Skip to main content
PATCH
Update a row in an ISMS register

Authorizations

X-API-Key
string
header
required

API key for authentication

Path Parameters

register
enum<string>
required

Which ISMS register the row belongs to.

Available options:
context-issues,
interested-parties,
requirements,
objectives,
roles,
role-assignments,
metrics,
measurements,
audits,
audit-controls,
audit-findings,
reviews,
review-inputs,
review-actions,
communications,
obligations,
key-records,
approved-software,
nonconformities,
business-processes,
continuity-playbooks,
continuity-contacts,
recovery-systems
rowId
string
required

Body

application/json

Register row fields (per-register; validated at runtime by zod)

kind
enum<string>
Available options:
internal,
external,
recurring,
milestone,
legal,
regulatory,
contractual,
standard
category
string
description
string
effect
string
name
string
needsExpectations
string
interestedPartyId
string
partyName
string
requirement
string
treatment
string
objective
string
target
string
ownerMemberId
string
cadence
string
plan
string
measurementMethod
string
targetDate
string | null

Milestone objectives only: due date (YYYY-MM-DD)

status
enum<string>
Available options:
not_started,
on_track,
at_risk,
met,
planned,
in_progress,
complete,
open,
closed,
action_complete,
verified_and_closed
responsibilities
string
authorities
string
authorityGrantedBy
string
requiredCompetence
string
auditRoute
enum<string> | null
Available options:
in_house,
external,
training_planned
auditRouteMemberId
string | null
auditFirmName
string | null
auditEvidenceRef
string | null
auditCourse
string | null
auditDueDate
string | null
roleId
string
memberId
string
basisOfCompetence
enum<string> | null
Available options:
education,
training,
experience,
combination
evidenceRetained
string | null
gap
string | null
remediationAction
string | null
remediationDueDate
string | null
whatIsMeasured
string
method
string
monitorMemberId
string | null
analyzeMemberId
string | null
unit
enum<string> | null
Available options:
percent,
count,
days,
hours,
minutes
targetKind
enum<string>

Defaults to 'text'. 'structured' requires targetOperator, targetValue and unit.

Available options:
structured,
text
targetOperator
enum<string> | null
Available options:
at_least,
at_most,
exactly
targetValue
number | null
objectiveId
string | null

Deprecated: objectives now take their numbers from a metric, not the reverse.

isActive
boolean
metricId
string | null

Measurements: the metric being recorded. Objectives: the metric the objective inherits its target, cadence and status from (recurring objectives only).

periodStart
string

First day of the covered period (YYYY-MM-DD), aligned to the metric cadence

value
string
note
string | null
scope
string
criteria
string
auditorName
string | null
plannedStartDate
string | null
plannedEndDate
string | null
conclusionVerdict
enum<string> | null
Available options:
conform,
substantially_conform,
not_yet_conform,
suitable,
adequate,
effective
conclusionNotes
string | null
signoffAuditorName
string | null
signoffAuditorDate
string | null
signoffSpoName
string | null
signoffSpoDate
string | null
signoffTopMgmtName
string | null
signoffTopMgmtDate
string | null
auditId
string
controlRef
string
whatWasTested
string
whereToFind
string
result
enum<string> | null
Available options:
conformity_confirmed,
nonconformity_raised,
observation_raised,
not_sampled
notes
string | null
type
enum<string>
Available options:
nc_major,
nc_minor,
ofi,
observation,
minor_nonconformity,
major_nonconformity,
improvement_opportunity
controlId
string | null
clauseOrControl
string | null
dueDate
string | null
closureEvidence
string | null
meetingDate
string | null
chairName
string | null
attendees
object[]

Attendees frozen at selection (members picked from People)

decisionsText
string | null
changesText
string | null
signoffChairName
string | null
signoffChairDate
string | null
reviewId
string
inputRef
string
whatItCovers
string
discussionNotes
string | null
discussed
boolean
what
string
audience
enum<string>
Available options:
internal,
external
recipients
string
ownerRoleKey
string | null

ISMS role accountable when no member is assigned (e.g. spo, top_management, internal_auditor)

frequency
enum<string>
Available options:
on_joining,
on_publication,
as_it_happens,
monthly,
quarterly,
annually,
on_request,
within_statutory_deadline,
if_needed,
on_joining_and_annually,
after_each_audit,
on_onboarding_and_as_needed,
per_audit_cycle
channel
enum<string>
Available options:
email,
slack_or_teams,
company_meeting,
trust_centre,
comp_ai_portal,
training_platform,
written_notice
contactRef
string | null

External rows only: the body name, reporting route and any reference number (A.5.5)

evidenceRef
string
obligation
string
jurisdiction
string | null
howWeMeetIt
string | null
consequence
string | null
protects
string
managedIn
string
rotation
enum<string>
Available options:
automatic,
annually,
on_change,
on_change_or_annually,
on_offboarding,
not_rotated
rotationNote
string | null

Only kept when rotation is not_rotated

accessMemberId
string | null
accessRoleKey
string | null

ISMS role that holds the key when no member is named (e.g. spo)

accessText
string | null

Free-text access holder, for answers no picker can express (e.g. "Each individual")

purpose
string | null
vendorId
string | null

Links the row to a vendor; the name then renders live

usedWhere
enum<string> | null
Available options:
end_user_devices,
production_systems,
both,
cloud_service
licence
enum<string> | null
Available options:
commercial,
open_source,
free_tier,
internal
raisedAt
string

Date the entry was raised (YYYY-MM-DD); defaults to today

source
enum<string>
Available options:
internal_audit,
external_audit,
incident,
management_review,
control_or_task_failure,
customer_or_vendor_issue,
other
correction
string | null

The immediate fix, as opposed to the corrective action

rootCauseCategory
enum<string> | null
Available options:
process_not_defined,
process_defined_but_not_followed,
no_owner_assigned,
lack_of_awareness_or_training,
tooling_or_system_gap,
resource_constraint,
one_off_human_error
rootCause
string | null
correctiveAction
string | null

What stops the nonconformity recurring

actionCompletedAt
string | null
verifiedByMemberId
string | null
verifiedAt
string | null
verificationCheck
string | null

How effectiveness was confirmed

position
integer
Required range: x >= 0

Response

200

Register row updated