---
title: "Get Risk Template"
method: GET
path: "/api/risk-template/v1/templates/{riskTemplateId}"
tags: ["Risk Templates"]
---

# Get Risk Template

`GET /api/risk-template/v1/templates/{riskTemplateId}`

Use this API to retrieve the details for the specified risk template.

> 🗒 Things to Know
>
> - The `templateId` can be obtained from the OneTrust application URL when accessing the Template Details screen for a risk template.

## Path parameters

- `riskTemplateId` string, uuid, required

## Response `200`

OK

- TechRiskComplianceRiskTemplateRiskTemplateInformation[]
  - `id` string, uuid — The unique identifier of the risk template.
  - `name` string — The display name of the risk template.
  - `riskName` string — The name of the risk associated with this template.
  - `description` string — The detailed description of the risk template.
  - `state` 'ACTIVE' | 'ARCHIVED' — The current status indicating if the template is active or archived.
  - `orgGroup` TechRiskComplianceRiskTemplateBasicEntityDetail
    - `id` string, uuid — The unique identifier of the organization entity.
    - `name` string — The display name of the organization entity.
  - `treatmentPlan` string — The treatment plan text describing risk mitigation strategies.
  - `inherentRiskLevel` TechRiskComplianceRiskTemplateRiskLevelDetails
    - `levelId` integer — The numeric identifier for target standard risk scoring.
    - `level` string — The target risk level name for standard scoring methodology.
    - `impactLevelId` integer — The numeric identifier for target impact in matrix scoring.
    - `impactLevel` string — The target impact level name for matrix methodology.
    - `probabilityLevelId` integer — The numeric identifier for target probability in matrix scoring.
    - `probabilityLevel` string — The target probability level name for matrix methodology.
    - `riskScore` number — The target numeric risk score value after mitigation.
  - `targetRiskLevel` TechRiskComplianceRiskTemplateRiskLevelDetails
    - `levelId` integer — The numeric identifier for target standard risk scoring.
    - `level` string — The target risk level name for standard scoring methodology.
    - `impactLevelId` integer — The numeric identifier for target impact in matrix scoring.
    - `impactLevel` string — The target impact level name for matrix methodology.
    - `probabilityLevelId` integer — The numeric identifier for target probability in matrix scoring.
    - `probabilityLevel` string — The target probability level name for matrix methodology.
    - `riskScore` number — The target numeric risk score value after mitigation.
  - `threat` TechRiskComplianceRiskTemplateThreatInformation
    - `id` string, uuid — The unique identifier of the threat entity.
    - `name` string — The display name of the threat.
    - `identifier` string — The reference identifier of the threat.
  - `vulnerabilities` TechRiskComplianceRiskTemplateVulnerabilityInformation[] — The list of vulnerabilities associated with this risk template.
    - `id` string, uuid — The unique identifier of the vulnerability entity.
    - `name` string — The display name of the vulnerability.
    - `identifier` string — The reference identifier of the vulnerability.
  - `categories` TechRiskComplianceRiskTemplateRiskCategoryInformation[] — The list of risk categories assigned to this template.
    - `id` string, uuid — The unique identifier of the risk category.
    - `name` string — The display name of the risk category.
    - `nameKey` string — The translation key used for localizing the category name.
  - `controls` TechRiskComplianceRiskTemplateControlInformation[] — The list of controls associated with this risk template.
    - `id` string, uuid — The unique identifier of the control entity.
    - `name` string — The display name of the control.
    - `identifier` string — The reference identifier of the control.
  - `createdDate` string, date-time — The timestamp when the risk template was created.
  - `attributeValues` object — The custom attributes and their values specific to this risk template.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `429` — Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500` — Internal Server Error

---

[API](https://skmtc.net/onetrust/apis/platform-access-management.md) · [All operations](https://skmtc.net/onetrust/apis/platform-access-management/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/onetrust/platform-access-management/revisions/21de3aa0b170/schema)