Remove a control from a risk scenario

DELETE

risk-scenarios

{riskScenarioId}

controls

{controlId}

Remove a control from a risk scenario

curl --request DELETE \
  --url https://api.vanta.com/v1/risk-scenarios/{riskScenarioId}/controls/{controlId} \
  --header 'Authorization: Bearer <token>'

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

riskScenarioId

string

required

controlId

string

required

Response

204

No content

Change a risk scenario control's controlTypeChange the `controlType` on an existing risk-scenario / control association. Body: `{ controlType }`. The server atomically moves the resolved control between the treatment-plan and existing-control sets in a single update — there is no intermediate unlinked state. `PATCH { "controlType": "EXISTING" }` removes the control from the treatment plan but keeps it linked as an existing control; use `DELETE` to unlink it entirely. Returns 404 if the control is not currently associated with the scenario. Setting the `controlType` it already has is a 200 no-op.

⌘I

Remove a control from a risk scenario

curl --request DELETE \
  --url https://api.vanta.com/v1/risk-scenarios/{riskScenarioId}/controls/{controlId} \
  --header 'Authorization: Bearer <token>'