As well as being prepared to operationally and technically respond to an incident, organizations must also be prepared for the legal aspects of response. Private-sector organizations must be well versed in the response and notification processes and understand the how, what and why of the law enforcement/public agency interaction, such as when to engage them and the criticality of data preservation etc. Likewise the public-sector organizations need to fully understand the business drivers, priorities and procedures within the organizations they help protect. This mutual understanding of each other's missions is pivotal to positive and impactful collaboration and a successful investigation. This session will examine a number of examples identifying best practices and a framework for how these relationships can be built, developed and maintained.