v1
latestOpenAPI 3.1.12026-07-242899061.7 MBCompliance
This resource returns risk standard controls associated with a TOE id and a particular custom or industry standard.
This resource returns risk standard controls associated with a TOE id and a particular custom or industry standard. The risk standard id can be obtained from the /v1/compliance/{toe_id} response. Some will be mapped to RiskRecon security domain and criteria so will include the ratings for these domain/criteria and the TOE being queried.
get/v1/compliance/controls/{toe_id}
Path parameters
toe_idstring required
Example:5976423a-ee35-11e3-8569-14109ff1a304
Filter by the Toe ID.
Query parameters
risk_standard_idinteger required
Example:12345
Filter by the risk standard id.
Response
OK
Example response
{
"data": {
"id": 1234,
"type": "risk_standard",
"attributes": {
"id": 1234,
"risk_standard": "Secure Controls Framework 2023_2",
"risk_standard_controls": [
{
"id": 1234,
"risk_standard_control": "Secure Controls Framework 2023_2",
"description": "Mechanisms exist to facilitate the implementation of cybersecurity and privacy governance controls.",
"security_domains": [
{
"name": "GOV-01",
"rating": "3.0",
"rated": true,
"rating_numeric": 5,
"issue_count": 5,
"total_count": 5,
"issue_rate": 5
}
],
"security_criteria": [
{
"name": "GOV-01",
"rating": "3.0",
"rated": true,
"rating_numeric": 5,
"issue_count": 5,
"total_count": 5,
"issue_rate": 5
}
]
}
]
}
}
}