POST `/admin/compliance/iso27001/controls`

Create an ISO27001 security control item record

Compliance Management - ISO27001 `bearerAuth` application/json

Request Body

Schema: dto.CreateISO27001ControlRequest

Field	Type	Required	Example
`code`	`string`	Yes	`A.5.1.1`
`name`	`string`	Yes	`Information security policy`
`category`	`string`	No	`Organizational controls`
`description`	`string`	No	`Information security policy should be defined and approved`
`evidence_url`	`string`	No	`https://docs.example.com/iso27001/A.5.1.1`
`status`	`string`	No	`compliant`

Status	Description	Schema
201	created	`dto.ISO27001ControlItemResponse`
400	bad request	`dto.ErrorResponse`

Field	Type	Required	Example	Constraints	Description
`code`	`integer`	No	`400`
`message`	`string`	No	`invalid request`

ISO 27001 security control items

Field	Type	Required	Example	Description
`category`	`string`	No	`Organizational security`	Category
`control_id`	`string`	No	`A.5.1.1`	Control ID
`control_name`	`string`	No	`Information security policy`	Control name
`evidence_url`	`string`	No	`https://docs.example.com/...`	Evidence
`id`	`string`	No	`01JQ...`	Primary key ID
`last_reviewed`	`string`	No	`2026-04-01T00:00:00Z`	Review time
`status`	`string`	No	`implemented`	Status

Field	Type	Required
`code`	`integer`	No
`data`	`dto.ISO27001ControlItem`	No
`message`	`string`	No
`timestamp`	`string`	No