Skip to main content
POST
/
v1
/
controls
Create a new control
curl --request POST \
  --url http://localhost:3333/v1/controls \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "Access Control",
  "description": "Manages user access to systems",
  "policyIds": [
    "<string>"
  ],
  "taskIds": [
    "<string>"
  ],
  "requirementMappings": [
    {
      "frameworkInstanceId": "<string>",
      "requirementId": "<string>",
      "customRequirementId": "<string>"
    }
  ],
  "documentTypes": [
    "board_meeting"
  ]
}
'

Body

application/json
name
string
required

Control name

Example:

"Access Control"

description
string
required

Control description

Example:

"Manages user access to systems"

policyIds
string[]

Policy IDs to connect

taskIds
string[]

Task IDs to connect

requirementMappings
object[]

Requirement mappings

documentTypes
enum<string>[]

Evidence form types to require on this control

Available options:
board_meeting,
it_leadership_meeting,
risk_committee_meeting,
meeting,
access_request,
whistleblower_report,
penetration_test,
rbac_matrix,
infrastructure_inventory,
employee_performance_evaluation,
network_diagram,
tabletop_exercise

Response

201 - undefined