compliance

Update incident

Update a compliance incident's status, impact, and corrective actions.

Required permission: compliance.incidents.manage.

patch/v1/projects/{project_id}/compliance/incidents/{incident_id}

Request

  • Base URL: https://api.connic.co
  • URL: https://api.connic.co/v1/projects/{project_id}/compliance/incidents/{incident_id}
  • Auth: HTTP bearer

Path parameters

project_idstring uuid required

ID of the project the API key belongs to.

incident_idstring uuid required

Incident ID from GET /compliance/incidents.

Request body

environment_idstring uuid nullable

Environment involved. Must be linked to the system if the system lists environments.

deployment_idstring uuid nullable

Deployment involved. Must be linked to the system if the system lists deployments.

run_idstring uuid nullable

Run involved. Its environment and deployment fill in omitted references and must match given ones.

titlestring nullable

Short summary of the incident.

descriptionstring nullable

What happened.

severity'low' | 'medium' | 'high' | 'critical' nullable

Internal severity rating.

status'open' | 'investigating' | 'contained' | 'resolved' | 'closed' nullable

Case status. resolved and closed set closed_at; closed requires an authority notification in notification_history.

awareness_atstring date-time nullable

When your organization first became aware of the incident. Changing it clears the deadline confirmation.

causal_link_status'unknown' | 'suspected' | 'confirmed' | 'ruled_out' nullable

Whether the AI system is linked to the cause of the incident.

affected_rightsstring[] nullable

Rights or interests affected.

member_statesstring[] nullable

EU Member States affected.

reportability_status'not_assessed' | 'not_reportable' | 'reportable' | 'reported' nullable

Whether the incident must be reported to an authority. reported requires an authority notification in notification_history.

reporting_deadlinestring date-time nullable

Reporting deadline your organization determined. Changing it clears the deadline confirmation.

deadline_basisstring nullable

Rule, decision or counsel instruction behind reporting_deadline. Changing it clears the deadline confirmation.

confirm_reporting_deadlineboolean nullable

true confirms reporting_deadline (requires the deadline and deadline_basis); false clears the confirmation.

containmentstring nullable

Containment measures taken.

investigationstring nullable

Investigation findings.

Response

Successful Response

idstring uuid required
project_idstring uuid required

Project the incident belongs to.

system_idstring uuid required

AI system the incident concerns.

environment_idstring uuid nullable required

Environment involved.

deployment_idstring uuid nullable required

Deployment involved.

run_idstring uuid nullable required

Run involved.

titlestring required

Short summary of the incident.

descriptionstring nullable required

What happened.

severity'low' | 'medium' | 'high' | 'critical' required

Internal severity rating.

status'open' | 'investigating' | 'contained' | 'resolved' | 'closed' required

Case status.

awareness_atstring date-time required

When your organization first became aware of the incident.

causal_link_status'unknown' | 'suspected' | 'confirmed' | 'ruled_out' required

Whether the AI system is linked to the cause of the incident.

affected_rightsstring[] required

Rights or interests affected.

member_statesstring[] required

EU Member States affected.

reportability_status'not_assessed' | 'not_reportable' | 'reportable' | 'reported' required

Whether the incident must be reported to an authority.

reporting_deadlinestring date-time nullable required

Reporting deadline your organization determined.

deadline_basisstring nullable required

Rule, decision or counsel instruction behind reporting_deadline.

deadline_confirmed_atstring date-time nullable required

When reporting_deadline was confirmed. Cleared when the deadline, awareness time or basis changes.

deadline_confirmed_bystring nullable required

ID of the user who confirmed the deadline.

containmentstring nullable required

Containment measures taken.

investigationstring nullable required

Investigation findings.

created_bystring required

ID of the user who recorded the incident.

updated_bystring required

ID of the user who last changed the incident.

created_atstring date-time required
updated_atstring date-time required
closed_atstring date-time nullable required

When the incident was resolved or closed. null while open.

Changes

No recorded changes to this operation across all 2 revisions of this API.