Sign in
Findings

Create audit finding

Create an audit finding so teams can track issue ownership, remediation activity, severity, and supporting evidence.

post/v1/findings

Request body

taskIdstring

Task ID

evidenceSubmissionIdstring

Evidence submission ID

evidenceFormType'board-meeting' | 'it-leadership-meeting' | 'risk-committee-meeting' | 'meeting' | 'access-request' | 'whistleblower-report' | 'penetration-test' | 'rbac-matrix' | 'infrastructure-inventory' | 'employee-performance-evaluation' | 'network-diagram' | 'tabletop-exercise'

Evidence form type

policyIdstring

Policy ID

vendorIdstring

Vendor ID

riskIdstring

Risk ID

memberIdstring

Member ID (person this finding targets)

deviceIdstring

Device ID

area'people' | 'documents' | 'compliance' | 'risks' | 'vendors' | 'policies' | 'other'

Broad area when the finding is not tied to a specific item

type'soc2' | 'iso27001' required

Type of finding (SOC 2 or ISO 27001)

severity'low' | 'medium' | 'high' | 'critical'

Severity

contentstring required

Finding content/message

Changes

Changed in 4 of the 51 revisions of this API.311

  • 912fecc0177c1See the full diff
    • ●

      removed the request property templateId

      request-property-removed

    This revision also has 40 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

  • 6e22489e33cb110See the full diff
    • ●

      removed the request property scope

      request-property-removed

    • ○

      added the new optional request property area

      new-optional-request-property

    • ○

      added the new optional request property deviceId

      new-optional-request-property

    • ○

      added the new optional request property memberId

      new-optional-request-property

    • ○

      added the new optional request property policyId

      new-optional-request-property

    • ○

      added the new optional request property riskId

      new-optional-request-property

    • ○

      added the new optional request property severity

      new-optional-request-property

    • ○

      added the new optional request property vendorId

      new-optional-request-property

    • ○

      removed the non-success response with the status 401

      response-non-success-status-removed

    • ○

      removed the non-success response with the status 403

      response-non-success-status-removed

    • ○

      removed the non-success response with the status 404

      response-non-success-status-removed

  • ac8d1e4e2e791See the full diff
    • ○

      added the new optional request property scope

      new-optional-request-property

  • 946edaa856a91See the full diff
    • ●

      deleted the header request parameter X-Organization-Id

      request-parameter-removed

    This revision also has 2 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog