Sign in
latestOpenAPI 3.0.1Vanta Terms of Service2026-07-26327517821.8 KB

6c1f7590538b

Audits

Create a custom control for an audit

Create a custom control for an audit.

Rate limit: 10 requests / minute.

post/audits/{auditId}/controls/custom-controls

Path parameters

auditIdstring required

Request body

externalIdstring required

The external id of the control.

namestring nullable required

The name of the control.

descriptionstring required

The description of the control.

effectiveDatestring date-time required

The effective date of the control.

category'ARTIFICIAL_&_AUTONOMOUS_TECHNOLOGY' | 'ASSET_MANAGEMENT' | 'BUSINESS_CONTINUITY_&_DISASTER_RECOVERY' | 'CAPACITY_&_PERFORMANCE_PLANNING' | 'CHANGE_MANAGEMENT' | 'CLOUD_SECURITY' | 'COMPLIANCE' | 'CONFIGURATION_MANAGEMENT' | 'CONTINUOUS_MONITORING' | 'CRYPTOGRAPHIC_PROTECTIONS' | 'DATA_CLASSIFICATION_&_HANDLING' | 'EMBEDDED_TECHNOLOGY' | 'ENDPOINT_SECURITY' | 'HUMAN_RESOURCES_SECURITY' | 'IDENTIFICATION_&_AUTHENTICATION' | 'INCIDENT_RESPONSE' | 'INFORMATION_ASSURANCE' | 'MAINTENANCE' | 'MOBILE_DEVICE_MANAGEMENT' | 'NETWORK SECURITY' | 'PHYSICAL_&_ENVIRONMENTAL_SECURITY' | 'PRIVACY' | 'PROJECT_&_RESOURCE MANAGEMENT' | 'RISK_MANAGEMENT' | 'SECURE_ENGINEERING_&_ARCHITECTURE' | 'SECURITY_AWARENESS_&_TRAINING' | 'SECURITY_OPERATIONS' | 'SECURITY_&_PRIVACY_GOVERNANCE' | 'TECHNOLOGY_DEVELOPMENT_&_ACQUISITION' | 'THIRD-PARTY_MANAGEMENT' | 'THREAT_MANAGEMENT' | 'VULNERABILITY_&_PATCH_MANAGEMENT' | 'WEB_SECURITY' | 'ADMINISTRATIVE' | 'PHYSICAL' | 'TECHNICAL' | 'BASIC' | 'DERIVED' required
role'BOTH' | 'CONTROLLER' | 'PROCESSOR'

Response

Custom control created

idstring required

The control's unique ID.

externalIdstring nullable required

The control's external ID.

namestring required

The control's name.

descriptionstring required

The control's description.

source'Vanta' | 'Custom' required
domainsstring[] required

The security domains that the control belongs to.

rolestring nullable

The control's GDPR role, if the control is a GDPR control.

creationDatestring date-time nullable required

When the control was created. Returns null for Vanta library controls.

modificationDatestring date-time nullable required

When the control was last modified. Returns null for Vanta library controls.