openapi: 3.1.0
info:
  title: Drata Public API v2 Assets Risks API
  version: 2.0.0
  description: Best-effort OpenAPI for Drata's Public REST API v2, used to manage assets, personnel, controls, frameworks, evidence, policies, vendors, tasks, audits, risks, and monitoring tests for SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR and other compliance programs.
  contact:
    name: API Evangelist
    email: kin@apievangelist.com
    url: https://developers.drata.com/openapi/reference/v2/overview/
servers:
- url: https://public-api.drata.com/public/v2
  description: Drata Public API v2
security:
- bearerAuth: []
tags:
- name: Risks
paths:
  /risks:
    get:
      tags:
      - Risks
      summary: List risks in the risk register
      operationId: listRisks
      responses:
        '200':
          description: A page of risks
components:
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT