> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/xsiam-api/compliance-controls/standards.md).

# Standards

Operations for managing standards

## Get compliance standards (v1)

> Retrieve compliance standards with optional filtering, sorting and pagination.\
> \- The response is concatenated using AND condition (OR is not supported)\
> \- The maximum result set size is >100\
> \- Offset is the zero-based number of standards from the start of the result set\
> \
> \*\*Required license:\*\* Cortex Cloud Runtime Security or Cortex Cloud Posture Management

```json
{"openapi":"3.0.3","info":{"title":"Compliance Controls API","version":"Cortex XSIAM 3.5"},"tags":[{"name":"Standards","description":"Operations for managing standards"}],"servers":[{"url":"https://{tenant}.xdr.{region}.paloaltonetworks.com","description":"Cortex tenant","variables":{"tenant":{"default":"api","description":"Tenant-specific subdomain"},"region":{"default":"us","description":"Deployment region","enum":["us","eu","uk","sg","jp","ca","au","in","gov"]}}}],"security":[{"XDRAuth":[],"XDRAuthToken":[]}],"components":{"securitySchemes":{"XDRAuth":{"type":"apiKey","in":"header","name":"x-xdr-auth-id","description":"API Key ID for authentication"}},"schemas":{"StandardFilter":{"type":"object","required":["field","operator","value"],"properties":{"field":{"type":"string","enum":["name","id","publisher","is_custom","insertion_time","created_by","labels"],"description":"Identifies the compliance standard field the filter should match. Filters are based on the following keywords:\n- `name`: Compliance standard name\n- `id`: Compliance standard ID\n- `publisher`: Compliance standard publisher\n- `created_by`: User who created the compliance standard\n- `insertion_time`: When the compliance standard was created\n- `is_custom`: Whether the compliance standard is custom\n- `labels`: Compliance standard labels"},"operator":{"enum":["eq","neq","contains","not_contains","gte","lte","range","relative_timestamp","in"],"description":"Identifies the comparison operator you want to use for this filter. Valid keywords are:\n\n`eq` / `neq` / `contains` / `not_contains`: \n- `name`, `id`, `publisher`, `created_by`: String\n\n`gte` / `lte` / `range` / `relative_timestamp`: \n- `insertion_time``: Integer in timestamp epoch milliseconds\n\n`in`:\n- `is_custom`: Enum with possible values of `yes` or `no`\n\n`contains` / `not_contains`:\n- `labels`: Array of strings"},"value":{"oneOf":[{"type":"string","description":"When the `field` value is one of the following, the `value` is type string: `name`, `id`, `publisher`, `created_by`"},{"type":"integer","description":"When the `field` value is one of the following, the `value` is type integer: `insertion_time`"},{"enum":["yes","no"],"description":"When the `field` value is one of the following, the `value` is type enum: `is_custom`"},{"type":"array","description":"When the `field` value is one of the following, the `value` is an array of strings: `labels`","items":{"type":"string"}}],"description":"Value that this filter must match. The contents of this field will differ depending on the assessment profile `field` that you specified for this filter."}}},"Standard":{"type":"object","properties":{"id":{"type":"string","description":"Standard ID"},"name":{"type":"string","description":"Standard name"},"description":{"type":"string","description":"Description of the standard"},"publisher":{"type":"string","description":"Standard publisher/organization"},"labels":{"type":"array","description":"List of labels for categorization","items":{"type":"string"}},"insertion_time":{"type":"integer","format":"int64","description":"Creation timestamp (epoch)"},"created_by":{"type":"string","description":"User who created the standard"},"is_custom":{"type":"boolean","description":"Whether this is a custom standard"},"controls_count":{"type":"integer","description":"Number of associated controls"},"controls_ids":{"type":"array","description":"List of associated control IDs","items":{"type":"string"}}}},"Error":{"type":"object","properties":{"reply":{"type":"object","properties":{"err_code":{"type":"integer","description":"Error code"},"err_msg":{"type":"string","description":"Error message"},"err_extra":{"type":"object","description":"Additional error details"}}}}}},"responses":{"BadRequest":{"description":"Bad request - invalid input parameters","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"InternalServerError":{"description":"Internal server error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}},"paths":{"/public_api/v1/compliance/get_standards":{"post":{"summary":"Get compliance standards (v1)","description":"Retrieve compliance standards with optional filtering, sorting and pagination.\n- The response is concatenated using AND condition (OR is not supported)\n- The maximum result set size is >100\n- Offset is the zero-based number of standards from the start of the result set\n\n**Required license:** Cortex Cloud Runtime Security or Cortex Cloud Posture Management","operationId":"getStandards","tags":["Standards"],"requestBody":{"required":false,"content":{"application/json":{"schema":{"type":"object","properties":{"request_data":{"type":"object","properties":{"filters":{"type":"array","description":"Array of filter conditions","items":{"$ref":"#/components/schemas/StandardFilter"}},"sort":{"type":"object","properties":{"field":{"type":"string","enum":["name","creation_time","created_by","id","insertion_time"],"default":"creation_time","description":"Field to sort by"},"keyword":{"type":"string","enum":["asc","desc"],"default":"asc","description":"Sort order"}}},"search_from":{"type":"integer","minimum":0,"default":0,"description":"Zero-based index of the first standard to return. Use with `search_to` to page through results. For example, `search_from: 0` starts at the first standard; `search_from: 50` skips the first 50."},"search_to":{"type":"integer","minimum":1,"default":100,"description":"Zero-based index marking the end of the page (exclusive). The response includes standards from `search_from` up to, but not including, `search_to`. For example, `search_from: 0` and `search_to: 50` returns the first 50 standards."}}}}}}}},"responses":{"200":{"description":"Successfully retrieved standards","content":{"application/json":{"schema":{"type":"object","properties":{"total_count":{"type":"integer","description":"Total number of standards in the system"},"result_count":{"type":"integer","description":"Number of standards matching the filter criteria + paging"},"standards":{"type":"array","items":{"$ref":"#/components/schemas/Standard"}}}}}}},"400":{"$ref":"#/components/responses/BadRequest"},"500":{"$ref":"#/components/responses/InternalServerError"}}}}}}
```

