In today's more and more interconnected world, cyber-attacks that involve several victims in more than one country (aka cross-border cases) become increasingly common -and so does cooperative international incident handling. Although this kind of joint effort constitutes a very helpful means for handling severe cases, it is also very complex and challenging.