---
title: "Modify Risk"
method: PATCH
path: "/api/risk/v2/risks/{riskId}"
tags: ["Risk Management"]
---

# Modify Risk

`PATCH /api/risk/v2/risks/{riskId}`

## Request

- Base URL: `https://hostname`
- URL: `https://hostname/api/risk/v2/risks/{riskId}`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://{hostname}/api/access/v1/oauth/token` scopes: `INTEGRATION`, `RISK`

Use this API to partially modify an existing risk in the Risk Register.

> 🗒 Things to Know
> 
> - The **Managing organization assignment for risks** setting must be enabled in the OneTrust Platform to pass values for the `orgGroupId` parameter using this API. If this setting is disabled, any values passed for the `orgGroupId` parameter will be ignored. This setting can be found on the **Global Settings > Risk, Controls & Evidence > General** screen.

## Path parameters

- `riskId` string, uuid, required

## Request body

- TechRiskComplianceRiskRiskPatchRequest
  - `description` string: description
  - `recommendation` string: recommendation
  - `deadline` string, date-time: deadline, format - YYYY-MM-DDTHH:MM:SS.FFFZ
  - `reminderDays` integer: number of days before the deadline when the reminder will be sent
  - `probabilityLevelId` integer: probability level id
  - `impactLevelId` integer: impact level id
  - `riskScore` number: risk score
  - `levelId` integer: risk level Id, replacement for level field
  - `categoryIds` string[]: List of Category Ids
  - `inherentRiskLevel` TechRiskComplianceRiskRiskLevelDetails
    - `levelId` integer: Risk level identifier
    - `level` string: Risk level name
    - `impactLevelId` integer: Impact level identifier
    - `impactLevel` string: Impact level name
    - `probabilityLevelId` integer: Probability level identifier
    - `probabilityLevel` string: Probability level name
    - `riskScore` number: Calculated risk score
    - `levelGuid` string, uuid: Risk level unique identifier
    - `levelKey` string: Risk level key
    - `colorCode` string: Risk level color code
    - `impactLevelGuid` string, uuid: Impact level unique identifier
    - `impactLevelKey` string: Impact level key
    - `probabilityLevelGuid` string, uuid: Probability level unique identifier
    - `probabilityLevelKey` string: Probability level key
  - `targetRiskLevel` TechRiskComplianceRiskRiskLevelDetails
    - `levelId` integer: Risk level identifier
    - `level` string: Risk level name
    - `impactLevelId` integer: Impact level identifier
    - `impactLevel` string: Impact level name
    - `probabilityLevelId` integer: Probability level identifier
    - `probabilityLevel` string: Probability level name
    - `riskScore` number: Calculated risk score
    - `levelGuid` string, uuid: Risk level unique identifier
    - `levelKey` string: Risk level key
    - `colorCode` string: Risk level color code
    - `impactLevelGuid` string, uuid: Impact level unique identifier
    - `impactLevelKey` string: Impact level key
    - `probabilityLevelGuid` string, uuid: Probability level unique identifier
    - `probabilityLevelKey` string: Probability level key
  - `treatment` string: AKA remediation in current workflow
  - `threatId` string, uuid: Threat id
  - `vulnerabilityIds` string[]: List of vulnerabilityIds
  - `orgGroupId` string, uuid: organization group id
  - `attributeValues` object: Custom Attributes
  - `name` string: name
  - `treatmentStatus` 'InProgress' | 'UnderReview' | 'ExceptionRequested' | 'Approved' | 'ExceptionGranted': treatment status to set for Risk in Custom Workflows
  - `treatmentStatusId` string, uuid
  - `result` 'Accepted' | 'Avoided' | 'Reduced' | 'Rejected' | 'Transferred' | 'Ignored': Result to set on Risk as part of approval
  - `resultId` string, uuid: result Id
  - `inherentLevelId` integer
  - `riskManager` string[]: list of manager ids

## Response `204`

No Content

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `429`: Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500`: Internal Server Error

---

[API](https://skmtc.dev/onetrust/apis/tech-risk-compliance-it-risk-management.md) - [All operations](https://skmtc.dev/onetrust/apis/tech-risk-compliance-it-risk-management/llms.txt) - [OpenAPI document](https://skmtc.dev/onetrust/apis/tech-risk-compliance-it-risk-management/revisions/d0bfd2a3c53e?raw)