## Get single standard by ID (v1)

> Retrieve details of the compliance standard specified by its ID.\
> \
> \*\*Required license:\*\* Cortex Cloud Runtime Security or Cortex Cloud Posture Management

```json
{"openapi":"3.0.3","info":{"title":"Compliance Controls API","version":"Cortex XSIAM 3.5"},"tags":[{"name":"Standards","description":"Operations for managing standards"}],"servers":[{"url":"https://{tenant}.xdr.{region}.paloaltonetworks.com","description":"Cortex tenant","variables":{"tenant":{"default":"api","description":"Tenant-specific subdomain"},"region":{"default":"us","description":"Deployment region","enum":["us","eu","uk","sg","jp","ca","au","in","gov"]}}}],"security":[{"XDRAuth":[],"XDRAuthToken":[]}],"components":{"securitySchemes":{"XDRAuth":{"type":"apiKey","in":"header","name":"x-xdr-auth-id","description":"API Key ID for authentication"}},"schemas":{"Standard":{"type":"object","properties":{"id":{"type":"string","description":"Standard ID"},"name":{"type":"string","description":"Standard name"},"description":{"type":"string","description":"Description of the standard"},"publisher":{"type":"string","description":"Standard publisher/organization"},"labels":{"type":"array","description":"List of labels for categorization","items":{"type":"string"}},"insertion_time":{"type":"integer","format":"int64","description":"Creation timestamp (epoch)"},"created_by":{"type":"string","description":"User who created the standard"},"is_custom":{"type":"boolean","description":"Whether this is a custom standard"},"controls_count":{"type":"integer","description":"Number of associated controls"},"controls_ids":{"type":"array","description":"List of associated control IDs","items":{"type":"string"}}}},"Error":{"type":"object","properties":{"reply":{"type":"object","properties":{"err_code":{"type":"integer","description":"Error code"},"err_msg":{"type":"string","description":"Error message"},"err_extra":{"type":"object","description":"Additional error details"}}}}}},"responses":{"BadRequest":{"description":"Bad request - invalid input parameters","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"NotFound":{"description":"Resource not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"InternalServerError":{"description":"Internal server error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}},"paths":{"/public_api/v1/compliance/get_standard":{"post":{"summary":"Get single standard by ID (v1)","description":"Retrieve details of the compliance standard specified by its ID.\n\n**Required license:** Cortex Cloud Runtime Security or Cortex Cloud Posture Management","operationId":"getStandard","tags":["Standards"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"request_data":{"type":"object","required":["id"],"properties":{"id":{"type":"string","description":"Compliance standard ID"}}}}}}}},"responses":{"200":{"description":"Successfully retrieved standard","content":{"application/json":{"schema":{"type":"object","properties":{"standard":{"$ref":"#/components/schemas/Standard"}}}}}},"400":{"$ref":"#/components/responses/BadRequest"},"404":{"$ref":"#/components/responses/NotFound"},"500":{"$ref":"#/components/responses/InternalServerError"}}}}}}
```

