The IT Risk Management API provides comprehensive REST endpoints for managing enterprise security co ntrols, threats, vulnerabilities, and their implementations with OAuth2 security and extensive custo mization capabilities. (57 operations.)
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/tech-risk-and-compliance-it-risk-management"curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
{"openapi":"3.1.0","info":{"title":"Tech Risk & Compliance - IT Risk Management","description":"The IT Risk Management API provides comprehensive REST endpoints for managing enterprise security controls, threats, vulnerabilities, and their implementations with OAuth2 security and extensive customization capabilities.","version":"1.0","contact":{"name":"OneTrust Support","url":"https://my.onetrust.com/s/contactsupport"},"license":{"name":"Apache 2.0","url":"https://www.apache.org/licenses/LICENSE-2.0"}},"servers":[{"url":"https://{hostname}","variables":{"hostname":{"default":"hostname","description":"The OneTrust hostname such as app.onetrust.com, app-eu.onetrust.com, app-de.onetrust.com, app-uk.onetrust.com, app-apac.onetrust.com, trial.onetrust.com, or uat.onetrust.com."}}}],"tags":[{"name":"Control Implementations","description":"APIs to handle control implementation operations including creation, updates, entity associations, attachment management, and comprehensive search across multiple entity types.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"x-displayName":"Control Implementations"},{"name":"Control Links","description":"APIs to create and manage relationships between controls through bulk linking operations with support for various relationship types and custom parameters.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"x-displayName":"Control Links"},{"name":"Controls","description":"APIs to manage the complete control lifecycle including creation, updates, deletion, retrieval, and entity type management with framework integration and custom attributes.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"x-displayName":"Controls"},{"name":"Entity Types","description":"APIs to manage risk entity types and source entity types, including retrieval of enabled entity configurations for risk associations.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"x-displayName":"Entity Types"},{"name":"Evidence Task Implementations","description":"APIs to manage evidence collection tasks including implementation retrieval, attachment handling (files, links, notes), and comprehensive search with interval-based collection tracking.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"x-displayName":"Evidence Task Implementations"},{"name":"Risk Actions","description":"APIs to manage risk workflow actions including submissions, approvals, exceptions, and stage transitions within the risk lifecycle.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"x-displayName":"Risk Actions"},{"name":"Risk Management","description":"APIs to manage risk configurations, scoring settings, categories, and metadata used across the risk management system.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"x-displayName":"Risk Management"},{"name":"Risk Relationships","description":"APIs to manage relationships between risks and other entities including threats, vulnerabilities, controls, and inventory items.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"x-displayName":"Risk Relationships"},{"name":"Risk Templates","description":"APIs to manage risk template retrieval operations, enabling users to access detailed risk template information including inherent and target risk levels, associated threats and vulnerabilities, control mappings, risk categories, and custom attribute values for comprehensive risk assessment and management.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"x-displayName":"Risk Templates"},{"name":"Risks","description":"APIs to manage the complete risk lifecycle including creation, updates, deletion, search, and retrieval of risk details and attributes.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"x-displayName":"Risks"},{"name":"Threats","description":"APIs to handle threat library operations including threat creation, modification, deletion, and comprehensive search functionality with framework and category support.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"x-displayName":"Threats"},{"name":"Vulnerabilities","description":"APIs to manage vulnerabilities in the vulnerability library including creation, updates, deletion, and retrieval with support for bulk operations and custom attributes.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"x-displayName":"Vulnerabilities"}],"paths":{"/api/controls/v1/control-implementation-attributes/search":{"post":{"operationId":"findAllControlImplementationsAttributesAndOptionsByUsingPOST","summary":"Search Control Implementation Attributes","description":"Use this API to search for control implementation attributes by key terms and filters.","tags":["Control Implementations"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_AttributeQueryCriteria"}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_AttributeInformation"}}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"TechRiskCompliance-ITRiskManagement_OAUTH2":["CONTROL"]}]}},"/api/controls/v1/control-implementations/pages":{"post":{"operationId":"findAllControlImplementationsUsingPOST","summary":"Get List of Control Implementations","description":"Use this API to retrieve a list of all control implementations. The response will include relevant details for each control implementation, including framework and category details and associated attributes.","tags":["Control Implementations"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"parameters":[{"name":"page","in":"query","description":"Results page to be retrieved (0..N)","schema":{"type":"integer","format":"int32","default":0,"minimum":0},"example":0},{"name":"size","in":"query","description":"Number of records per page","schema":{"type":"integer","format":"int32","default":20,"maximum":2000,"minimum":1},"example":20},{"name":"sort","in":"query","description":"Sorting criteria in the format: