The Audit Management API provides comprehensive REST endpoints for managing enterprise audits, workp apers, and compliance assessments with OAuth2 security and advanced filtering capabilities. (11 oper ations.)
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/tech-risk-and-compliance-audit-management"curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
{"openapi":"3.1.0","info":{"title":"Tech Risk & Compliance - Audit Management","description":"The Audit Management API provides comprehensive REST endpoints for managing enterprise audits, workpapers, and compliance assessments with OAuth2 security and advanced filtering capabilities.","version":"1.0","contact":{"name":"OneTrust Support","url":"https://my.onetrust.com/s/contactsupport"},"license":{"name":"Apache 2.0","url":"https://www.apache.org/licenses/LICENSE-2.0"}},"servers":[{"url":"https://{hostname}","variables":{"hostname":{"default":"hostname","description":"The OneTrust hostname such as app.onetrust.com, app-eu.onetrust.com, app-de.onetrust.com, app-uk.onetrust.com, app-apac.onetrust.com, trial.onetrust.com, or uat.onetrust.com."}}}],"tags":[{"name":"Audits","description":"APIs to manage the complete audit lifecycle including creation, updates, deletion, scope assignment, and retrieval with support for approvers, auditors, and custom attributes.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-audit-management.json"}},{"name":"Workpapers","description":"APIs to handle audit workpaper operations including testing results, sampling outcomes, interview findings, control assessments, and workpaper attribute management.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-audit-management.json"}}],"x-onetrust":{"spec-label":"OpenAPI 3.1.0","links":["{'Audit Management Knowledge Base': 'https://my.onetrust.com/s/topic/0TO1Q000000bHfvWAE/audit-management'}"]},"x-readme":{"explorer-enabled":false,"proxy-enabled":false,"metrics-enabled":false},"paths":{"/api/audit-management/v1/audit-scopes/{scopeId}":{"delete":{"operationId":"deleteScopeUsingDELETE","summary":"Delete Audit Scope","description":"Use this API to delete an existing control or control implementation from the scope of an audit.","tags":["Audits"],"parameters":[{"name":"scopeId","in":"path","description":"Scope identifier (UUID)","required":true,"schema":{"type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174000"}},{"name":"deleteFinding","in":"query","description":"Boolean which determines if associated findings should be deleted. If TRUE, findings associated with the scope will be deleted. If FALSE, findings will have that relationship removed but still be available.","required":false,"schema":{"type":"boolean","example":true,"default":true}}],"responses":{"204":{"description":"No Content - Scope successfully deleted"},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"OAUTH2":["AUDIT_MANAGEMENT"]}]}},"/api/audit-management/v1/audit-workpapers/pages":{"post":{"operationId":"getAuditWorkpaperListViewUsingPOST","summary":"Get List of Workpapers","description":"Use this API to retrieve a list of all workpapers by key terms and filters. The response will include details for each workpaper along with the associated audit, findings, and attributes.","tags":["Workpapers"],"parameters":[{"name":"page","in":"query","description":"Results page to be retrieved (0..N)","schema":{"type":"integer","format":"int32","example":0,"default":0,"minimum":0}},{"name":"size","in":"query","description":"Number of records per page (1..50)","schema":{"type":"integer","format":"int32","example":20,"default":20,"maximum":2000,"minimum":1}},{"name":"sort","in":"query","description":"Sorting criteria in the format: property(,asc|desc). Default sort order is ascending.","schema":{"type":"string","example":"number,asc","default":"number,asc","enum":["number,asc","number,desc","name,asc","name,desc"]}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SearchCriteriaRequest"}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/PageWorkPaperListInformation"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"OAUTH2":["AUDIT_MANAGEMENT"]}]}},"/api/audit-management/v1/audit-workpapers/{workpaperId}":{"put":{"operationId":"editWorkpaperDetailsUsingPOST","summary":"Update Workpaper","description":"Use this API to update the attributes of a specific workpaper.