# Retrieve Display Names for Security Criteria
source: https://developer.mastercard.com/riskrecon-api/documentation/use-cases/navigation-and-access/displayname/retrve-disp-nm-sec-crit/index.md

## Overview {#overview}

Using the `GET Security Criteria Display Names` endpoint, you can retrieve a one-to-one mapping of each security criteria name as they are presented in the API response and the web portal. Besides, using this endpoint also lets you know if a particular security criteria is currently rated or deprecated.

Following is an example of how you can correctly match a security criteria name with its display name:

Suppose the `Action Plan Findings API` for a vendor returns the findings for the following security criteria, which is shown in this response snippet:

    "attributes": {
                    ........

                    "security_criteria": "unencrypted_sensitive_systems"
                    "security_domain": "web_app_security"
                    
                    ......
                  }

When you execute the `GET Security Criteria Display Names` endpoint, it returns the mapping of all the security criteria available, out of which you can find the display name of the `unencrypted_sensitive_systems` security criteria, which is `High Value System Encryption`. This is shown in the following response snippet:

    {
            "deprecated": false,
            "display_name": "High Value System Encryption",
            "name": "unencrypted_sensitive_systems",
            "rated": true
    }

You may also retrieve the display name of the security domain to which it belongs using the `GET Security Domain Display Names` endpoint. In this example, the security domain retrieved is `Application Security`. For more details on the `GET Security Domain Display Names` endpoint, refer to [Retrieve Display Names for Security Domains](https://developer.mastercard.com/riskrecon-api/documentation/use-cases/navigation-and-access/displayname/rtreve-disp-nm-sec-dom/index.md) use case.

![](https://static.developer.mastercard.com/content/riskrecon-api/uploads/security-criteria-display-name.png)

## Sequence Diagram {#sequence-diagram}

The following diagram shows how to retrieve a mapping of each security criteria name as they are presented in the API response and the web portal:
Diagram retrieve-display-names-security-criteria

## Execution Steps {#execution-steps}

The following steps describe how to retrieve a mapping of each security criteria name as they are presented in the API response and the web portal:

1. The user sends a `GET` request to retrieve the display names of the security criteria.
2. RiskRecon provides the display names of the security criteria.

## Sample Request and Response {#sample-request-and-response}

For a sample request and response of this API, see [Get the Display Names for the Security Criteria](https://developer.mastercard.com/riskrecon-api/documentation/testing/displaynames-samples/sec-crt-disp-nms-smpl/index.md).

## Use Case Example {#use-case-example}

The [Finding the display name of a new security criterion](https://developer.mastercard.com/riskrecon-api/documentation/use-cases/navigation-and-access/displayname/retrve-disp-nm-sec-crit/index.md#finding-the-display-name-of-a-new-security-criterion) use case discusses how you can use the `GET Security Criteria Display Names` endpoint to retrieve the display name and rating information of a new security criterion.

### Finding the display name of a new security criterion {#finding-the-display-name-of-a-new-security-criterion}

A security criterion has been added to a security domain. The RiskRecon customer wants to know the display name of the security criterion and whether it is being rated. The customer can use the `GET Security Criteria Display Names` endpoint to retrieve the display name of the security criterion. The `rated` parameter value retrieved in the response helps the customer know whether it is being rated or not.