Risks API

Query and manage risks in your risk register via the GraphQL API.

Queries

List Risks


query {
  risks(
    filter: { status: OPEN, minScore: 15 }
    sort: { field: RISK_SCORE, direction: DESC }
    first: 20
  ) {
    edges {
      node {
        id
        title
        description
        category
        likelihood
        impact
        riskScore
        status
        owner {
          id
          name
          email
        }
        treatment
        controls {
          id
          title
          effectiveness
        }
        createdAt
        updatedAt
      }
    }
    pageInfo {
      hasNextPage
      endCursor
    }
  }
}

Get Risk by ID


query {
  risk(id: "risk_abc123") {
    id
    title
    description
    riskScore
    treatmentPlan {
      tasks {
        title
        status
        dueDate
        assignee { name }
      }
    }
  }
}

Mutations

Create Risk


mutation {
  createRisk(input: {
    title: "Unpatched production servers"
    description: "Critical CVEs remain unpatched beyond SLA"
    category: TECHNICAL
    likelihood: 4
    impact: 5
    treatment: MITIGATE
    ownerId: "user_xyz789"
  }) {
    id
    riskScore
  }
}

Update Risk


mutation {
  updateRisk(
    id: "risk_abc123"
    input: { status: CLOSED, closureReason: "Remediated" }
  ) {
    id
    status
    updatedAt
  }
}