> ## Documentation Index
> Fetch the complete documentation index at: https://developer.vanta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List risk scenario controls

> List the controls associated with a risk scenario.

Each item is a `{ controlId, controlType }` relationship. `controlType` is
`TREATMENT_PLAN` for controls that are part of the risk's treatment plan,
and `EXISTING` for controls linked without a treatment-plan designation.



## OpenAPI

````yaml /reference/manage-vanta.json get /risk-scenarios/{riskScenarioId}/controls
openapi: 3.0.0
info:
  title: Manage Vanta
  version: 1.0.0
  description: >-
    The REST API lets customers query and mutate Vanta's data. Use this API to
    automate bulk actions, query data for custom workflows and dashboards, and
    bolster your security operations


    **Note for Vanta Gov (FedRAMP) customers:** Select `Vanta Gov (FedRAMP)`
    from the server dropdown to issue requests against
    `https://api.vanta-gov.com`. The OAuth token URL shown below defaults to the
    commercial host — replace it with `https://api.vanta-gov.com/oauth/token`.
  termsOfService: https://www.vanta.com/terms
  license:
    name: UNLICENSED
  contact:
    name: API Support
    url: https://help.vanta.com/
    email: support@vanta.com
servers:
  - url: https://api.vanta.com/v1
    description: Vanta (Commercial)
  - url: https://api.vanta-gov.com/v1
    description: Vanta Gov (FedRAMP)
security: []
paths:
  /risk-scenarios/{riskScenarioId}/controls:
    get:
      tags:
        - Risk Scenarios
      summary: List risk scenario controls
      description: >-
        List the controls associated with a risk scenario.


        Each item is a `{ controlId, controlType }` relationship. `controlType`
        is

        `TREATMENT_PLAN` for controls that are part of the risk's treatment
        plan,

        and `EXISTING` for controls linked without a treatment-plan designation.
      operationId: ListRiskScenarioControls
      parameters:
        - in: path
          name: riskScenarioId
          required: true
          schema:
            type: string
        - in: query
          name: pageSize
          required: false
          schema:
            $ref: '#/components/schemas/PageSize'
        - in: query
          name: pageCursor
          required: false
          schema:
            $ref: '#/components/schemas/PageCursor'
      responses:
        '200':
          description: Ok
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PaginatedResponse_RiskScenarioControl_'
              examples:
                Example 1:
                  value:
                    results:
                      data:
                        - controlId: A.12.2.1
                          controlType: TREATMENT_PLAN
                        - controlId: 5f3a1c8b9d4e2f6a7b8c9d11
                          controlType: EXISTING
                      pageInfo:
                        hasNextPage: false
                        hasPreviousPage: false
                        startCursor: '1'
                        endCursor: '2'
      security:
        - bearerAuth: []
components:
  schemas:
    PageSize:
      type: integer
      format: int32
      default: 10
      description: >-
        Controls the maximum number of items returned in one response from the
        API.
      minimum: 1
      maximum: 100
    PageCursor:
      type: string
      description: >-
        A marker or pointer, telling the API where to start fetching items for
        the subsequent page in a paginated dataset.

        Note that the requested page will not include the item that corresponds
        to this cursor but will start from the one immediately

        after this cursor.
    PaginatedResponse_RiskScenarioControl_:
      properties:
        results:
          properties:
            data:
              items:
                $ref: '#/components/schemas/RiskScenarioControl'
              type: array
            pageInfo:
              $ref: '#/components/schemas/PageInfo'
          required:
            - data
            - pageInfo
          type: object
      required:
        - results
      type: object
      additionalProperties: false
    RiskScenarioControl:
      description: >-
        A control's association with a risk scenario.


        The relationship identity is `(riskScenarioId, controlId)`;
        `controlType`

        is mutable state on that relationship. A given control can have at most
        one

        association per risk scenario.
      properties:
        controlId:
          type: string
          description: >-
            The control's shorthand identifier (e.g. `"A.12.2.1"`) when it has
            one,

            falling back to the canonical Vanta control id (Mongo object id)
            otherwise.
        controlType:
          $ref: '#/components/schemas/RiskScenarioControlType'
          description: >-
            `TREATMENT_PLAN` for controls that are part of the risk's treatment
            plan

            (planned mitigations); `EXISTING` for controls linked to the risk
            without a

            treatment-plan designation.
      required:
        - controlId
        - controlType
      type: object
      additionalProperties: false
    PageInfo:
      description: Provides information about the pagination of a dataset.
      properties:
        endCursor:
          type: string
          nullable: true
          description: >-
            The cursor that points to the end of the current page, or null if
            there is no such cursor.
        hasNextPage:
          type: boolean
          description: Indicates if there is another page after the current page.
        hasPreviousPage:
          type: boolean
          description: Indicates if there is a page before the current page.
        startCursor:
          type: string
          nullable: true
          description: >-
            The cursor that points to the start of the current page, or null if
            there is no such cursor.
      required:
        - endCursor
        - hasNextPage
        - hasPreviousPage
        - startCursor
      type: object
      additionalProperties: false
    RiskScenarioControlType:
      type: string
      enum:
        - EXISTING
        - TREATMENT_PLAN
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer

````