<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Implementing Continuous Risk Monitoring

## GRC Platform APIs

### ServiceNow IRM

| Endpoint | Method | Description |
|----------|--------|-------------|
| `/api/sn_risk/risks` | GET | List risk register entries |
| `/api/sn_risk/risks` | POST | Create risk entry |
| `/api/sn_risk/risk_assessments` | GET | List risk assessments |
| `/api/sn_grc/control` | GET | List GRC controls |
| `/api/sn_risk/kri` | GET | List Key Risk Indicators |

### Archer (RSA) API

| Endpoint | Method | Description |
|----------|--------|-------------|
| `/api/core/content` | POST | Create risk record |
| `/api/core/search` | POST | Search risk entries |
| `/api/core/content/{id}` | PUT | Update risk record |
| `/api/core/system/reports` | GET | Generate risk reports |

## Vulnerability Data Sources

| Source | API | Data Type |
|--------|-----|-----------|
| Tenable.io | REST API v3 | Vulnerability scan results |
| Qualys | REST API v2 | Asset vulnerabilities |
| Rapid7 InsightVM | REST API v3 | Risk-scored vulnerabilities |
| NVD | REST API 2.0 | CVE details and CVSS scores |

## Threat Intelligence Feeds

| Feed | Format | Content |
|------|--------|---------|
| MITRE ATT&CK | STIX 2.1 | TTPs and threat groups |
| AlienVault OTX | REST API | IOCs and pulse data |
| VirusTotal | REST API v3 | File/URL/domain analysis |
| Shodan | REST API | Internet-facing exposure |

## Risk Scoring Standards

| Standard | Methodology | Scale |
|----------|-------------|-------|
| CVSS v4.0 | Vulnerability severity | 0.0–10.0 |
| FAIR | Loss event frequency × magnitude | Dollar value |
| NIST SP 800-30 | Likelihood × Impact matrix | Very Low–Very High |
| ISO 27005 | Asset value × threat × vulnerability | Organization-defined |
