When faced with a cyberattack, every minute counts. Beyond technical emergency measures, the relationship with law enforcement agencies becomes a key lever for an effective, coordinated response that complies with legal obligations. However, many organisations still approach this cooperation in a rush, without a clear framework or advance strategy. When and how should you alert the public prosecutor’s office, the police or the specialised gendarmerie? What information should be shared, in what form, and with what guarantees of confidentiality? How can you balance the requirements of the investigation, business recovery and crisis communication? Clarifying the legal, operational and organisational issues related to cyber crisis management in conjunction with the relevant authorities enables collaboration based on trust, responsiveness and compliance.