---
title: "Get Risk Template"
method: GET
path: "/api/risk-template/v1/templates/{riskTemplateId}"
tags: ["Risk Templates"]
---

# Get Risk Template

`GET /api/risk-template/v1/templates/{riskTemplateId}`

## Request

- Base URL: `https://hostname`
- URL: `https://hostname/api/risk-template/v1/templates/{riskTemplateId}`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://{hostname}/api/access/v1/oauth/token` scopes: `INTEGRATION`, `RISK`, `RISK_READ`

Use this API to retrieve the details for the specified risk template.

> 🗒 Things to Know
>
> - The `templateId` can be obtained from the OneTrust application URL when accessing the Template Details screen for a risk template.

## Path parameters

- `riskTemplateId` string, uuid, required

## Response `200`

OK

- TechRiskComplianceRiskTemplateRiskTemplateInformation[]
  - `id` string, uuid: The unique identifier of the risk template.
  - `name` string: The display name of the risk template.
  - `riskName` string: The name of the risk associated with this template.
  - `description` string: The detailed description of the risk template.
  - `state` 'ACTIVE' | 'ARCHIVED': The current status indicating if the template is active or archived.
  - `orgGroup` TechRiskComplianceRiskTemplateBasicEntityDetail
    - `id` string, uuid: The unique identifier of the organization entity.
    - `name` string: The display name of the organization entity.
  - `treatmentPlan` string: The treatment plan text describing risk mitigation strategies.
  - `inherentRiskLevel` TechRiskComplianceRiskTemplateRiskLevelDetails
    - `levelId` integer: The numeric identifier for target standard risk scoring.
    - `level` string: The target risk level name for standard scoring methodology.
    - `impactLevelId` integer: The numeric identifier for target impact in matrix scoring.
    - `impactLevel` string: The target impact level name for matrix methodology.
    - `probabilityLevelId` integer: The numeric identifier for target probability in matrix scoring.
    - `probabilityLevel` string: The target probability level name for matrix methodology.
    - `riskScore` number: The target numeric risk score value after mitigation.
  - `targetRiskLevel` TechRiskComplianceRiskTemplateRiskLevelDetails
    - `levelId` integer: The numeric identifier for target standard risk scoring.
    - `level` string: The target risk level name for standard scoring methodology.
    - `impactLevelId` integer: The numeric identifier for target impact in matrix scoring.
    - `impactLevel` string: The target impact level name for matrix methodology.
    - `probabilityLevelId` integer: The numeric identifier for target probability in matrix scoring.
    - `probabilityLevel` string: The target probability level name for matrix methodology.
    - `riskScore` number: The target numeric risk score value after mitigation.
  - `threat` TechRiskComplianceRiskTemplateThreatInformation
    - `id` string, uuid: The unique identifier of the threat entity.
    - `name` string: The display name of the threat.
    - `identifier` string: The reference identifier of the threat.
  - `vulnerabilities` TechRiskComplianceRiskTemplateVulnerabilityInformation[]: The list of vulnerabilities associated with this risk template.
    - `id` string, uuid: The unique identifier of the vulnerability entity.
    - `name` string: The display name of the vulnerability.
    - `identifier` string: The reference identifier of the vulnerability.
  - `categories` TechRiskComplianceRiskTemplateRiskCategoryInformation[]: The list of risk categories assigned to this template.
    - `id` string, uuid: The unique identifier of the risk category.
    - `name` string: The display name of the risk category.
    - `nameKey` string: The translation key used for localizing the category name.
  - `controls` TechRiskComplianceRiskTemplateControlInformation[]: The list of controls associated with this risk template.
    - `id` string, uuid: The unique identifier of the control entity.
    - `name` string: The display name of the control.
    - `identifier` string: The reference identifier of the control.
  - `createdDate` string, date-time: The timestamp when the risk template was created.
  - `attributeValues` object: The custom attributes and their values specific to this risk template.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `429`: Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500`: Internal Server Error

---

[API](https://skmtc.dev/onetrust/apis/tech-risk-compliance-it-risk-management.md) - [All operations](https://skmtc.dev/onetrust/apis/tech-risk-compliance-it-risk-management/llms.txt) - [OpenAPI document](https://skmtc.dev/onetrust/apis/tech-risk-compliance-it-risk-management/revisions/d0bfd2a3c53e?raw)