\n\n> Note: Things to Know\n> \n> - Workpaper assignees must be updated using the [Update Audit Scope](https://developer.onetrust.com/onetrust/reference/validateandreassignscopesusingput) API.","tags":["Workpapers"],"parameters":[{"name":"workpaperId","in":"path","description":"Workpaper identifier (UUID)","required":true,"schema":{"type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174000"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/WorkpaperDetailsUpdateRequest"}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WorkpaperDetailInformation"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"OAUTH2":["AUDIT_MANAGEMENT"]}]}},"/api/audit-management/v1/audit-workpapers/{workpaperId}/attribute-details":{"get":{"operationId":"getWorkpaperResultUsingGET","summary":"Get Workpaper Results","description":"Use this API to retrieve the results and the attributes of a specific workpaper.\n\n> Note: Things to Know\n> \n> - Workpaper control details can be retrieved using the [Get Workpaper Control Details](https://developer.onetrust.com/onetrust/reference/getworkpaperbasicdetailinformationusingget) API.","tags":["Workpapers"],"parameters":[{"name":"workpaperId","in":"path","description":"Workpaper identifier (UUID)","required":true,"schema":{"type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174000"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WorkpaperDetailInformation"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"OAUTH2":["AUDIT_MANAGEMENT"]}]}},"/api/audit-management/v1/audit-workpapers/{workpaperId}/control-details":{"get":{"operationId":"getWorkpaperBasicDetailInformationUsingGET","summary":"Get Workpaper Control Details","description":"Use this API to retrieve the control details of a specific workpaper.\n\n> Note: Things to Know\n> \n> - Workpaper attributes can be retrieved using the [Get Workpaper Results](https://developer.onetrust.com/onetrust/reference/getworkpaperresultusingget) API.","tags":["Workpapers"],"parameters":[{"name":"workpaperId","in":"path","description":"Workpaper identifier (UUID)","required":true,"schema":{"type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174000"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ControlWorkpaperBasicInformation"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"OAUTH2":["AUDIT_MANAGEMENT"]}]}},"/api/audit-management/v1/audits":{"post":{"operationId":"validateAndCreateAuditUsingPOST","summary":"Create Audit","description":"Use this API to create a new audit.","tags":["Audits"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AuditCreateModel"}}}},"responses":{"201":{"description":"Created","content":{"application/json":{"schema":{"type":"string","format":"uuid"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"OAUTH2":["AUDIT_MANAGEMENT"]}]}},"/api/audit-management/v1/audits/pages":{"post":{"operationId":"getAuditListPageUsingPOST","summary":"Get List of Audits","description":"Use this API to retrieve a list of audits by key terms and filters. The response will include details for each audit along with the associated approvers, attributes, and auditors.","tags":["Audits"],"parameters":[{"name":"page","in":"query","description":"Results page to be retrieved (0..N)","schema":{"type":"integer","format":"int32","example":0,"default":0,"minimum":0}},{"name":"size","in":"query","description":"Number of records per page (1..50)","schema":{"type":"integer","format":"int32","example":20,"default":20,"maximum":2000,"minimum":1}},{"name":"sort","in":"query","description":"Sorting criteria in the format: property(,asc|desc). Default sort order is descending.","schema":{"type":"string","example":"number,desc","default":"number,desc","enum":["number,asc","number,desc","name,asc","name,desc","orgGroupId,asc","orgGroupId,desc","startDate,asc","startDate,desc","endDate,asc","endDate,desc"]}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SearchCriteriaRequest"}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/PageAuditDetailListInformation"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"OAUTH2":["AUDIT_MANAGEMENT"]}]}},"/api/audit-management/v1/audits/{auditId}":{"get":{"operationId":"getAuditDetailUsingGET","summary":"Get Audit","description":"Use this API to retrieve a single audit by its unique identifier.","tags":["Audits"],"parameters":[{"name":"auditId","in":"path","description":"Audit Identifier (`auditID`) is the guid of the Audit item. This can be in URL of the Audit details within the tool.","required":true,"schema":{"type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174000"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AuditDetailInformation"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"OAUTH2":["AUDIT_MANAGEMENT"]}]},"put":{"operationId":"validateAndUpdateAuditUsingPUT","summary":"Update Audit","description":"Use this API to update the approvers, attributes, and auditors of a specific audit.","tags":["Audits"],"parameters":[{"name":"auditId","in":"path","description":"Audit identifier (UUID)","required":true,"schema":{"type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174000"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AuditUpdateModel"}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AuditDetailInformation"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"OAUTH2":["AUDIT_MANAGEMENT"]}]},"delete":{"operationId":"deleteAuditUsingDELETE","summary":"Delete Audit","description":"Use this API to delete an existing audit and its associated workpapers, tasks, and attachments. Any findings associated with the audit can either be retained or deleted. Audit deletion is a permanent action that should be exercised with caution.","tags":["Audits"],"parameters":[{"name":"auditId","in":"path","description":"Audit identifier (UUID)","required":true,"schema":{"type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174000"}},{"name":"deleteFinding","in":"query","description":"Boolean which determines if associated findings to be deleted. If TRUE, findings associated with the Audit will be deleted. If FALSE, findings will have that relationship removed but still be available.","required":false,"schema":{"type":"boolean","example":true,"default":true}}],"responses":{"204":{"description":"No Content"},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"OAUTH2":["AUDIT_MANAGEMENT"]}]}},"/api/audit-management/v1/audits/{auditId}/reassign-scopes":{"put":{"operationId":"validateAndReassignScopesUsingPUT","summary":"Update Audit Scope","description":"Use this API to update the scope of an audit.","tags":["Audits"],"parameters":[{"name":"auditId","in":"path","description":"Audit identifier (UUID)","required":true,"schema":{"type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174000"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ScopesAssignmentRequest"}}}}},"responses":{"200":{"description":"OK"},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"OAUTH2":["AUDIT_MANAGEMENT"]}]}}},"components":{"schemas":{"ApproverInformation":{"type":"object","properties":{"approverId":{"description":"Approver Identifier","type":"string","format":"uuid","example":"f3d38630-9246-45be-898a-69878bd108e4"},"fullName":{"description":"Approver Name","type":"string","example":"JohnJohn"}},"title":"ApproverInformation"},"AttributeValueInformation":{"type":"object","properties":{"id":{"description":"Unique identifier for the attribute option","type":"string","format":"uuid","example":"a34ccec7-1ec0-4d65-9075-bdd0d923f1d1"},"value":{"description":"Attribute value","type":"string","example":"Text Value"},"valueKey":{"description":"Translation key used for localizing the value","type":"string","example":"attribute.option.valueKey"},"colorCode":{"description":"Color code associated with the option. Used for score-based attributes.","type":"string","example":"red"},"optionSelectionValue":{"description":"Selection score value linked to the option. Used for score-based or numerical-based attributes.","type":"string","example":"3.5"},"displayLabel":{"description":"Display name for the option, used for external attributes managed by other systems","type":"string","example":"United State | San Francisco"},"disabled":{"description":"Indicates whether this attribute option is currently disabled.","type":"boolean","example":false,"default":"false"}},"required":["value"]},"AuditDetailInformation":{"type":"object","properties":{"auditId":{"description":"Audit Identifier","type":"string","format":"uuid","example":"25ce2fe7-aece-4f0d-a216-c189b1d1aac4"},"name":{"description":"Audit Name","type":"string","example":"Annual Security Assessment 2025"},"number":{"description":"Audit Number","type":"integer","format":"int64","example":10023},"orgGroupId":{"description":"Audit Organization Group Identifier","type":"string","format":"uuid","example":"b7d17fc8-889f-472e-8c74-f1169821e7e7"},"auditTypeId":{"description":"Audit Type Identifier","type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174002"},"auditType":{"description":"Audit