Supplementing incident data on request

If NCIRCC experts need additional information about the incident, they may request it from you. In this case, the incident status changes to More information required in the NCIRCC integration section of the incident window. The following KUMA users receive email notifications about the status change: the user to whom the incident is assigned and the user who exported the incident to NCIRCC.

If an incident is assigned the "More information required" status in NCIRCC, the following actions are available for this incident in KUMA:

• Upload files to NCIRCC.
• Re-export the incident data to NCIRCC with updates or additions to the previously provided information. This action completes supplementing the incident data.