risks

(V2) Get a list of questionnaire risks for one or more watched vendors or a specific questionnaire

Returns a list of currently open questionnaire risks for one or more of an account's watched vendors, including information on whether waivers exist for each risk.

Required API key permissions: VendorRisk (select when creating API key in Account Settings)

get/risks/vendors/questionnaires/v2

Request

Query parameters

vendor_idinteger

Restricts the questionnaire risks returned to a specific watched vendor by ID

primary_hostnamestring

Restricts the questionnaire risks returned to a specific watched vendor by vendor primary hostname

questionnaire_idinteger

Restricts the questionnaire risks returned to a specific questionnaire by ID

page_tokenstring

The token of the page to be returned. Will return the first page if left blank.

page_sizeinteger

The number of risks to return per page. This Integer between 10 and 2000 defaults to 1000 if not supplied.

ignore_waived_risksboolean

Indicates that waived risks should not be returned in the risk set

Response

Questionnaire risks for specific watched vendors or questionnaire instances, including waiver details if appropriate

next_page_tokenstring

The token to be used to retrieve the next page of results. Will not be returned if there are no more results.

total_resultsinteger

The total number of risks found.

Example response

{
  "next_page_token": "4",
  "risks": [
    {
      "createdAt": "2022-03-20T23:25:26.419947Z",
      "isSharedQuestionnaire": true,
      "questionnaireId": 4,
      "riskAdjustedSeverity": "medium",
      "riskCategory": "secprog",
      "riskId": "warn_secprog_nopolicies",
      "riskName": "Inadequate security policies",
      "riskSeverity": "low",
      "riskText": "Security policies are an important tool for establishing authoritative security requirements and enforcing them throughout the company. Policies form the basis of any security program.",
      "vendorId": 123456789
    }
  ],
  "total_results": 10
}

Changes

No recorded changes to this operation across all 2 revisions of this API.