Type","type":"string","example":"Security Audit"},"auditTypeNameKey":{"description":"Translation key for the audit type name used for localization","type":"string","example":"audit.type.security"},"goal":{"description":"The goal of the Audit.","type":"string","example":"To assess compliance with security controls and identify areas for improvement"},"frameworks":{"description":"Frameworks","type":"array","items":{"$ref":"#/components/schemas/BasicEntityDetail"},"example":[{"id":"df4a5bb9-e733-4e90-83f6-7efa00fac5b9","name":"NIST Cybersecurity Framework"}]},"startDate":{"description":"Audit Start Date","type":"string","format":"date","example":"2025-06-01"},"endDate":{"description":"Audit End Date","type":"string","format":"date","example":"2025-06-30"},"orgGroup":{"description":"Audit Organization Group","type":"string","example":"Finance Department"},"auditors":{"description":"Auditors","type":"array","items":{"$ref":"#/components/schemas/AuditorInformation"},"example":[{"id":"df4a5bb9-e733-4e90-83f6-7efa00fac5b9","name":"John Doe"}]},"approvers":{"description":"Audit Approvers","type":"array","items":{"$ref":"#/components/schemas/ApproverInformation"},"example":[{"id":"df4a5bb9-e733-4e90-83f6-7efa00fac5b9","name":"Jane Doe"}]},"workflow":{"description":"Workflow information for the audit","example":{"id":"df4a5bb9-e733-4e90-83f6-7efa00fac5b9","name":"Standard Audit Workflow"},"$ref":"#/components/schemas/BasicEntityDetailTranslation"},"stage":{"description":"Current stage of the audit","example":{"id":"df4a5bb9-e733-4e90-83f6-7efa00fac5b9","name":"In Progress","badgeColor":"blue"},"$ref":"#/components/schemas/StageInformation"},"lastModifiedDate":{"description":"Date when the audit was last modified","type":"string","format":"date-time","example":"2025-06-15T14:30:00Z"},"attributes":{"description":"Custom Attributes","type":"object","example":{"attributeTextValue.value1":[{"id":null,"value":"Critical","valueKey":null}]},"additionalProperties":{"type":"array","items":{"$ref":"#/components/schemas/AttributeValueInformation"}}}},"title":"AuditDetailInformation"},"AuditorInformation":{"type":"object","properties":{"auditorId":{"description":"Auditor Identifier","type":"string","format":"uuid","example":"f3d38630-9246-45be-898a-69878bd108e4"},"fullName":{"description":"Auditor Name","type":"string","example":"Jane Smith"}},"title":"AuditorInformation"},"BasicEntityDetail":{"type":"object","properties":{"id":{"description":"ID of the entity","type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174000"},"name":{"description":"Name of the Entity","type":"string","example":"Security Entity"}},"example":{"id":"123e4567-e89b-12d3-a456-426614174000","name":"Sample Entity"},"required":["id"],"title":"BasicEntityDetail"},"BasicEntityDetailTranslation":{"type":"object","properties":{"id":{"description":"ID of the entity","type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174000"},"name":{"description":"Name of the Entity","type":"string","example":"Security Entity"},"nameKey":{"description":"Namekey of the entity for localization","type":"string","example":"workflow.stage.in_progress"}},"example":{"id":"123e4567-e89b-12d3-a456-426614174000","name":"In Progress","nameKey":"workflow.stage.in_progress"},"required":["id"],"title":"BasicEntityDetailTranslation"},"StageInformation":{"type":"object","properties":{"id":{"description":"ID of the entity","type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174000"},"name":{"description":"Name of the Entity","type":"string","example":"Security Entity"},"nameKey":{"description":"Namekey of the entity for localization","type":"string","example":"workflow.stage.in_progress"},"badgeColor":{"description":"Workflow Stage Badge Color","type":"string","example":"blue"}},"required":["id"],"title":"StageInformation"},"AuditHeaderModel":{"type":"object","properties":{"name":{"description":"Audit Name","type":"string","example":"Annual Security Compliance Audit","minLength":1},"auditTypeId":{"description":"Audit Type Identifier","type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174002"},"goal":{"description":"The goal of the Audit.","type":"string","example":"To assess compliance with information security controls and identify areas for improvement"},"startDate":{"description":"Audit Start Date","type":"string","format":"date","example":"2025-06-01"},"endDate":{"description":"Audit End