property(,asc|desc). Default sort order is ascending","schema":{"type":"string","enum":["number,asc","number,desc","primaryEntityName,asc","primaryEntityName,desc","primaryEntityType,asc","primaryEntityType,desc","controlIdentifier,asc","controlIdentifier,desc","controlName,asc","controlName,desc","frameworkName,asc","frameworkName,desc","categoryName,asc","categoryName,desc","effectiveness,asc","effectiveness,desc","maturityName,asc","maturityName,desc","status,asc","status,desc","createdDate,asc","createdDate,desc","lastModifiedDate,asc","lastModifiedDate,desc"]},"example":"number,asc"}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_SearchCriteriaInformation"}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_PageControlImplementationDto"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"TechRiskCompliance-ITRiskManagement_OAUTH2":["CONTROL"]}]}},"/api/controls/v1/control-implementations/{guid}":{"get":{"operationId":"getControlImplementationDetailsUsingGET","summary":"Get Control Implementation","description":"Use this API to retrieve a single control implementation by its unique identifier along with the associated attributes, category, and framework details.","tags":["Control Implementations"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"parameters":[{"name":"guid","in":"path","description":"ID of the control entity implementation.","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_ControlImplementationDto"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"TechRiskCompliance-ITRiskManagement_OAUTH2":["CONTROL"]}]},"put":{"operationId":"updateControlImplementationByImplementationIdUsingPUT","summary":"Update Control Implementation","description":"Use this API to update the attributes of a specific control implementation.\n\n> 🗒 Things to Know\n> \n> - The [Update Control](https://developer.onetrust.com/onetrust/reference/updatecontrolusingput_1) API can be used to update the attributes of a control in the Controls Library.","tags":["Control Implementations"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"parameters":[{"name":"guid","in":"path","description":"ID of the control entity implementation.","required":true,"schema":{"type":"string","format":"uuid"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_ControlImplementationUpdateRequest"}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_ControlImplementationDto"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"TechRiskCompliance-ITRiskManagement_OAUTH2":["CONTROL"]}]},"delete":{"operationId":"removeControlImplementationByEntityAndImplementationIdUsingDELETE","summary":"Delete Control Implementation","description":"Use this API to delete a control implementation from an entity.","tags":["Control Implementations"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"parameters":[{"name":"entityId","in":"query","description":"ID of the entity. The value can be obtained using [Get List of Control Implementations by Entity](/onetrust/reference/findallcontrolimplementationsusingpost) API.","required":true,"schema":{"type":"string","format":"uuid"}},{"name":"guid","in":"path","description":"ID of the control implementation. The value can be obtained using [Get List of Control Implementations by Entity](/onetrust/reference/findallcontrolimplementationsusingpost) API.","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"204":{"description":"No Content"},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"TechRiskCompliance-ITRiskManagement_OAUTH2":["CONTROL"]}]}},"/api/controls/v1/control-implementations/{guid}/attachments":{"post":{"operationId":"addAttachmentsToImplementationUsingPOST","summary":"Attach Files to Control Implementation","description":"Use this API to attach a list of files to a specific control implementation.\n\n> 🗒 Things to Know\n> \n> - The files must first be uploaded to the OneTrust application using the [Upload File](https://developer.onetrust.com/onetrust/reference/fileupload) API. The `Id` and `Name` parameter values returned in the [Upload File](https://developer.onetrust.com/onetrust/reference/fileupload) API response are required in the request body for this API.","tags":["Control Implementations"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"parameters":[{"name":"guid","in":"path","description":"ID of the control implementation. The value can be obtained using [Get List of Control Implementations by Entity](/onetrust/reference/findallcontrolimplementationsusingpost) API.","required":true,"schema":{"type":"string"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_ImplementationAttachmentCreateRequest"}}}},"responses":{"204":{"description":"No Content"},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"TechRiskCompliance-ITRiskManagement_OAUTH2":["CONTROL"]}]}},"/api/controls/v1/controls":{"post":{"operationId":"addControlUsingPOST","summary":"Create Control","description":"Use this API to create a new control in the Controls Library.","tags":["Controls"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_ControlCreateRequestDto"}}}},"responses":{"201":{"description":"Created","content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_IdResponseUUID"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"TechRiskCompliance-ITRiskManagement_OAUTH2":["CONTROL"]}]}},"/api/controls/v1/controls/pages":{"post":{"operationId":"findControlsByCriteriaUsingPOST_1","summary":"Get List of Controls","description":"Use this API to retrieve a list of all controls by key terms and filters. The response will include relevant details for each control, including framework and category details and associated attributes.","tags":["Controls"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"parameters":[{"name":"page","in":"query","description":"Results page to be retrieved (0..N)","schema":{"type":"integer","format":"int32","default":0,"minimum":0},"example":0},{"name":"size","in":"query","description":"Number of records per page","schema":{"type":"integer","format":"int32","default":20,"maximum":2000,"minimum":1},"example":20},{"name":"sort","in":"query","description":"Sorting criteria in the format: property(,asc|desc). Default sort order is