PUT `/admin/compliance/iso27001/controls/{decision_id}`

Update status and evidence of a specified ISO27001 security control item

Compliance Management - ISO27001 `bearerAuth` application/json

Request Parameters

Name	In	Type	Required	Default	Example	Constraints	Description
`id`	`path`	`string`	Yes				control ID

Schema: dto.UpdateISO27001ControlRequest

Field	Type	Required	Example
`category`	`string`	No	`Organizational Controls`
`description`	`string`	No	`Information security policy should be defined and approved`
`evidence_url`	`string`	No	`https://docs.example.com/iso27001/A.5.1.1`
`name`	`string`	No	`Information Security Policy`
`status`	`string`	No	`compliant`

Status	Description	Schema
200	success	`dto.ISO27001ControlItemResponse`
400	bad request	`dto.ErrorResponse`

Field	Type	Required	Example	Constraints	Description
`code`	`integer`	No	`400`
`message`	`string`	No	`invalid request`

ISO 27001 security control items

Field	Type	Required	Example	Description
`category`	`string`	No	`Organizational security`	Category
`control_id`	`string`	No	`A.5.1.1`	Control ID
`control_name`	`string`	No	`Information security policy`	Control name
`evidence_url`	`string`	No	`https://docs.example.com/...`	Evidence
`id`	`string`	No	`01JQ...`	Primary key ID
`last_reviewed`	`string`	No	`2026-04-01T00:00:00Z`	Review time
`status`	`string`	No	`implemented`	Status

Field	Type	Required
`code`	`integer`	No
`data`	`dto.ISO27001ControlItem`	No
`message`	`string`	No
`timestamp`	`string`	No