Criteria

A Criterion represents an individual requirement, control, or rule within a compliance framework. These are the specific elements used to evaluate whether a document, dataset, or process aligns with the selected compliance standard.

Each compliance framework contains a set of these criteria. During the assessment process, the Compliance Service API evaluates the selected input data against these criteria to determine adherence and identify potential gaps.

Structure of a Criterion

A criterion typically includes:

• name: A human-readable label describing the compliance aspect (e.g., Access Control Policy).
• codeName: A unique, machine-friendly identifier.
• description: A concise explanation of what the criterion evaluates.

These definitions help structure the automated assessment and guide the user interface in manual review scenarios.

Retrieving Criteria for a Framework

To get the list of criteria associated with a specific compliance framework, use the following endpoint:

Code
 
GET /api/v1/framework/id/{frameworkId}

Code
 
curl --request GET \
  --url /api/v1/framework/id/0 \
  --header 'Content-Type: application/json'

Example Response

Code
 
[
  {
    "name": "Access Control",
    "codeName": "AC_01",
    "description": "Controls related to access permissions and restrictions."
  },
  {
    "name": "Incident Response",
    "codeName": "IR_02",
    "description": "Procedures for responding to security incidents."
  }
]

This response is a flat array of criteria associated with the selected framework.