Request payload containing filters, pagination, and sorting options.

Filtering

Filters must be passed inside the filter object.

Supported fields

• code – Control display code (e.g. CC6.1, CBC-9)
• control_id – Control primary key
• name – Control name
• status – Control status (e.g. Implemented, Not Implemented, In Progress)
• owner – Owner user id
• control_set – Control set id
• control_set_name – Control set display name
• control_family – Control family id

Examples

"filter": {
  "code": "eq:CC6.1",
  "status": "in:Implemented,Not Implemented"
}

Supported operators

• eq — exact match
• in — comma-separated list

Pagination

• page_size default = 50, max = 200

Cursor Pagination

• cursor must be Base64 encoded

Sorting

Allowed fields: id, name, control_id, code, status

Sorting rules:

• Ascending → name or +name
• Descending → -name