An IT security incident is a crisis in which the classical protection objectives of information security are threatened. The reputational damage that a successful hacker attack can cause to affected companies and organizations can be accordingly high. With a successful crisis communication, a reputational loss can be prevented and the trust given by customers and employees maintained. In the workshop "Crisis Communication of IT Security Incidents", the success factors of a successful crisis communication will be discussed and templates for press releases and stakeholder as well as employee communication developed.