---
title: "Update Incident"
method: PUT
path: "/incident/v1/incidents/{incidentId}"
tags: ["Incidents"]
---

# Update Incident

`PUT /incident/v1/incidents/{incidentId}`

Use this API to update the details of a specific incident by providing the incident's unique ID in the URL path and the updated information in the request body. The response will return the updated incident information.

## Path parameters

- `incidentId` string, uuid, required — Incident ID

## Request body

- IncidentUpdateRequest
  - `name` string, required — Name of the incident. Provide a descriptive name to the incident so that it can be quickly referenced in the incident register.
  - `description` string — Brief description of the incident.
  - `incidentTypeName` string, required — The name of the type of incident that has occurred.
  - `orgGroupId` string, uuid, required — Incident Organization ID. This can be retrieved from the [Get List of Organizations](/onetrust/reference/organizationtreestructureusingget) API.
  - `dateOccurred` string, date-time — The date and time when the incident occurred, represented as an ISO 8601 timestamp in UTC.
  - `dateDiscovered` string, date-time — The date and time when the incident was discovered, represented as an ISO 8601 timestamp in UTC.
  - `deadline` string, date-time — The date by which the incident investigation or notification must be completed, represented as an ISO 8601 timestamp in UTC.
  - `sourceType` 'MANUAL' | 'ASSESSMENT' | 'WEBFORM' | 'INTEGRATION'
  - `rootCause` string — The root cause summary of the incident.
  - `notificationNeeded` 'YES' | 'NO' | 'UNKNOWN'
  - `attributeValues` object — A map of custom attribute field names to the list of values associated with each attribute. Each entry in the list can contain either an 'id' (for predefined options) or a 'value', depending on the attribute configuration. If any attribute value is missing in the JSON array, the existing value for that attribute will be overridden, and the attribute will have empty values.
  - `incidentAssigneeRequests` IncidentAssigneeRequest[] — A list of incident assignee requests, where each request includes an assignee's ID, optional email, and type (USER or GROUP).
    - `assigneeId` string, uuid, required — Incident User Assignee Id
    - `assigneeEmail` string, email — Email of the incident assignee. This field is valid only when the assignee type is "USER".
    - `type` 'USER' | 'GROUP' — Indicates whether the assignee is an individual user or a group of users.
  - `jurisdictions` IncidentJurisdictionCreateRequest[]
    - `jurisdictionId` string, uuid — Incident Jurisdiction Id
    - `countryCode` string, required — Three-digit country code of the jurisdiction.
    - `stateProvinceCode` string — State Province Code. **Required if countryCode is 'USA' or 'CAN'**.

## Response `200`

OK

- IncidentInformation
  - `id` string, uuid — Incident Identifier
  - `number` integer — Incident Number
  - `incidentTypeId` string, uuid — The unique identifier for the incident type.
  - `incidentTypeName` string — The name of the incident type.
  - `name` string — Incident Name
  - `description` string — Incident Description
  - `sourceType` 'MANUAL' | 'ASSESSMENT' | 'WEBFORM' | 'NONE' | 'INTEGRATION' — Creation Source
  - `assessmentLinks` AssessmentInformation[] — Source Assessment Link
    - `assessmentId` string, uuid, required — Assessment Identifier
    - `assessmentName` string — Assessment Name
    - `assessmentStatus` 'NOT_STARTED' | 'IN_PROGRESS' | 'UNDER_REVIEW' | 'COMPLETED' — Assessment Status
    - `primary` boolean
  - `orgGroupId` string, uuid — Organization Group Id
  - `orgGroupName` string — Organization Group Name
  - `rootCause` string — Root Cause
  - `dateOccurred` string, date-time — The date and time when the incident occurred, represented as an ISO 8601 timestamp in UTC.
  - `dateClosed` string, date-time — The date and time when the incident was closed, represented as an ISO 8601 timestamp in UTC.
  - `dateDiscovered` string, date-time — The date and time when the incident was discovered, represented as an ISO 8601 timestamp in UTC.
  - `deadline` string, date-time — The date by which the incident investigation or notification must be completed, represented as an ISO 8601 timestamp in UTC.
  - `createdBy` string, uuid — Incident Created User Id.
  - `creator` string — Incident Created User Name
  - `assigneeId` string, uuid — Incident User Assignee Id
  - `assigneeName` string — Incident User Assignee Name
  - `createdDT` string, date-time — The date and time when the incident was created, represented as an ISO 8601 timestamp in UTC.
  - `workflowId` string, uuid — Incident Workflow Id
  - `workflowName` string — Incident Workflow Name.
  - `incidentStageId` string, uuid — Incident Stage Id
  - `incidentStageName` string — Incident Stage Name
  - `incidentStageBadgeColor` string — The badge color of the incident workflow stage.
  - `notificationNeeded` 'YES' | 'NO' | 'UNKNOWN' — Incident Notification Needed
  - `incidentStatus` 'OPEN' | 'CLOSED'
  - `schemaId` string, uuid — The unique identifier of the custom attribute schema associated with the incident.
  - `updatedDT` string, date-time — The date and time when the incident was last updated, represented as an ISO 8601 timestamp in UTC.
  - `attributeValues` object — Custom Attributes
  - `incidentAssigneeInformation` IncidentAssigneeInformation[] — A list containing information about users or groups assigned to the incident
    - `assigneeId` string, uuid — Incident User Assignee Id
    - `assigneeName` string — Incident User Assignee Name
    - `type` 'USER' | 'GROUP' — Indicates whether the assignee is an individual user or a group of users.
  - `jurisdictions` IncidentJurisdictionGuidanceInformation[]
    - `jurisdictionId` string, uuid — Incident Jurisdiction Id
    - `regionName` string — Region Name
    - `countryName` string — Country Name
    - `countryCode` string — Country Code
    - `stateProvinceName` string — State Province Name
    - `stateProvinceCode` string — State Province Code
    - `urgency` 'LOW' | 'MEDIUM' | 'HIGH' | 'NONE' — Urgency
    - `notifyIndividual` 'NOTIFICATION_REQUIRED' | 'NOTIFICATION_NOT_REQUIRED' | 'NEEDS_MORE_INFO' — Individual Incident Guidance Notification State
    - `notifyIndividualDeadline` string, date-time — The recommended deadline by which an individual should be notified, represented as an ISO 8601 timestamp in UTC.
    - `notifyAuthority` 'NOTIFICATION_REQUIRED' | 'NOTIFICATION_NOT_REQUIRED' | 'NEEDS_MORE_INFO' — Guidance Notify Authority
    - `notifyAuthorityDeadline` string, date-time — The recommended notification deadline for an authority, in ISO 8601 UTC format.
    - `numberOfGuidances` integer — Number Of Guidances
    - `numberOfAcceptedGuidances` integer — Number Of Accepted Guidances
    - `numberOfAddressedGuidances` integer — Number Of Addressed Guidances
  - `closedSettingOn` boolean

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `429` — Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500` — Internal Server Error

---

[API](https://skmtc.net/onetrust/apis/platform-access-management.md) · [All operations](https://skmtc.net/onetrust/apis/platform-access-management/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/onetrust/platform-access-management/revisions/21de3aa0b170/schema)