---
title: "Modify Risk"
method: PATCH
path: "/api/risk/v2/risks/{riskId}"
tags: ["Risk Management"]
---

# Modify Risk

`PATCH /api/risk/v2/risks/{riskId}`

Use this API to partially modify an existing risk in the Risk Register.

> 🗒 Things to Know
> 
> - The **Managing organization assignment for risks** setting must be enabled in the OneTrust Platform to pass values for the `orgGroupId` parameter using this API. If this setting is disabled, any values passed for the `orgGroupId` parameter will be ignored. This setting can be found on the **Global Settings > Risk, Controls & Evidence > General** screen.

## Path parameters

- `riskId` string, uuid, required

## Request body

- TechRiskComplianceRiskRiskPatchRequest
  - `description` string — description
  - `recommendation` string — recommendation
  - `deadline` string, date-time — deadline, format - YYYY-MM-DDTHH:MM:SS.FFFZ
  - `reminderDays` integer — number of days before the deadline when the reminder will be sent
  - `probabilityLevelId` integer — probability level id
  - `impactLevelId` integer — impact level id
  - `riskScore` number — risk score
  - `levelId` integer — risk level Id, replacement for level field
  - `categoryIds` string[] — List of Category Ids
  - `inherentRiskLevel` TechRiskComplianceRiskRiskLevelDetails
    - `levelId` integer — Risk level identifier
    - `level` string — Risk level name
    - `impactLevelId` integer — Impact level identifier
    - `impactLevel` string — Impact level name
    - `probabilityLevelId` integer — Probability level identifier
    - `probabilityLevel` string — Probability level name
    - `riskScore` number — Calculated risk score
    - `levelGuid` string, uuid — Risk level unique identifier
    - `levelKey` string — Risk level key
    - `colorCode` string — Risk level color code
    - `impactLevelGuid` string, uuid — Impact level unique identifier
    - `impactLevelKey` string — Impact level key
    - `probabilityLevelGuid` string, uuid — Probability level unique identifier
    - `probabilityLevelKey` string — Probability level key
  - `targetRiskLevel` TechRiskComplianceRiskRiskLevelDetails
    - `levelId` integer — Risk level identifier
    - `level` string — Risk level name
    - `impactLevelId` integer — Impact level identifier
    - `impactLevel` string — Impact level name
    - `probabilityLevelId` integer — Probability level identifier
    - `probabilityLevel` string — Probability level name
    - `riskScore` number — Calculated risk score
    - `levelGuid` string, uuid — Risk level unique identifier
    - `levelKey` string — Risk level key
    - `colorCode` string — Risk level color code
    - `impactLevelGuid` string, uuid — Impact level unique identifier
    - `impactLevelKey` string — Impact level key
    - `probabilityLevelGuid` string, uuid — Probability level unique identifier
    - `probabilityLevelKey` string — Probability level key
  - `treatment` string — AKA remediation in current workflow
  - `threatId` string, uuid — Threat id
  - `vulnerabilityIds` string[] — List of vulnerabilityIds
  - `orgGroupId` string, uuid — organization group id
  - `attributeValues` object — Custom Attributes
  - `name` string — name
  - `treatmentStatus` 'InProgress' | 'UnderReview' | 'ExceptionRequested' | 'Approved' | 'ExceptionGranted' — treatment status to set for Risk in Custom Workflows
  - `treatmentStatusId` string, uuid
  - `result` 'Accepted' | 'Avoided' | 'Reduced' | 'Rejected' | 'Transferred' | 'Ignored' — Result to set on Risk as part of approval
  - `resultId` string, uuid — result Id
  - `inherentLevelId` integer
  - `riskManager` string[] — list of manager ids

## Response `204`

No Content

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `429` — Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500` — Internal Server Error

---

[API](https://skmtc.net/onetrust/apis/platform-access-management.md) · [All operations](https://skmtc.net/onetrust/apis/platform-access-management/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/onetrust/platform-access-management/versions/21de3aa0b170/schema)