## Add new standard (v1)

> Create a new compliance standard.\
> \
> \*\*Required license:\*\* Cortex Cloud Runtime Security or Cortex Cloud Posture Management

```json
{"openapi":"3.0.3","info":{"title":"Compliance Controls API","version":"Cortex XSIAM 3.5"},"tags":[{"name":"Standards","description":"Operations for managing standards"}],"servers":[{"url":"https://{tenant}.xdr.{region}.paloaltonetworks.com","description":"Cortex tenant","variables":{"tenant":{"default":"api","description":"Tenant-specific subdomain"},"region":{"default":"us","description":"Deployment region","enum":["us","eu","uk","sg","jp","ca","au","in","gov"]}}}],"security":[{"XDRAuth":[],"XDRAuthToken":[]}],"components":{"securitySchemes":{"XDRAuth":{"type":"apiKey","in":"header","name":"x-xdr-auth-id","description":"API Key ID for authentication"}},"schemas":{"SuccessResponse":{"type":"object","properties":{"success":{"type":"boolean","description":"Operation success status"}}},"Error":{"type":"object","properties":{"reply":{"type":"object","properties":{"err_code":{"type":"integer","description":"Error code"},"err_msg":{"type":"string","description":"Error message"},"err_extra":{"type":"object","description":"Additional error details"}}}}}},"responses":{"BadRequest":{"description":"Bad request - invalid input parameters","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"InternalServerError":{"description":"Internal server error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}},"paths":{"/public_api/v1/compliance/add_standard":{"post":{"summary":"Add new standard (v1)","description":"Create a new compliance standard.\n\n**Required license:** Cortex Cloud Runtime Security or Cortex Cloud Posture Management","operationId":"addStandard","tags":["Standards"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"request_data":{"type":"object","required":["standard_name"],"properties":{"standard_name":{"type":"string","description":"Name of the compliance standard"},"description":{"type":"string","description":"Description of the standard"},"labels":{"type":"array","description":"List of labels for categorization","items":{"type":"string"}},"controls_ids":{"type":"array","description":"List of control IDs to associate with this standard. Only custom controls can be included.","items":{"type":"string"}}}}}}}}},"responses":{"200":{"description":"Standard added successfully","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SuccessResponse"}}}},"400":{"$ref":"#/components/responses/BadRequest"},"500":{"$ref":"#/components/responses/InternalServerError"}}}}}}
```