ascending","schema":{"type":"string","enum":["identifier,asc","identifier,desc","name,asc","name,desc","frameworkName,asc","frameworkName,desc","status,asc","status,desc","categoryName,asc","categoryName,desc","createdDate,asc","createdDate,desc","lastModifiedDate,asc","lastModifiedDate,desc"]},"example":"name,asc"}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_SearchCriteriaInformation"}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_PageControlDto"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"TechRiskCompliance-ITRiskManagement_OAUTH2":["CONTROL"]}]}},"/api/controls/v1/controls/{controlId}":{"put":{"operationId":"updateControlUsingPUT_1","summary":"Update Control","description":"Use this API to update the attributes of a specific control in the Controls Library.","tags":["Controls"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"parameters":[{"name":"controlId","in":"path","description":"ID of the control. This value is obtained using [Get List of Controls](/onetrust/reference/findcontrolsbycriteriausingpost_1) API.","required":true,"schema":{"type":"string","format":"uuid"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_ControlUpdateRequestDto"}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_ControlDetailInformation"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"TechRiskCompliance-ITRiskManagement_OAUTH2":["CONTROL"]}]},"delete":{"operationId":"removeControlUsingDELETE_1","summary":"Delete Control","description":"Use this API to delete an existing control from the Controls Library.","tags":["Controls"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"parameters":[{"name":"controlId","in":"path","description":"ID of the control. This value is obrtained using [Get List of Controls](/onetrust/reference/findcontrolsbycriteriausingpost_1) API.","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_ControlRemovalResponse"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"TechRiskCompliance-ITRiskManagement_OAUTH2":["CONTROL"]}]}},"/api/controls/v1/entities/{entityId}/control-implementations/pages":{"post":{"operationId":"findAssociatedControlImplementationsUsingPOST","summary":"Get List of Control Implementations by Entity","description":"Use this API to retrieve a list of all control implementations by entity, such as by assets, processing activities, legal entities, risks, and vendors.","tags":["Control Implementations"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"parameters":[{"name":"entityId","in":"path","description":"ID of the entity. This value can be obtained using [Get Control Implementation](/onetrust/reference/getcontrolimplementationdetailsusingget) API.","required":true,"schema":{"type":"string","format":"uuid"}},{"name":"page","in":"query","description":"Results page to be retrieved (0..N)","schema":{"type":"integer","format":"int32","default":0,"minimum":0},"example":0},{"name":"size","in":"query","description":"Number of records per page","schema":{"type":"integer","format":"int32","default":20,"maximum":2000,"minimum":1},"example":20},{"name":"sort","in":"query","description":"Sorting criteria in the format: property(,asc|desc). Default sort order is ascending","schema":{"type":"string","enum":["number,asc","number,desc","entityName,asc","entityName,desc","entityType,asc","entityType,desc","controlIdentifier,asc","controlIdentifier,desc","controlName,asc","controlName,desc","frameworkName,asc","frameworkName,desc","categoryName,asc","categoryName,desc","effectiveness,asc","effectiveness,desc","maturityName,asc","maturityName,desc","status,asc","status,desc","primaryEntityName,asc","primaryEntityName,desc","primaryEntityType,asc","primaryEntityType,desc","createdDate,asc","createdDate,desc","lastModifiedDate,asc","lastModifiedDate,desc"]},"example":"number,asc"}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_SearchCriteriaInformation"}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_PageControlImplementationEntityDto"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"TechRiskCompliance-ITRiskManagement_OAUTH2":["CONTROL"]}]}},"/api/controls/v1/evidence-task-implementations/pages":{"post":{"operationId":"findAllEvidencesBySearchCriteria_1","summary":"Get List of Evidence Task Implementations","description":"Use this API to retrieve a list of all evidence task implementations by entity, such as by assignee, control, and current interval status. The response will include relevant details for each evidence implementation.","tags":["Evidence Task Implementations"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/tech-risk-compliance-it-risk-management.json"},"parameters":[{"name":"page","in":"query","description":"Results page to be retrieved (0..N)","schema":{"type":"integer","format":"int32","default":0,"minimum":0},"example":0},{"name":"size","in":"query","description":"Number of records per page","schema":{"type":"integer","format":"int32","default":20,"maximum":2000,"minimum":1},"example":20},{"name":"sort","in":"query","description":"Sorting criteria in the format: property(,asc|desc). Default sort order is ascending","schema":{"type":"string","enum":["number,asc","number,desc","name,asc","name,desc","primaryEntityName,asc","primaryEntityName,desc","primaryEntityType,asc","primaryEntityType,desc","collectionInterval,asc","collectionInterval,desc","collectionStartDate,asc","collectionStartDate,desc","lastCollected,asc","lastCollected,desc","currentIntervalStatus,asc","currentIntervalStatus,desc","currentIntervalStartDate,asc","currentIntervalStartDate,desc","currentIntervalEndDate,asc","currentIntervalEndDate,desc","relatedControls,asc","relatedControls,desc","evidenceTaskType,asc","evidenceTaskType,desc","createdDate,asc","createdDate,desc","lastModifiedDate,asc","lastModifiedDate,desc"]},"example":"name,asc"}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_SearchCriteriaInformation"}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/TechRiskCompliance-ITRiskManagement_PageEvidenceImplementationDto"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-reques
# --- truncated at 32 KB (271 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/onetrust/refs/heads/main/openapi/onetrust-tech-risk-compliance-it-risk-management-openapi.json