      "type": "string",
      "format": "date-time",
      "description": "Risk mitigated date"
    },
    "mitigation": {
      "type": "string",
      "description": "Risk Mitigation details"
    },
    "number": {
      "type": "integer",
      "format": "int64",
      "description": "Integer risk identifier"
    },
    "orgGroup": {
      "type": "object",
      "title": "BasicEntityDetail",
      "properties": {
        "id": {
          "type": "string",
          "format": "uuid",
          "description": "entity GUID"
        },
        "name": {
          "type": "string",
          "description": "entity name"
        }
      }
    },
    "previousState": {
      "type": "string",
      "enum": [
        "IDENTIFIED",
        "RECOMMENDATION_ADDED",
        "RECOMMENDATION_SENT",
        "REMEDIATION_PROPOSED",
        "EXCEPTION_REQUESTED",
        "REDUCED",
        "RETAINED",
        "ARCHIVED_IN_VERSION"
      ]
    },
    "probabilityLevel": {
      "type": "string",
      "description": "Residual probability level"
    },
    "probabilityLevelId": {
      "type": "integer",
      "format": "int64",
      "description": "Residual probability level Id"
    },
    "recommendation": {
      "type": "string",
      "description": "Risk Recommendation"
    },
    "remediationProposal": {
      "type": "string",
      "description": "Proposed remediation"
    },
    "reminderDays": {
      "type": "integer",
      "format": "int64",
      "description": "Deadline reminder days"
    },
    "requestedException": {
      "type": "string",
      "description": "Risk exception request"
    },
    "result": {
      "type": "string",
      "description": "Risk Result",
      "enum": [
        "Accepted",
        "Avoided",
        "Reduced",
        "Rejected",
        "Transferred",
        "Ignored"
      ]
    },
    "riskApprovers": {
      "type": "string",
      "description": "Risk approvers name csv"
    },
    "riskApproversId": {
      "type": "array",
      "description": "Risk approvers Id",
      "items": {
        "type": "string",
        "format": "uuid"
      }
    },
    "riskOwnersId": {
      "type": "array",
      "description": "List of risk owners Id",
      "items": {
        "type": "string",
        "format": "uuid"
      }
    },
    "riskOwnersName": {
      "type": "string",
      "description": "Risk owners name csv"
    },
    "riskScore": {
      "type": "number",
      "description": "Risk score"
    },
    "ruleRootVersionId": {
      "type": "string",
      "format": "uuid",
      "description": "For Auto risk, rule Id reference"
    },
    "source": {
      "type": "object",
      "required": [
        "id",
        "name",
        "type"
      ],
      "title": "RiskSourceInformation",
      "properties": {
        "additionalAttributes": {
          "type": "object",
          "description": "Additional information about the Source Entity. This will be a Map of String Key and Object value"
        },
        "id": {
          "type": "string",
          "format": "uuid",
          "description": "Source Entity Id"
        },
        "name": {
          "type": "string",
          "description": "Source Entity Name"
        },
        "type": {
          "type": "string",
          "description": "Source Entity Type",
          "enum": [
            "PIA",
            "RA",
            "GRA",
            "INVENTORY",
            "INCIDENT",
            "GENERIC"
          ]
        }
      }
    },
    "stage": {
      "type": "object",
      "title": "BasicEntityDetailTranslation",
      "properties": {
        "id": {
          "type": "string",
          "format": "uuid",
          "description": "Entity GUID"
        },
        "name": {
          "type": "string",
          "description": "Entity Name"
        },
        "nameKey": {
          "type": "string",
          "description": "Entity Name Key for translation"
        }
      }
    },
    "state": {
      "type": "string",
      "description": "Risk state",
      "enum": [
        "IDENTIFIED",
        "RECOMMENDATION_ADDED",
        "RECOMMENDATION_SENT",
        "REMEDIATION_PROPOSED",
        "EXCEPTION_REQUESTED",
        "REDUCED",
        "RETAINED",
        "ARCHIVED_IN_VERSION"
      ]
    },
    "targetRiskLevel": {
      "type": "object",
      "title": "RiskLevelDetails",
      "properties": {
        "impactLevel": {
          "type": "string",
          "description": "Risk Impact Level name"
        },
        "impactLevelId": {
          "type": "integer",
          "format": "int64",
          "description": "Risk Impact level Id"
        },
        "level": {
          "type": "string",
          "description": "Risk Level Name"
        },
        "levelId": {
          "type": "integer",
          "format": "int64",
          "description": "Risk Level Id"
        },
        "probabilityLevel": {
          "type": "string",
          "description": "Risk Probability Level Name"
        },
        "probabilityLevelId": {
          "type": "integer",
          "format": "int64",
          "description": "Risk Probability Level Id"
        },
        "riskScore": {
          "type": "number",
          "description": "Risk Score"
        }
      }
    },
    "threat": {
      "type": "object",
      "title": "ThreatInformation",
      "properties": {
        "id": {
          "type": "string",
          "format": "uuid",
          "description": "Threat Id"
        },
        "identifier": {
          "type": "string",
          "description": "Threat Identifier"
        },
        "name": {
          "type": "string",
          "description": "Threat Name"
        }
      }
    },
    "treatment": {
      "type": "string",
      "description": "Risk Treatment"
    },
    "treatmentStatus": {
      "type": "string",
      "description": "Risk Treatment status",
      "enum": [
        "InProgress",
        "UnderReview",
        "ExceptionRequested",
        "Approved",
        "ExceptionGranted"
      ]
    },
    "type": {
      "type": "string",
      "description": "Risk Type",
      "enum": [
        "ASSESSMENTS",
        "ASSETS",
        "PROCESSING_ACTIVITIES",
        "VENDORS",
        "ENTITIES",
        "INCIDENTS"
      ]
    },
    "typeRefIds": {
      "type": "array",
      "description": "Assessment Risk Question Reference Ids",
      "items": {
        "type": "string",
        "format": "uuid"
      }
    },
    "vulnerabilities": {
      "type": "array",
      "description": "list of vulnerabilities",
      "items": {
        "type": "object",
        "title": "VulnerabilityInformation",
        "properties": {
          "id": {
            "type": "string",
            "format": "uuid",
            "description": "Vulnerability Id"
          },
          "identifier": {
            "type": "string",
            "description": "Vulnerability Identifier"
          },
          "name": {
            "type": "string",
            "description": "Vulnerability Name"
          }
        }
      }
    },
    "workflow": {
      "type": "object",
      "title": "BasicEntityDetail",
      "properties": {
        "id": {
          "type": "string",
          "format": "uuid",
          "description": "entity GUID"
        },
        "name": {
          "type": "string",
          "description": "entity name"
        }
      }
    }
  },
  "title": "RiskInformation"
}

Note that a 404 error will return if the request is not formatted correctly. This can be due to an invalid ID, invalid attribute data, or submitting a malformed request. The attributes for inherentRiskLevel, levelId, riskScore, probabilityLevelId (if applicable), and impactLevelId (if applicable) cannot be null.