---
title: "Get the list of security controls."
method: GET
path: "/api/v2/securitycontrols"
tags: ["Security Controls"]
---

# Get the list of security controls.

`GET /api/v2/securitycontrols`

Get the list of security controls listed on the Black Kite system.

## Query parameters

- `page_number` integer
- `page_size` 10 | 20 | 30

## Response `200`

Success

- SecurityControl[]
  - `Id` string, required — The unique identifier of this security control.
  - `Name` string — The name of the security control.
  - `Category` string — The long name of the security control's category.
  - `Title` string — The title of the security control.
  - `Severity` 'Info' | 'Low' | 'Medium' | 'High' | 'Critical' — The severity of a finding of this security control.
  - `Description` string — The description of the security control.
  - `Mitigation` string — The remediation of the security control.
  - `CwssScore` number, float — The Common Weakness Scoring System score of each finding in the category.
  - `References` FindingReference[]
  - `Mitre` string[]
  - `Fips199` object — FIPS 199 impact levels
    - `Confidentiality` 'Low (1)' | 'Moderate (2)' | 'High (3)' | 'None (0)'
    - `Integrity` 'Low (1)' | 'Moderate (2)' | 'High (3)' | 'None (0)'
    - `Availability` 'Low (1)' | 'Moderate (2)' | 'High (3)' | 'None (0)'
  - `Fisma` object — FISMA Cybersecurity Framework
    - `Area` string
    - `MinMaturityModel` string
  - `Nist80053` object — NIST 800-53 Control
    - `Control` string
    - `Control Family` string
    - `Priority` string
    - `Baseline Allocation` string

## Other responses

- `401` — Unauthorized
- `default` — Failure

---

[API](https://skmtc.net/blackkitetech/apis/black-kite-api.md) · [All operations](https://skmtc.net/blackkitetech/apis/black-kite-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/blackkitetech/black-kite-api/revisions/7dadaba760fb/schema)