We successfully handle cyber attacks on large enterprises as Incident Response Leaders. We address the following areas: - Ransomware, APT, internal perpetrators - Digital Forensics - (Rapid) Reconstruction / Emergency Operations - Internal and external communication - Establishment of an efficient structure and process organization - Contact with authorities and insurance companies - Measures to improve security