If NCIRCC experts need additional information about the incident, they may request it from you. In this case, the incident status changes to More information required in the NCIRCC integration section of the incident window. The following KUMA users receive email notifications about the status change: the user to whom the incident is assigned and the user who exported the incident to NCIRCC.
If an incident is assigned the "More information required" status in NCIRCC, the following actions are available for this incident in KUMA: