Everyone is talking about "cyberwar", industrial espionage and data theft. Once attacks have been detected, it is important to act in a considered and organized manner. We therefore offer the workshop "Incident Response" which will provide an action basis for reacting to IT security incidents.