Date","type":"string","format":"date","example":"2025-06-30"}},"required":["auditTypeId","name"],"title":"AuditHeaderModel"},"AuditUpdateModel":{"type":"object","properties":{"header":{"description":"Audit Header","example":{"name":"Annual Security Audit","goal":"Assess security controls"},"$ref":"#/components/schemas/AuditHeaderModel"},"auditors":{"description":"List of auditors. A minimum of one auditor has to be assigned to the audit","type":"array","items":{"$ref":"#/components/schemas/UserAssignmentModel"}},"approvers":{"description":"List of approvers. A minimum of one approver has to be assigned to the audit","type":"array","items":{"$ref":"#/components/schemas/UserAssignmentModel"}},"auditorAssignmentType":{"type":"string","enum":["THROW_EXCEPTION_ON_AUDITOR_REMOVAL_IF_SCOPES_ASSIGNED","UNASSIGN_SCOPES_ON_AUDITOR_REMOVAL"]},"attributes":{"description":"Custom Attributes","type":"object","additionalProperties":{"type":"array","items":{"$ref":"#/components/schemas/AttributeValueInformation"}}}},"required":["approvers","auditorAssignmentType","auditors","header"],"title":"AuditUpdateModel"},"UserAssignmentModel":{"type":"object","properties":{"email":{"description":"Email","type":"string","example":"john.auditor@example.com"}},"required":["email"],"title":"UserAssignmentModel"},"ScopesAssignmentRequest":{"type":"object","properties":{"controlId":{"description":"The guid of Master Control for the Audit Scope. This should match the framework of the Audit.","type":"string","format":"uuid","example":"123e4567-e89b-12d3-a456-426614174000"},"auditorEmail":{"description":"The email address of the Auditor to be assigned to the scope.","type":"string","example":"auditor@example.com","minLength":5},"approverEmail":{"description":"The email address of the Approver to be assigned to the scope.","type":"string","example":"approver@example.com","minLength":5}},"required":["controlId"],"title":"ScopesAssignmentRequest"},"WorkpaperDetailInformation":{"type":"object","properties":{"testingResult":{"description":"Workpaper testing result","type":"string","example":"Control is operating effectively as designed"},"samplingResult":{"description":"Workpaper sampling result","type":"string","example":"Sample of 25 transactions were tested with no exceptions noted"},"interviewResult":{"description":"Workpaper interview result","type":"string","example":"Confirmed implementation with the security team"},"auditors":{"description":"Auditor Names","type":"array","items":{"$ref":"#/components/schemas/BasicEntityDetail"},"example":[{"id":"123e4567-e89b-12d3-a456-426614174000","name":"John Doe"}]},"approvers":{"description":"Approver Names","type":"array","items":{"$ref":"#/components/schemas/BasicEntityDetail"},"example":[{"id":"123e4567-e89b-12d3-a456-426614174001","name":"Jane Smith"}]},"entityDetail":{"description":"Scope Entity Detail","example":{"id":"123e4567-e89b-12d3-a456-426614174002","name":"Access Control Policy"},"$ref":"#/components/schemas/BasicEntityDetail"},"attributes":{"description":"Custom Attributes","type":"object","example":{"status":[{"value":"Completed"}],"priority":[{"value":"High"}]},"additionalProperties":{"type":"array","items":{"$ref":"#/components/schemas/AttributeValueInformation"}}}},"title":"WorkpaperDetailInformation"},"WorkpaperDetailsUpdateRequest":{"type":"object","properties":{"testingResult":{"description":"Workpaper testing result","type":"string","example":"Control is operating effectively"},"samplingResult":{"description":"Workpaper sampling result","type":"string","example":"Sample of 25 records reviewed"},"interviewResult":{"description":"Workpaper interview result","type":"string","example":"Confirmed with security team"},"name":{"description":"Workpaper Name","type":"string","example":"Updated Workpaper Name"},"attributes":{"description":"Custom Attributes","type":"object","example":{"status":[{"value":"COMPLETED"}]},"additionalProperties":{"type":"array","items":{"$ref":"#/components/schemas/AttributeValueInformation"}}}},"title":"WorkpaperDetailsUpdateRequest"},"AuditCreateModel":{"type":"object","properties":{"header":{"description":"Audit Header","$ref":"#/components/schemas/AuditHeaderModel"},"auditSourceType":{"description":"Audit source type","type":"string","example":"NONE","enum":["NONE","VENDOR","ASSET","PR
# --- truncated at 32 KB (47 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/onetrust/refs/heads/main/openapi/onetrust-tech-risk-compliance-audit-management-openapi.json