---
title: "This resource returns an list of custom and industry standards."
method: GET
path: "/v1/compliance/{toe_id}"
tags: ["Compliance"]
---

# This resource returns an list of custom and industry standards.

`GET /v1/compliance/{toe_id}`

This resource returns an list of custom and industry standards. Each standard has a number of controls.  Some of these will be mapped to RiskRecon security domain and criteria and will have the associated ratings.

## Path parameters

- `toe_id` string, required

## Query parameters

- `risk_dimension` 'cyber' | 'privacy'

## Response `200`

OK

- RiskStandards — A collection of risk standards.
  - `data` object[] — A collection of risk standards.
    - `attributes` RiskStandard — A custom or industry risk standard.
      - `assess_count` integer — The Assess Count.
      - `description` string, nullable — The Risk Standard description.
      - `id` integer — The unique identifier for a Risk Standard.
      - `inform_count` integer — The inform Count.
      - `is_public` boolean — Is the standard public?
      - `name` string — The risk standard name.
      - `type` string — The type of risk standard.
      - `version` string, nullable — The risk standard version if applicable.
      - `rating_counts` object[] — The rating counts by rating label/range.
        - `rating` string — The rating.
        - `count` integer — The rating counts.
    - `id` integer — The id associated with the response object.
    - `type` string — The type of object returned.

## Other responses

- `401` — Authentication information was missing or invalid or the user is not authorized to access resource or perform the associated action.
- `403` — FORBIDDEN
- `404` — The URI didn't match an existing resource.

---

[API](https://skmtc.net/recordedfuture/apis/alert-api.md) · [All operations](https://skmtc.net/recordedfuture/apis/alert-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/recordedfuture/alert-api/revisions/c8c2f68d8b60/schema)
