/admin/compliance/audit-findings
创建一条审计发现问题，记录风险等级和整改计划
Request Body
Schema: dto.CreateAuditFindingRequest
| Field | Type | Required | Example | Constraints | Description |
|---|---|---|---|---|---|
assignee_id |
string |
Yes | usr_security_lead |
||
control_id |
string |
Yes | 01JQ... |
||
control_type |
string |
Yes | iso27001 |
||
description |
string |
Yes | A.9.1.2 要求每季度审查但上次审查距今已6个月 |
||
due_date |
string |
Yes | 2026-06-01T00:00:00Z |
||
severity |
string |
Yes | high |
enum: `critical`, `high`, `medium`, `low` | |
title |
string |
Yes | 访问控制策略未定期审查 |
||
remediation_plan |
string |
No | 建立自动化审查提醒并在一周内完成审查 |
Responses
| Status | Description | Schema |
|---|---|---|
| 201 | created | dto.AuditFindingItemResponse |
| 400 | bad request | dto.ErrorResponse |
Referenced Schemas
dto.AuditFindingItem
| Field | Type | Required | Example | Constraints | Description |
|---|---|---|---|---|---|
assignee_id |
string |
No | usr_security_lead |
||
control_id |
string |
No | 01JQ... |
||
control_type |
string |
No | iso27001 |
||
created_at |
string |
No | 2026-05-01T10:00:00Z |
||
description |
string |
No | A.9.1.2 requires quarterly review, last review 6 months ago |
||
due_date |
string |
No | 2026-06-01T00:00:00Z |
||
id |
string |
No | 01JQ... |
||
remediation_plan |
string |
No | Establish automated review reminders |
||
severity |
string |
No | high |
||
status |
string |
No | open |
||
title |
string |
No | Access Control Policy Not Reviewed |
dto.AuditFindingItemResponse
| Field | Type | Required | Example | Constraints | Description |
|---|---|---|---|---|---|
code |
integer |
No | |||
data |
dto.AuditFindingItem |
No | |||
message |
string |
No | |||
timestamp |
string |
No |
dto.ErrorResponse
| Field | Type | Required | Example | Constraints | Description |
|---|---|---|---|---|---|
code |
integer |
No | 400 |
||
message |
string |
No | invalid request |