## Edit existing standard (v1)

> Edit an existing compliance standard specified by its ID. \
> \
> \*\*Required license:\*\* Cortex Cloud Runtime Security or Cortex Cloud Posture Management

```json
{"openapi":"3.0.3","info":{"title":"Compliance Controls API","version":"Cortex XSIAM 3.5"},"tags":[{"name":"Standards","description":"Operations for managing standards"}],"servers":[{"url":"https://{tenant}.xdr.{region}.paloaltonetworks.com","description":"Cortex tenant","variables":{"tenant":{"default":"api","description":"Tenant-specific subdomain"},"region":{"default":"us","description":"Deployment region","enum":["us","eu","uk","sg","jp","ca","au","in","gov"]}}}],"security":[{"XDRAuth":[],"XDRAuthToken":[]}],"components":{"securitySchemes":{"XDRAuth":{"type":"apiKey","in":"header","name":"x-xdr-auth-id","description":"API Key ID for authentication"}},"schemas":{"SuccessResponse":{"type":"object","properties":{"success":{"type":"boolean","description":"Operation success status"}}},"Error":{"type":"object","properties":{"reply":{"type":"object","properties":{"err_code":{"type":"integer","description":"Error code"},"err_msg":{"type":"string","description":"Error message"},"err_extra":{"type":"object","description":"Additional error details"}}}}}},"responses":{"BadRequest":{"description":"Bad request - invalid input parameters","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"NotFound":{"description":"Resource not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"InternalServerError":{"description":"Internal server error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}},"paths":{"/public_api/v1/compliance/edit_standard":{"post":{"summary":"Edit existing standard (v1)","description":"Edit an existing compliance standard specified by its ID. \n\n**Required license:** Cortex Cloud Runtime Security or Cortex Cloud Posture Management","operationId":"editStandard","tags":["Standards"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"request_data":{"type":"object","required":["id"],"properties":{"id":{"type":"string","description":"Compliance standard ID"},"standard_name":{"type":"string","description":"Name of the standard"},"description":{"type":"string","description":"Description of the standard"},"labels":{"type":"array","description":"List of labels for categorization","items":{"type":"string"}},"controls_ids":{"type":"array","description":"List of control IDs to associate with this standard. Only custom controls can be included.","items":{"type":"string"}}}}}}}}},"responses":{"200":{"description":"Standard updated successfully","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SuccessResponse"}}}},"400":{"$ref":"#/components/responses/BadRequest"},"404":{"$ref":"#/components/responses/NotFound"},"500":{"$ref":"#/components/responses/InternalServerError"}}}}}}
```

## Delete standard (v1)

> Delete a the compliance standard specified by its ID.\
> \
> \*\*Required license:\*\* Cortex Cloud Runtime Security or Cortex Cloud Posture Management

```json
{"openapi":"3.0.3","info":{"title":"Compliance Controls API","version":"Cortex XSIAM 3.5"},"tags":[{"name":"Standards","description":"Operations for managing standards"}],"servers":[{"url":"https://{tenant}.xdr.{region}.paloaltonetworks.com","description":"Cortex tenant","variables":{"tenant":{"default":"api","description":"Tenant-specific subdomain"},"region":{"default":"us","description":"Deployment region","enum":["us","eu","uk","sg","jp","ca","au","in","gov"]}}}],"security":[{"XDRAuth":[],"XDRAuthToken":[]}],"components":{"securitySchemes":{"XDRAuth":{"type":"apiKey","in":"header","name":"x-xdr-auth-id","description":"API Key ID for authentication"}},"schemas":{"SuccessResponse":{"type":"object","properties":{"success":{"type":"boolean","description":"Operation success status"}}},"Error":{"type":"object","properties":{"reply":{"type":"object","properties":{"err_code":{"type":"integer","description":"Error code"},"err_msg":{"type":"string","description":"Error message"},"err_extra":{"type":"object","description":"Additional error details"}}}}}},"responses":{"BadRequest":{"description":"Bad request - invalid input parameters","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"NotFound":{"description":"Resource not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"InternalServerError":{"description":"Internal server error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}},"paths":{"/public_api/v1/compliance/delete_standard":{"post":{"summary":"Delete standard (v1)","description":"Delete a the compliance standard specified by its ID.\n\n**Required license:** Cortex Cloud Runtime Security or Cortex Cloud Posture Management","operationId":"deleteStandard","tags":["Standards"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"request_data":{"type":"object","required":["id"],"properties":{"id":{"type":"string","description":"Compliance standard ID"}}}}}}}},"responses":{"200":{"description":"Standard deleted successfully","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SuccessResponse"}}}},"400":{"$ref":"#/components/responses/BadRequest"},"404":{"$ref":"#/components/responses/NotFound"},"500":{"$ref":"#/components/responses/InternalServerError"}}}}}}
```


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/xsiam-api/compliance-controls/standards.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.