POST `/admin/compliance/audit-findings`

Create an audit finding record, including risk level and remediation plan

Compliance Management - Audit Findings `bearerAuth` application/json

Request Body

Schema: dto.CreateAuditFindingRequest

Field	Type	Required	Example	Constraints
`assignee_id`	`string`	Yes	`usr_security_lead`
`control_id`	`string`	Yes	`01JQ...`
`control_type`	`string`	Yes	`iso27001`
`description`	`string`	Yes	`A.9.1.2 requires quarterly review but last review was 6 months ago`
`due_date`	`string`	Yes	`2026-06-01T00:00:00Z`
`severity`	`string`	Yes	`high`	enum: `critical`, `high`, `medium`, `low`
`title`	`string`	Yes	`Access control policy not reviewed periodically`
`remediation_plan`	`string`	No	`Set up automated review reminder and complete review within one week`

Status	Description	Schema
201	created	`dto.AuditFindingItemResponse`
400	bad request	`dto.ErrorResponse`

Field	Type	Required	Example
`assignee_id`	`string`	No	`usr_security_lead`
`control_id`	`string`	No	`01JQ...`
`control_type`	`string`	No	`iso27001`
`created_at`	`string`	No	`2026-05-01T10:00:00Z`
`description`	`string`	No	`A.9.1.2 requires quarterly review, last review 6 months ago`
`due_date`	`string`	No	`2026-06-01T00:00:00Z`
`id`	`string`	No	`01JQ...`
`remediation_plan`	`string`	No	`Establish automated review reminders`
`severity`	`string`	No	`high`
`status`	`string`	No	`open`
`title`	`string`	No	`Access Control Policy Not Reviewed`

Field	Type	Required
`code`	`integer`	No
`data`	`dto.AuditFindingItem`	No
`message`	`string`	No
`timestamp`	`string`	No

Field	Type	Required	Example	Constraints	Description
`code`	`integer`	No	`400`
`message`	`string`	No	`invalid request`