Get the list of controls that are grouped by sections.
|
Parameter Name |
Required / Optional |
Data Type |
Description |
|---|---|---|---|
| frameworkId={value} | Required | Integer | Framework ID for which controls are to be configured. |
| technologyIds={value} | Required | Integer | Technology ID for which controls are to be configured. |
| benchmarks | Required | String | Benchmark for which controls are to be configured. |
API Request
curl --location '<gateway_base_url>/pcas/v1/frameworks/configure/controls' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer ' \
--data '{
"frameworkId": 5081,
"technologyIds": [
390,391
],
"benchmarks": [
"CIS","DISA STIG","Qualys","Vendor"
]
}'
JSON Output
[
{
"sectionNumber": 1,
"sectionHeading": "Access Control",
"controls": [
{
"controlId": 7942,
"sectionNumber": 1,
"controlNumber": 1,
"criticality": "5",
"isControlDisable": false,
"evaluate": "<CTRL><DP><K>mssql.secman.general.sa_acct_disable</K><CD>matches</CD><OP>xre</OP><FV set=\"0\">0</FV><FV set=\"1\">161803399999999</FV><V><![CDATA[^1$]]></V><FV set=\"1\">1</FV></DP></CTRL>",
"technologyId": 390,
"isControlConfigured": true,
"criticalityLabel": "URGENT"
},
{
"controlId": 11272,
"sectionNumber": 1,
"controlNumber": 2,
"criticality": "5",
"isControlDisable": false,
"evaluate": "<CTRL><DP><K>mssql.secman.general.permissions_granted_to_public</K><CD>does not contain</CD><OP>xre</OP><FV set=\"1\">161803399999999</FV><V><![CDATA[.+]]></V></DP></CTRL>",
"technologyId": 390,
"isControlConfigured": true,
"criticalityLabel": "URGENT"
}
]
},
{
"sectionNumber": 2,
"sectionHeading": "Accountability, Audit, And Risk Management",
"controls": [
{
"controlId": 7389,
"sectionNumber": 2,
"controlNumber": 1,
"criticality": "2",
"isControlDisable": false,
"evaluate": "<CTRL><DP><K>mssql.registry.hideinstance</K><CD>matches</CD><OP>xre</OP><FV set=\"0\">161803399999999</FV><V><![CDATA[^1$]]></V><FV set=\"1\">314159265358979</FV></DP></CTRL>",
"technologyId": 390,
"isControlConfigured": true,
"criticalityLabel": "MEDIUM"
}
]
},
{
"sectionNumber": 3,
"sectionHeading": "Audit And Accountability",
"controls": [
{
"controlId": 27015,
"sectionNumber": 3,
"controlNumber": 1,
"criticality": "4",
"isControlDisable": false,
"evaluate": "<CTRL><DP><K>mssql.secman.general.FAILED_DATABASE_AUTHENTICATION_GROUP</K><CD>matches</CD><OP>xre</OP><FV set=\"0\">161803399999999</FV><FV set=\"0\">314159265358979</FV><V><![CDATA[^SUCCESS AND FAILURE:Y:Y$]]></V></DP></CTRL>",
"technologyId": 391,
"isControlConfigured": true,
"criticalityLabel": "CRITICAL"
}
]
},
{
"sectionNumber": 4,
"sectionHeading": "Configuration Management",
"controls": [
{
"controlId": 25645,
"sectionNumber": 4,
"controlNumber": 1,
"criticality": "3",
"isControlDisable": false,
"evaluate": "<CTRL><DP><K>bind.list.enabled.services</K><CD>does not contain</CD><OP>xre</OP><FV set=\"1\">314159265358979</FV><V><![CDATA[.+]]></V></DP></CTRL>",
"technologyId": 391,
"isControlConfigured": true,
"criticalityLabel": "SERIOUS"
},
{
"controlId": 25646,
"sectionNumber": 4,
"controlNumber": 2,
"criticality": "3",
"isControlDisable": false,
"evaluate": "<CTRL><DP><K>bind.allowrecursion</K><CD>matches</CD><OP>xre</OP><FV set=\"0\">314159265358979</FV><V><![CDATA[((?:\\b(?:\\d{1,3}\\.){3}\\d{1,3}(?:/\\d{1,2})?\\b)|localhost|local)]]></V></DP></CTRL>",
"technologyId": 391,
"isControlConfigured": true,
"criticalityLabel": "SERIOUS"
}
]
}
]