When an incident requires an expanded incident report narrative, who must complete it?