{
    "api": "NIST SP 800-171 rev2 controls with DoD SPRS weights",
    "version": "v1",
    "status": "stable",
    "description": "All 110 NIST SP 800-171 rev2 security requirements, grouped by family, each with the DoD Assessment Methodology weight (5, 3, or 1) used to compute a SPRS score from a starting value of 110.",
    "coverage": {
        "families": 14,
        "controls": 110,
        "weights": "DoD Assessment Methodology v1.2.1 (deduct 5 / 3 / 1 per unmet control from a start of 110).",
        "partial": "3.5.3 (MFA) and 3.13.11 (FIPS crypto) carry a documented partial (deduct 3) state."
    },
    "endpoints": [
        {
            "method": "GET",
            "path": "/api/v1/nist-800-171/controls",
            "summary": "All 110 controls, by family, with id, title, weight, and partial flag."
        }
    ],
    "source": "NIST SP 800-171 rev2; DoD Assessment Methodology v1.2.1 (both public U.S. Government documents).",
    "caveat": "Reference data only. This is not a SPRS score and not an assessment; your Basic Assessment must be entered in SPRS.",
    "license": {
        "name": "Public U.S. Government source material; compilation CC BY 4.0",
        "url": "https://creativecommons.org/licenses/by/4.0/",
        "attribution": "NIST 800-171 and the DoD Assessment Methodology are U.S. Government works. Compiled by BrandShyp."
    },
    "documentation": "https://brandshyp.org/compliance-api/",
    "openapi": "https://brandshyp.org/api/v1/compliance/openapi.json"
}