{
    "api": "DISA STIG to NIST 800-53 mapping",
    "version": "v1",
    "status": "stable",
    "description": "A machine-readable mapping from DISA STIG rules through DoD CCIs to NIST SP 800-53 security controls. Answers \"which STIG rules satisfy control X\" and the reverse.",
    "coverage": {
        "stig_benchmarks": 8,
        "stig_rules": 2030,
        "cci_items": 5137,
        "controls_800_53": 307,
        "mapping_chain": "STIG rule -> CCI -> NIST 800-53 control (rev4 baseline)"
    },
    "endpoints": [
        {
            "method": "GET",
            "path": "/api/v1/stig-nist/mapping",
            "summary": "The full mapping cube (rules, CCIs, controls, benchmarks)."
        },
        {
            "method": "GET",
            "path": "/api/v1/stig-nist/controls",
            "summary": "800-53 controls with the count of STIG rules mapped to each."
        },
        {
            "method": "GET",
            "path": "/api/v1/stig-nist/benchmarks",
            "summary": "The STIG benchmarks covered (product, version, rule count)."
        },
        {
            "method": "GET",
            "path": "/api/v1/stig-nist/control/{id}",
            "summary": "Lookup: the CCIs and STIG rules that map to one 800-53 control (e.g. AC-2)."
        }
    ],
    "source": {
        "stig": "Public DISA STIG benchmarks (unclassified XCCDF).",
        "ccis": "DoD Control Correlation Identifiers (CCI list).",
        "nist": "NIST SP 800-53 control catalog.",
        "note": "Compiled and cross-referenced by BrandShyp. Provided as-is; verify against the authoritative DISA/NIST sources for accreditation use."
    },
    "license": {
        "name": "Public U.S. Government source material; compilation CC BY 4.0",
        "url": "https://creativecommons.org/licenses/by/4.0/",
        "attribution": "STIG/CCI/800-53 are U.S. Government works. Cross-reference compiled by BrandShyp."
    },
    "documentation": "https://brandshyp.org/compliance-api/",
    "openapi": "https://brandshyp.org/api/v1/compliance/openapi.json"
}